mirror of
https://github.com/WordPress/WordPress.git
synced 2024-11-14 14:45:45 +01:00
Add escaping for quick edit saves. Props hailin. fixes #9822
git-svn-id: http://svn.automattic.com/wordpress/trunk@11343 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
parent
a99a8b886f
commit
acd92c27ab
@ -1062,7 +1062,10 @@ case 'inline-save':
|
|||||||
}
|
}
|
||||||
|
|
||||||
$data = &$_POST;
|
$data = &$_POST;
|
||||||
|
|
||||||
$post = get_post( $post_ID, ARRAY_A );
|
$post = get_post( $post_ID, ARRAY_A );
|
||||||
|
$post = add_magic_quotes($post); //since it is from db
|
||||||
|
|
||||||
$data['content'] = $post['post_content'];
|
$data['content'] = $post['post_content'];
|
||||||
$data['excerpt'] = $post['post_excerpt'];
|
$data['excerpt'] = $post['post_excerpt'];
|
||||||
|
|
||||||
@ -1084,7 +1087,6 @@ case 'inline-save':
|
|||||||
$data['ping_status'] = 'closed';
|
$data['ping_status'] = 'closed';
|
||||||
|
|
||||||
// update the post
|
// update the post
|
||||||
$_POST = $data;
|
|
||||||
edit_post();
|
edit_post();
|
||||||
|
|
||||||
$post = array();
|
$post = array();
|
||||||
|
Loading…
Reference in New Issue
Block a user