Changeset 4657 for trunk/wp-admin/admin-functions.php
- Timestamp:
- 12/21/2006 10:45:58 AM (19 years ago)
- File:
-
- 1 edited
-
trunk/wp-admin/admin-functions.php (modified) (3 diffs)
Legend:
- Unmodified
- Added
- Removed
-
trunk/wp-admin/admin-functions.php
r4656 r4657 381 381 function get_user_to_edit( $user_id ) { 382 382 $user = new WP_User( $user_id ); 383 $user->user_login = attribute_escape($user->user_login);384 $user->user_email = attribute_escape($user->user_email);385 $user->user_url = attribute_escape($user->user_url);386 $user->first_name = attribute_escape($user->first_name);387 $user->last_name = attribute_escape($user->last_name);388 $user->display_name = attribute_escape( $user->display_name);389 $user->nickname = attribute_escape($user->nickname);390 $user->aim = attribute_escape($user->aim);391 $user->yim = attribute_escape($user->yim);392 $user->jabber = attribute_escape($user->jabber);393 $user->description = wp_specialchars( $user->description);383 $user->user_login = attribute_escape($user->user_login); 384 $user->user_email = attribute_escape($user->user_email); 385 $user->user_url = attribute_escape($user->user_url); 386 $user->first_name = attribute_escape($user->first_name); 387 $user->last_name = attribute_escape($user->last_name); 388 $user->display_name = attribute_escape($user->display_name); 389 $user->nickname = attribute_escape($user->nickname); 390 $user->aim = attribute_escape($user->aim); 391 $user->yim = attribute_escape($user->yim); 392 $user->jabber = attribute_escape($user->jabber); 393 $user->description = wp_specialchars($user->description); 394 394 395 395 return $user; … … 528 528 $link = get_link( $link_id ); 529 529 530 $link->link_url = attribute_escape($link->link_url);531 $link->link_name = attribute_escape($link->link_name);532 $link->link_image = attribute_escape($link->link_image);533 $link->link_description = attribute_escape( $link->link_description);534 $link->link_ notes = wp_specialchars( $link->link_notes);535 $link->link_r ss = attribute_escape( $link->link_rss);536 $link->link_ rel = attribute_escape( $link->link_rel);537 $link->post_category = $link->link_category;530 $link->link_url = attribute_escape($link->link_url); 531 $link->link_name = attribute_escape($link->link_name); 532 $link->link_image = attribute_escape($link->link_image); 533 $link->link_description = attribute_escape($link->link_description); 534 $link->link_rss = attribute_escape($link->link_rss); 535 $link->link_rel = attribute_escape($link->link_rel); 536 $link->link_notes = wp_specialchars($link->link_notes); 537 $link->post_category = $link->link_category; 538 538 539 539 return $link; … … 912 912 913 913 $key_js = js_escape( $entry['meta_key'] ); 914 $entry['meta_key'] = attribute_escape($entry['meta_key']);915 $entry['meta_value'] = attribute_escape( $entry['meta_value']);914 $entry['meta_key'] = attribute_escape($entry['meta_key']); 915 $entry['meta_value'] = attribute_escape($entry['meta_value']); 916 916 $r .= "\n\t<tr id='meta-{$entry['meta_id']}' class='$style'>"; 917 917 $r .= "\n\t\t<td valign='top'><input name='meta[{$entry['meta_id']}][key]' tabindex='6' type='text' size='20' value='{$entry['meta_key']}' /></td>";
Note: See TracChangeset
for help on using the changeset viewer.