Changeset 5946 for trunk/wp-app.php

Timestamp:

08/26/2007 10:13:54 PM (19 years ago)

Author:

ryan

Message:

Escape parsed fields.

File:

• trunk/wp-app.php (modified) (3 diffs)

trunk/wp-app.php

@@ -421 +421 @@
                 $post_status = ($publish) ? 'publish' : 'draft';
                 $post_author = (int) $user->ID;
-                $post_title = $entry->title;
-                $post_content = $entry->content;
-                $post_excerpt = $entry->summary;
+                $post_title = $this->escape($entry->title);
+                $post_content = $this->escape($entry->content);
+                $post_excerpt = $this->escape($entry->summary);
                 $post_date = current_time('mysql');
                 $post_date_gmt = current_time('mysql', 1);
@@ -479 +479 @@
                 extract($entry);
 
-                $post_title = $parsed->title;
-                $post_content = $parsed->content;
-                $post_excerpt = $parsed->summary;
+                $post_title = $this->escape($parsed->title);
+                $post_content = $this->escape($parsed->content);
+                $post_excerpt = $this->escape($parsed->summary);
 
                 // let's not go backwards and make something draft again.
@@ -620 +620 @@
                 extract($entry);
 
-                $post_title = $parsed->title;
-                $post_content = $parsed->content;
+                $post_title = $this->escape($parsed->title);
+                $post_content = $this->escape($parsed->content);
 
                 $postdata = compact('ID', 'post_content', 'post_title', 'post_category', 'post_status', 'post_excerpt');