Changeset 24713 for trunk/wp-includes/comment.php

Timestamp:

07/16/2013 02:19:03 PM (8 years ago)

Author:

nacin

Message:

Use wp_slash() in places where we improperly used the DB API instead. see #21767.

File:

• trunk/wp-includes/comment.php (modified) (1 diff)

trunk/wp-includes/comment.php

@@ -1493 +1493 @@
 
     // Escape data pulled from DB.
-    $comment = esc_sql($comment);
+    $comment = wp_slash($comment);
 
     $old_status = $comment['comment_approved'];