From baf6e7b6ae879a53cedb176400189f35e86b2c8a Mon Sep 17 00:00:00 2001 From: ryan Date: Sat, 29 Dec 2007 19:20:15 +0000 Subject: [PATCH] Don't echo posted content. Specialchars all other displayed info. git-svn-id: http://svn.automattic.com/wordpress/trunk@6524 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-mail.php | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/wp-mail.php b/wp-mail.php index 7994babdee..6ec13abef0 100644 --- a/wp-mail.php +++ b/wp-mail.php @@ -182,8 +182,7 @@ for ($i=1; $i <= $count; $i++) : do_action('publish_phone', $post_ID); echo "\n

Author: " . wp_specialchars($post_author) . "

"; - echo "\n

Posted title: " . sanitize_post_field('post_title', $post_title, $post_ID, 'display') . "
"; - echo "\nPosted content:

". sanitize_post_field('post_content', $post_content, $post_ID, 'display') . '

'; + echo "\n

Posted title: " . wp_specialchars($post_title) . "
"; if(!$pop3->delete($i)) { echo '

Oops '.wp_specialchars($pop3->ERROR).'

';