Changeset 23591 for trunk/wp-includes/meta.php

Timestamp:

03/03/2013 04:30:38 PM (12 years ago)

Author:

ryan

Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

see #WP21767

File:

• trunk/wp-includes/meta.php (modified) (3 diffs)

trunk/wp-includes/meta.php

@@ -44 +44 @@
 
     // expected_slashed ($meta_key)
-    $meta_key = stripslashes($meta_key);
-    $meta_value = stripslashes_deep($meta_value);
+    $meta_key = wp_unslash($meta_key);
+    $meta_value = wp_unslash($meta_value);
     $meta_value = sanitize_meta( $meta_key, $meta_value, $meta_type );
 
@@ -115 +115 @@
 
     // expected_slashed ($meta_key)
-    $meta_key = stripslashes($meta_key);
+    $meta_key = wp_unslash($meta_key);
     $passed_value = $meta_value;
-    $meta_value = stripslashes_deep($meta_value);
+    $meta_value = wp_unslash($meta_value);
     $meta_value = sanitize_meta( $meta_key, $meta_value, $meta_type );
 
@@ -197 +197 @@
     $id_column = 'user' == $meta_type ? 'umeta_id' : 'meta_id';
     // expected_slashed ($meta_key)
-    $meta_key = stripslashes($meta_key);
-    $meta_value = stripslashes_deep($meta_value);
+    $meta_key = wp_unslash($meta_key);
+    $meta_value = wp_unslash($meta_value);
 
     $check = apply_filters( "delete_{$meta_type}_metadata", null, $object_id, $meta_key, $meta_value, $delete_all );