Make WordPress Core


Ignore:
Timestamp:
12/21/2006 10:10:04 AM (19 years ago)
Author:
markjaquith
Message:

new function for escaping within attributes: attribute_escape()

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/2.0/wp-login.php

    r4581 r4656  
    232232
    233233<form name="loginform" id="loginform" action="wp-login.php" method="post">
    234 <p><label><?php _e('Username:') ?><br /><input type="text" name="log" id="log" value="<?php echo wp_specialchars(stripslashes($user_login), 1); ?>" size="20" tabindex="1" /></label></p>
     234<p><label><?php _e('Username:') ?><br /><input type="text" name="log" id="log" value="<?php echo attribute_escape(stripslashes($user_login)); ?>" size="20" tabindex="1" /></label></p>
    235235<p><label><?php _e('Password:') ?><br /> <input type="password" name="pwd" id="pwd" value="" size="20" tabindex="2" /></label></p>
    236236<p>
     
    239239<p class="submit">
    240240    <input type="submit" name="submit" id="submit" value="<?php _e('Login'); ?> &raquo;" tabindex="4" />
    241     <input type="hidden" name="redirect_to" value="<?php echo wp_specialchars($redirect_to); ?>" />
     241    <input type="hidden" name="redirect_to" value="<?php echo attribute_escape($redirect_to); ?>" />
    242242</p>
    243243</form>
Note: See TracChangeset for help on using the changeset viewer.