Changeset 5946 for trunk/wp-app.php

Timestamp:

08/26/2007 10:13:54 PM (17 years ago)

Author:

ryan

Message:

Escape parsed fields.

File:

• trunk/wp-app.php (modified) (3 diffs)

trunk/wp-app.php

@@ -421 +421 @@
         $post_status = ($publish) ? 'publish' : 'draft';
         $post_author = (int) $user->ID;
-        $post_title = $entry->title;
-        $post_content = $entry->content;
-        $post_excerpt = $entry->summary;
+        $post_title = $this->escape($entry->title);
+        $post_content = $this->escape($entry->content);
+        $post_excerpt = $this->escape($entry->summary);
         $post_date = current_time('mysql');
         $post_date_gmt = current_time('mysql', 1);
@@ -479 +479 @@
         extract($entry);
 
-        $post_title = $parsed->title;
-        $post_content = $parsed->content;
-        $post_excerpt = $parsed->summary;
+        $post_title = $this->escape($parsed->title);
+        $post_content = $this->escape($parsed->content);
+        $post_excerpt = $this->escape($parsed->summary);
 
         // let's not go backwards and make something draft again.
@@ -620 +620 @@
         extract($entry);
 
-        $post_title = $parsed->title;
-        $post_content = $parsed->content;
+        $post_title = $this->escape($parsed->title);
+        $post_content = $this->escape($parsed->content);
 
         $postdata = compact('ID', 'post_content', 'post_title', 'post_category', 'post_status', 'post_excerpt');