Changeset 6083

Timestamp:

09/11/2007 08:24:42 PM (19 years ago)

Author:

ryan

Message:

Fix option sanitization slashing. fixes #4949 for 2.2

Location:

branches/2.2

Files:

• wp-admin/options.php (modified) (1 diff)
• wp-includes/functions.php (modified) (1 diff)

branches/2.2/wp-admin/options.php

@@ -30 +30 @@
                 foreach ($options as $option) {
                         $option = trim($option);
-                        $value = trim($_POST[$option]);
-                        $value = sanitize_option($option, $value); // This does stripslashes on those that need it
+                        $value = $_POST[$option];
+                        if(!is_array($value))   $value = trim($value);
+                        $value = stripslashes_deep($value);
                         update_option($option, $value);
                 }

branches/2.2/wp-includes/functions.php

@@ -311 +311 @@
 
         $safe_option_name = $wpdb->escape($option_name);
+        $newvalue = sanitize_option($option_name, $newvalue);
 
         if ( is_string($newvalue) )