Changeset 4656 for branches/2.0/wp-admin/categories.php

Timestamp:

12/21/2006 10:10:04 AM (20 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• branches/2.0/wp-admin/categories.php (modified) (2 diffs)

branches/2.0/wp-admin/categories.php

@@ -70 +70 @@
                 <tr>
                   <th width="33%" scope="row"><?php _e('Category name:') ?></th>
-                  <td width="67%"><input name="cat_name" type="text" value="<?php echo wp_specialchars($category->cat_name); ?>" size="40" /> <input type="hidden" name="action" value="editedcat" />
+                  <td width="67%"><input name="cat_name" type="text" value="<?php echo attribute_escape($category->cat_name); ?>" size="40" /> <input type="hidden" name="action" value="editedcat" />
 <input type="hidden" name="cat_ID" value="<?php echo $category->cat_ID ?>" /></td>
                 </tr>
                 <tr>
                         <th scope="row"><?php _e('Category slug:') ?></th>
-                        <td><input name="category_nicename" type="text" value="<?php echo wp_specialchars($category->category_nicename); ?>" size="40" /></td>
+                        <td><input name="category_nicename" type="text" value="<?php echo attribute_escape($category->category_nicename); ?>" size="40" /></td>
                 </tr>
                 <tr>
@@ -87 +87 @@
                 <tr>
                         <th scope="row"><?php _e('Description:') ?></th>
-                        <td><textarea name="category_description" rows="5" cols="50" style="width: 97%;"><?php echo wp_specialchars($category->category_description, 1); ?></textarea></td>
+                        <td><textarea name="category_description" rows="5" cols="50" style="width: 97%;"><?php echo wp_specialchars($category->category_description); ?></textarea></td>
                 </tr>
                 </table>