Changeset 4656 for trunk/wp-admin/edit-form-advanced.php

Timestamp:

12/21/2006 10:10:04 AM (19 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• trunk/wp-admin/edit-form-advanced.php (modified) (1 diff)

trunk/wp-admin/edit-form-advanced.php

@@ -169 +169 @@
 <input name="referredby" type="hidden" id="referredby" value="<?php 
 if ( !empty($_REQUEST['popupurl']) )
-    echo wp_specialchars($_REQUEST['popupurl']);
+    echo attribute_escape(stripslashes($_REQUEST['popupurl']));
 else if ( url_to_postid(wp_get_referer()) == $post_ID )
     echo 'redo';
 else
-    echo wp_specialchars(wp_get_referer());
+    echo attribute_escape(stripslashes(wp_get_referer()));
 ?>" /></p>