Changeset 6500 for trunk/wp-mail.php

Timestamp:

12/27/2007 08:08:11 AM (19 years ago)

Author:

ryan

Message:

Add some sanitization

File:

• trunk/wp-mail.php (modified) (1 diff)

trunk/wp-mail.php

@@ -182 +182 @@
         do_action('publish_phone', $post_ID);
 
-        echo "\n<p><b>Author:</b> $post_author</p>";
-        echo "\n<p><b>Posted title:</b> $post_title<br />";
-        echo "\n<b>Posted content:</b><br /><pre>".$content.'</pre></p>';
+        echo "\n<p><b>Author:</b> " . wp_specialchars($post_author) . "</p>";
+        echo "\n<p><b>Posted title:</b> " . sanitize_post_field('post_title', $post_title, $post_ID, 'display') . "<br />";
+        echo "\n<b>Posted content:</b><br /><pre>". sanitize_post_field('post_content', $post_content, $post_ID, 'display') . '</pre></p>';
 
         if(!$pop3->delete($i)) {
-                echo '<p>Oops '.$pop3->ERROR.'</p></div>';
+                echo '<p>Oops '.wp_specialchars($pop3->ERROR).'</p></div>';
                 $pop3->reset();
                 exit;