Changeset 2699 for trunk/wp-admin/import-textpattern.php

Timestamp:

07/05/2005 08:47:22 PM (21 years ago)

Author:

ryan

Message:

Use wpdb->escape instead of addslashes to prepare DB bound data.

File:

• trunk/wp-admin/import-textpattern.php (modified) (1 diff)

trunk/wp-admin/import-textpattern.php

@@ -99 +99 @@
         $posted = date('Y-m-d H:i:s', $timestamp);
         
-        $content = addslashes($post['Body_html']);
-        $title = addslashes($post['Title']);
+        $content = $wpdb->escape($post['Body_html']);
+        $title = $wpdb->escape($post['Title']);
         $post_name = sanitize_title($title);