Changeset 4656 for branches/2.0/wp-admin/link-manager.php

Timestamp:

12/21/2006 10:10:04 AM (19 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• branches/2.0/wp-admin/link-manager.php (modified) (2 diffs)

branches/2.0/wp-admin/link-manager.php

@@ -328 +328 @@
     <input type="hidden" name="link_id" value="" />
     <input type="hidden" name="action" value="" />
-    <input type="hidden" name="order_by" value="<?php echo wp_specialchars($order_by, 1); ?>" />
+    <input type="hidden" name="order_by" value="<?php echo attribute_escape($order_by); ?>" />
     <input type="hidden" name="cat_id" value="<?php echo (int) $cat_id ?>" />
   <table id="the-list-x" width="100%" cellpadding="3" cellspacing="3">
@@ -358 +358 @@
     if ($links) {
         foreach ($links as $link) {
-            $link->link_name = wp_specialchars($link->link_name);
+            $link->link_name = attribute_escape($link->link_name);
             $link->link_category = wp_specialchars($link->link_category);
             $link->link_description = wp_specialchars($link->link_description);
-            $link->link_url = wp_specialchars($link->link_url);
+            $link->link_url = attribute_escape($link->link_url);
             $short_url = str_replace('http://', '', $link->link_url);
             $short_url = str_replace('www.', '', $short_url);