Changeset 6083

Timestamp:

09/11/2007 08:24:42 PM (11 years ago)

Author:

ryan

Message:

Fix option sanitization slashing. fixes #4949 for 2.2

Location:

branches/2.2

Files:

• wp-admin/options.php (modified) (1 diff)
• wp-includes/functions.php (modified) (1 diff)

branches/2.2/wp-admin/options.php

@@ -30 +30 @@
         foreach ($options as $option) {
             $option = trim($option);
-            $value = trim($_POST[$option]);
-            $value = sanitize_option($option, $value); // This does stripslashes on those that need it
+            $value = $_POST[$option];
+            if(!is_array($value))   $value = trim($value);
+            $value = stripslashes_deep($value);
             update_option($option, $value);
         }

branches/2.2/wp-includes/functions.php

@@ -311 +311 @@
 
     $safe_option_name = $wpdb->escape($option_name);
+    $newvalue = sanitize_option($option_name, $newvalue);
 
     if ( is_string($newvalue) )