WordPress.org

Make WordPress Core


Ignore:
Timestamp:
07/27/2017 02:54:09 AM (10 months ago)
Author:
johnbillion
Message:

Users: Re-add entity decoding to the site name before it's used in the email address change confirmation email.

This was accidentally removed in [41163].

See #40015, #16470

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-includes/user.php

    r41163 r41165  
    26762676        $content = str_replace( '###ADMIN_URL###', esc_url( admin_url( 'profile.php?newuseremail=' . $hash ) ), $content );
    26772677        $content = str_replace( '###EMAIL###', $_POST['email'], $content );
    2678         $content = str_replace( '###SITENAME###', get_site_option( 'site_name' ), $content );
     2678        $content = str_replace( '###SITENAME###', wp_specialchars_decode( get_site_option( 'site_name' ), ENT_QUOTES ), $content );
    26792679        $content = str_replace( '###SITEURL###', network_home_url(), $content );
    26802680
Note: See TracChangeset for help on using the changeset viewer.