Changeset 2699 for trunk/wp-settings.php

Timestamp:

07/05/2005 08:47:22 PM (21 years ago)

Author:

ryan

Message:

Use wpdb->escape instead of addslashes to prepare DB bound data.

File:

• trunk/wp-settings.php (modified) (1 diff)

trunk/wp-settings.php

@@ -137 +137 @@
 require_once(ABSPATH . WPINC . '/locale.php');
 
-if ( !get_magic_quotes_gpc() ) {
-        $_GET    = add_magic_quotes($_GET   );
-        $_POST   = add_magic_quotes($_POST  );
-        $_COOKIE = add_magic_quotes($_COOKIE);
-        $_SERVER = add_magic_quotes($_SERVER);
+// If already slashed, strip.
+if ( get_magic_quotes_gpc() ) {
+        $_GET    = stripslashes($_GET   );
+        $_POST   = stripslashes($_POST  );
+        $_COOKIE = stripslashes($_COOKIE);
+        $_SERVER = stripslashes($_SERVER);
 }
+
+// Escape with wpdb.
+$_GET    = add_magic_quotes($_GET   );
+$_POST   = add_magic_quotes($_POST  );
+$_COOKIE = add_magic_quotes($_COOKIE);
+$_SERVER = add_magic_quotes($_SERVER);
 
 function shutdown_action_hook() {