Changeset 4656 for branches/2.0/wp-admin/options.php

Timestamp:

12/21/2006 10:10:04 AM (15 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• branches/2.0/wp-admin/options.php (modified) (1 diff)

branches/2.0/wp-admin/options.php

@@ -183 +183 @@
   </table>
 <?php $options_to_update = implode(',', $options_to_update); ?>
-<p class="submit"><input type="hidden" name="page_options" value="<?php echo wp_specialchars($options_to_update, true); ?>" /><input type="submit" name="Update" value="<?php _e('Update Options &raquo;') ?>" /></p>
+<p class="submit"><input type="hidden" name="page_options" value="<?php echo attribute_escape($options_to_update); ?>" /><input type="submit" name="Update" value="<?php _e('Update Options &raquo;') ?>" /></p>
   </form>
 </div>