Changeset 2699 for trunk/wp-admin/import-mt.php

Timestamp:

07/05/2005 08:47:22 PM (21 years ago)

Author:

ryan

Message:

Use wpdb->escape instead of addslashes to prepare DB bound data.

File:

• trunk/wp-admin/import-mt.php (modified) (10 diffs)

trunk/wp-admin/import-mt.php

@@ -207 +207 @@
         // We want the excerpt
         preg_match("|-----\nEXCERPT:(.*)|s", $post, $excerpt);
-        $excerpt = addslashes(trim($excerpt[1]));
+        $excerpt = $wpdb->escape(trim($excerpt[1]));
         $post = preg_replace("|(-----\nEXCERPT:.*)|s", '', $post);
         
@@ -219 +219 @@
         preg_match("|-----\nBODY:(.*)|s", $post, $body);
         $body = trim($body[1]);
-        $post_content = addslashes($body . $extended);
+        $post_content = $wpdb->escape($body . $extended);
         $post = preg_replace("|(-----\nBODY:.*)|s", '', $post);
         
@@ -236 +236 @@
                 break;
             case 'TITLE':
-                $post_title = addslashes($value);
+                $post_title = $wpdb->escape($value);
                                 echo '<i>'.stripslashes($post_title).'</i>... ';
                                 $post_name = sanitize_title($post_title);
@@ -265 +265 @@
                 break;
             case 'PRIMARY CATEGORY':
-                                $post_categories[] = addslashes($value);
+                                $post_categories[] = $wpdb->escape($value);
                 break;
             case 'CATEGORY':    
-                                $post_categories[] = addslashes($value);
+                                $post_categories[] = $wpdb->escape($value);
                 break;
                         case 'DATE':
@@ -324 +324 @@
                         // Author
                         preg_match("|AUTHOR:(.*)|", $comment, $comment_author);
-                        $comment_author = addslashes(trim($comment_author[1]));
+                        $comment_author = $wpdb->escape(trim($comment_author[1]));
                         $comment = preg_replace('|(\n?AUTHOR:.*)|', '', $comment);
 
                         preg_match("|EMAIL:(.*)|", $comment, $comment_email);
-                        $comment_email = addslashes(trim($comment_email[1]));
+                        $comment_email = $wpdb->escape(trim($comment_email[1]));
                         $comment = preg_replace('|(\n?EMAIL:.*)|', '', $comment);
 
@@ -336 +336 @@
 
                         preg_match("|URL:(.*)|", $comment, $comment_url);
-                        $comment_url = addslashes(trim($comment_url[1]));
+                        $comment_url = $wpdb->escape(trim($comment_url[1]));
                         $comment = preg_replace('|(\n?URL:.*)|', '', $comment);
 
@@ -344 +344 @@
                         $comment = preg_replace('|(\n?DATE:.*)|', '', $comment);
 
-                        $comment_content = addslashes(trim($comment));
+                        $comment_content = $wpdb->escape(trim($comment));
                         $comment_content = str_replace('-----', '', $comment_content);
 
@@ -365 +365 @@
                         // 'Author'
                         preg_match("|BLOG NAME:(.*)|", $ping, $comment_author);
-                        $comment_author = addslashes(trim($comment_author[1]));
+                        $comment_author = $wpdb->escape(trim($comment_author[1]));
                         $ping = preg_replace('|(\n?BLOG NAME:.*)|', '', $ping);
 
@@ -375 +375 @@
 
                         preg_match("|URL:(.*)|", $ping, $comment_url);
-                        $comment_url = addslashes(trim($comment_url[1]));
+                        $comment_url = $wpdb->escape(trim($comment_url[1]));
                         $ping = preg_replace('|(\n?URL:.*)|', '', $ping);
 
@@ -384 +384 @@
       
                         preg_match("|TITLE:(.*)|", $ping, $ping_title);
-                        $ping_title = addslashes(trim($ping_title[1]));
+                        $ping_title = $wpdb->escape(trim($ping_title[1]));
                         $ping = preg_replace('|(\n?TITLE:.*)|', '', $ping);
 
-                        $comment_content = addslashes(trim($ping));
+                        $comment_content = $wpdb->escape(trim($ping));
                         $comment_content = str_replace('-----', '', $comment_content);