Changeset 44070 for branches/4.0/src/wp-admin/post.php

Timestamp:

12/13/2018 01:56:35 AM (6 years ago)

Author:

pento

Message:

Editor: Remove unwanted fields before saving posts.

The meta_input, file, and guid fields are not intended to be updated through user input.

Merges [44047] to the 4.0 branch.

Location:

branches/4.0

Files:

• . (modified) (1 prop)
• src/wp-admin/post.php (modified) (1 diff)

branches/4.0/src/wp-admin/post.php

@@ -228 +228 @@
     // Update the thumbnail filename
     $newmeta = wp_get_attachment_metadata( $post_id, true );
-    $newmeta['thumb'] = $_POST['thumb'];
+    $newmeta['thumb'] = wp_basename( $_POST['thumb'] );
 
     wp_update_attachment_metadata( $post_id, $newmeta );