Changeset 4656 for trunk/wp-content/themes/default/comments-popup.php

Timestamp:

12/21/2006 10:10:04 AM (19 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• trunk/wp-content/themes/default/comments-popup.php (modified) (1 diff)

trunk/wp-content/themes/default/comments-popup.php

@@ -61 +61 @@
        <label for="author">Name</label>
     <input type="hidden" name="comment_post_ID" value="<?php echo $id; ?>" />
-    <input type="hidden" name="redirect_to" value="<?php echo wp_specialchars($_SERVER["REQUEST_URI"]); ?>" />
+    <input type="hidden" name="redirect_to" value="<?php echo attribute_escape($_SERVER["REQUEST_URI"]); ?>" />
     </p>