Changeset 4656 for branches/2.0/wp-admin/upgrade.php

Timestamp:

12/21/2006 10:10:04 AM (19 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• branches/2.0/wp-admin/upgrade.php (modified) (2 diffs)

branches/2.0/wp-admin/upgrade.php

@@ -68 +68 @@
 
     case 0:
-    $goback = wp_specialchars(wp_get_referer());
+    $goback = attribute_escape(stripslashes(wp_get_referer()));
 ?> 
 <p><?php _e('This file upgrades you from any previous version of WordPress to the latest. It may take a while though, so be patient.'); ?></p> 
@@ -87 +87 @@
         $backto = __get_option('home');
     else
-        $backto = wp_specialchars( $_GET['backto'] , 1 );
+        $backto = attribute_escape(stripslashes($_GET['backto']));
 ?> 
 <h2><?php _e('Step 1'); ?></h2>