Upstream/WordPress
1
0
Fork 0
mirror of https://github.com/WordPress/WordPress.git synced 2024-11-14 14:45:45 +01:00
Code Issues Projects Releases Wiki Activity

Sanitize output of previous_posts() and next_posts(). Props Alex Concha for the report.

Browse Source 
git-svn-id: http://svn.automattic.com/wordpress/branches/2.1@5046 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
markjaquith 2007-03-16 08:04:44 +00:00
parent 8cf0feaa86
commit 600b96dc9a
1 changed files with 12 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
wp-includes/link-template.php
View File

@ -379,7 +379,7 @@ function next_post_link($format='%link »', $link='%title', $in_same_cat =
function get_pagenum_link($pagenum = 1) {
global $wp_rewrite;
$qstr = wp_specialchars($_SERVER['REQUEST_URI']);
$qstr = $_SERVER['REQUEST_URI'];
$page_querystring = "paged";
$page_modstring = "page/";
@ -446,7 +446,7 @@ function get_pagenum_link($pagenum = 1) {
return $qstr;
}
function next_posts($max_page = 0) { // original by cfactor at cooltux.org
function get_next_posts_page_link($max_page = 0) {
global $paged, $pagenow;
if ( !is_single() ) {
@ -454,10 +454,14 @@ function next_posts($max_page = 0) { // original by cfactor at cooltux.org
$paged = 1;
$nextpage = intval($paged) + 1;
if ( !$max_page || $max_page >= $nextpage )
echo get_pagenum_link($nextpage);
return get_pagenum_link($nextpage);
}
}
function next_posts($max_page = 0) {
echo attribute_escape(get_next_posts_page_link($max_page));
}
function next_posts_link($label='Next Page »', $max_page=0) {
global $paged, $wpdb, $wp_query;
if ( !$max_page ) {
@ -473,18 +477,20 @@ function next_posts_link($label='Next Page »', $max_page=0) {
}
}
function previous_posts() { // original by cfactor at cooltux.org
function get_previous_posts_page_link() {
global $paged, $pagenow;
if ( !is_single() ) {
$nextpage = intval($paged) - 1;
if ( $nextpage < 1 )
$nextpage = 1;
echo get_pagenum_link($nextpage);
return get_pagenum_link($nextpage);
}
}
function previous_posts() {
echo attribute_escape(get_previous_posts_page_link());
}
function previous_posts_link($label='&laquo; Previous Page') {
global $paged;