Make WordPress Core

Context Navigation

← Previous Change
Next Change →

Changeset 2699 for trunk/wp-admin/import-textpattern.php

Timestamp:

07/05/2005 08:47:22 PM (21 years ago)

Author:

ryan

Message:

Use wpdb->escape instead of addslashes to prepare DB bound data.

File:

: 1 edited

trunk/wp-admin/import-textpattern.php (modified) (1 diff)

Legend:

: Unmodified
: Added
: Removed

trunk/wp-admin/import-textpattern.php

-              r2687
+              r2699
         $posted = date('Y-m-d H:i:s', $timestamp);
         $content = addslashes($post['Body_html']);
         $title = addslashes($post['Title']);
+        $content = $wpdb->escape($post['Body_html']);
+        $title = $wpdb->escape($post['Title']);
         $post_name = sanitize_title($title);

Note: See TracChangeset for help on using the changeset viewer.

Download in other formats: