Changeset 5723

Timestamp:

06/18/2007 04:28:11 PM (19 years ago)

Author:

ryan

Message:

Prevent editing of protected meta keys.

File:

• trunk/wp-admin/includes/post.php (modified) (3 diffs)

trunk/wp-admin/includes/post.php

@@ -337 +337 @@
         $post_ID = (int) $post_ID;
 
+        $protected = array( '_wp_attached_file', '_wp_attachment_metadata', '_wp_old_slug' );
+
         $metakeyselect = $wpdb->escape( stripslashes( trim( $_POST['metakeyselect'] ) ) );
         $metakeyinput = $wpdb->escape( stripslashes( trim( $_POST['metakeyinput'] ) ) );
@@ -351 +353 @@
                 if ( $metakeyinput)
                         $metakey = $metakeyinput; // default
+
+                if ( in_array($metakey, $protected) )
+                        return false;
 
                 $result = $wpdb->query( "
@@ -406 +411 @@
 function update_meta( $mid, $mkey, $mvalue ) {
         global $wpdb;
+
+        $protected = array( '_wp_attached_file', '_wp_attachment_metadata', '_wp_old_slug' );
+
+        if ( in_array($mkey, $protected) )
+                return false;
+
         $mvalue = maybe_serialize( stripslashes( $mvalue ));
         $mvalue = $wpdb->escape( $mvalue );