Changeset 3907 for trunk/wp-admin/edit-page-form.php

Timestamp:

06/24/2006 01:28:08 AM (20 years ago)

Author:

ryan

Message:

js_escape() in onclicks. fixes #2851

File:

• trunk/wp-admin/edit-page-form.php (modified) (1 diff)

trunk/wp-admin/edit-page-form.php

@@ -186 +186 @@
 <?php if ('edit' == $action) :
         if ( current_user_can('delete_page', $post->ID) ) ?>
-                <input name="deletepost" class="delete" type="submit" id="deletepost" tabindex="10" value="<?php _e('Delete this page') ?>" <?php echo "onclick=\"return confirm('" . sprintf(__("You are about to delete this page \'%s\'\\n  \'Cancel\' to stop, \'OK\' to delete."), $wpdb->escape($post->post_title) ) . "')\""; ?> />
+                <input name="deletepost" class="delete" type="submit" id="deletepost" tabindex="10" value="<?php _e('Delete this page') ?>" <?php echo "onclick=\"return confirm('" . sprintf(__("You are about to delete this page \'%s\'\\n  \'Cancel\' to stop, \'OK\' to delete."), js_escape($post->post_title) ) . "')\""; ?> />
 <?php endif; ?>
 </form>