Changeset 4656 for branches/2.0/wp-admin/edit-form-advanced.php

Timestamp:

12/21/2006 10:10:04 AM (18 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• branches/2.0/wp-admin/edit-form-advanced.php (modified) (1 diff)

branches/2.0/wp-admin/edit-form-advanced.php

@@ -212 +212 @@
 <input name="referredby" type="hidden" id="referredby" value="<?php 
 if ( !empty($_REQUEST['popupurl']) )
-    echo wp_specialchars($_REQUEST['popupurl']);
-else if ( url_to_postid(wp_get_referer()) == $post_ID )
+    echo attribute_escape(stripslashes($_REQUEST['popupurl']));
+else if ( url_to_postid(stripslashes(wp_get_referer())) == $post_ID )
     echo 'redo';
 else
-    echo wp_specialchars(wp_get_referer());
+    echo attribute_escape(stripslashes(wp_get_referer()));
 ?>" /></p>