Changeset 4656 for trunk/wp-login.php

Timestamp:

12/21/2006 10:10:04 AM (20 years ago)

Author:

markjaquith

Message:

new function for escaping within attributes: attribute_escape()

File:

• trunk/wp-login.php (modified) (4 diffs)

trunk/wp-login.php

@@ -139 +139 @@
         <p>
                 <label><?php _e('Username:') ?><br />
-                <input type="text" name="user_login" id="user_login" class="input" value="<?php echo wp_specialchars(stripslashes($_POST['user_login']), 1); ?>" size="20" tabindex="10" /></label>
+                <input type="text" name="user_login" id="user_login" class="input" value="<?php echo attribute_escape(stripslashes($_POST['user_login'])); ?>" size="20" tabindex="10" /></label>
         </p>
         <p>
                 <label><?php _e('E-mail:') ?><br />
-                <input type="text" name="user_email" id="user_email" class="input" value="<?php echo wp_specialchars(stripslashes($_POST['user_email']), 1); ?>" size="25" tabindex="20" /></label>
+                <input type="text" name="user_email" id="user_email" class="input" value="<?php echo attribute_escape(stripslashes($_POST['user_email'])); ?>" size="25" tabindex="20" /></label>
         </p>
 <?php do_action('lostpassword_form'); ?>
@@ -258 +258 @@
         <p>
                 <label><?php _e('Username:') ?><br />
-                <input type="text" name="user_login" id="user_login" class="input" value="<?php echo wp_specialchars(stripslashes($user_login), 1); ?>" size="20" tabindex="10" /></label>
+                <input type="text" name="user_login" id="user_login" class="input" value="<?php echo attribute_escape(stripslashes($user_login)); ?>" size="20" tabindex="10" /></label>
         </p>
         <p>
                 <label><?php _e('E-mail:') ?><br />
-                <input type="text" name="user_email" id="user_email" class="input" value="<?php echo wp_specialchars(stripslashes($user_email), 1); ?>" size="25" tabindex="20" /></label>
+                <input type="text" name="user_email" id="user_email" class="input" value="<?php echo attribute_escape(stripslashes($user_email)); ?>" size="25" tabindex="20" /></label>
         </p>
 <?php do_action('register_form'); ?>
@@ -345 +345 @@
         <p>
                 <label><?php _e('Username:') ?><br />
-                <input type="text" name="log" id="user_login" class="input" value="<?php echo wp_specialchars(stripslashes($user_login), 1); ?>" size="20" tabindex="10" /></label>
+                <input type="text" name="log" id="user_login" class="input" value="<?php echo attribute_escape(stripslashes($user_login)); ?>" size="20" tabindex="10" /></label>
         </p>
         <p>
@@ -355 +355 @@
         <p class="submit">
                 <input type="submit" name="submit" id="submit" value="<?php _e('Login'); ?> &raquo;" tabindex="100" />
-                <input type="hidden" name="redirect_to" value="<?php echo wp_specialchars($redirect_to); ?>" />
+                <input type="hidden" name="redirect_to" value="<?php echo attribute_escape($redirect_to); ?>" />
         </p>
 </form>