Ticket #2907: admin-validation-cleanup.diff

File admin-validation-cleanup.diff, 6.5 kB (added by leftjustified, 2 years ago)

patch for 2.0.4

  • wp-admin/edit-form-advanced.php

    old new  
    156156</fieldset> 
    157157 
    158158<script type="text/javascript"> 
    159 <!-- 
     159// <![CDATA[ 
    160160edCanvas = document.getElementById('content'); 
    161161<?php if ( user_can_richedit() ) : ?> 
    162162// This code is meant to allow tabbing from Title to Post (TinyMCE). 
     
    191191                        } 
    192192                } 
    193193<?php endif; ?> 
    194 //--
     194// ]]
    195195</script> 
    196196 
    197197<?php echo $form_pingback ?> 
  • wp-admin/edit-page-form.php

    old new  
    3737<input type="hidden" name="post_status" value="static" /> 
    3838 
    3939<script type="text/javascript"> 
    40 <!-- 
     40// <![CDATA[ 
    4141function focusit() { // focus on first input field 
    4242        document.post.title.focus(); 
    4343} 
    4444addLoadEvent(focusit); 
    45 //--
     45// ]]
    4646</script> 
    4747<div id="poststuff"> 
    4848 
     
    7474</fieldset> 
    7575 
    7676<?php if ( 0 != count( get_page_templates() ) ) { ?> 
    77 <fieldset id="pageparent" class="dbx-box"> 
     77<fieldset id="pagetemplate" class="dbx-box"> 
    7878<h3 class="dbx-handle"><?php _e('Page Template:') ?></h3>  
    7979<div class="dbx-content"><p><select name="page_template"> 
    8080                <option value='default'><?php _e('Default Template'); ?></option> 
  • wp-admin/inline-uploading.php

    old new  
    238238                        $xpadding = (128 - $image['uwidth']) / 2; 
    239239                        $ypadding = (96 - $image['uheight']) / 2; 
    240240                        $style .= "#target{$ID} img { padding: {$ypadding}px {$xpadding}px; }\n"; 
    241                         $title = htmlentities($image['post_title'], ENT_QUOTES); 
     241                        $title = wp_specialchars($image['post_title'], ENT_QUOTES); 
    242242                        $script .= "aa[{$ID}] = '<a id=\"p{$ID}\" rel=\"attachment\" class=\"imagelink\" href=\"$href\" onclick=\"doPopup({$ID});return false;\" title=\"{$title}\">'; 
    243243ab[{$ID}] = '<a class=\"imagelink\" href=\"{$image['guid']}\" onclick=\"doPopup({$ID});return false;\" title=\"{$title}\">'; 
    244244imga[{$ID}] = '<img id=\"image{$ID}\" src=\"$src\" alt=\"{$title}\" $height_width />'; 
     
    258258</div> 
    259259"; 
    260260                } else { 
    261                         $title = htmlentities($attachment['post_title'], ENT_QUOTES); 
     261                        $title = wp_specialchars($attachment['post_title'], ENT_QUOTES); 
    262262                        $filename = basename($attachment['guid']); 
    263263                        $icon = get_attachment_icon($ID); 
    264264                        $toggle_icon = "<a id=\"I{$ID}\" onclick=\"toggleOtherIcon({$ID});return false;\" href=\"javascript:void()\">$__using_title</a>"; 
     
    299299<html xmlns="http://www.w3.org/1999/xhtml"> 
    300300<head> 
    301301<meta http-equiv="Content-Type" content="<?php bloginfo('html_type'); ?>; charset=<?php echo get_settings('blog_charset'); ?>" /> 
     302<title></title> 
    302303<meta http-equiv="imagetoolbar" content="no" /> 
    303304<script type="text/javascript"> 
     305// <![CDATA[ 
    304306/* Define any variables we'll need, such as alternate URLs. */ 
    305307<?php echo $script; ?> 
    306308function htmldecode(st) { 
     
    438440        else 
    439441                win.edInsertContent(win.edCanvas, h); 
    440442} 
     443// ]]> 
    441444</script> 
    442445<style type="text/css"> 
    443446<?php if ( $action == 'links' ) : ?> 
     
    678681</div> 
    679682<?php elseif ( $action == 'upload' ) : ?> 
    680683<div class="tip"></div> 
    681 <form enctype="multipart/form-data" id="uploadForm" method="POST" action="<?php echo basename(__FILE__); ?>"> 
     684<form enctype="multipart/form-data" id="uploadForm" method="post" action="<?php echo basename(__FILE__); ?>"> 
    682685<table style="width:99%;"> 
    683686<tr> 
    684687<th scope="row" align="right"><label for="upload"><?php _e('File:'); ?></label></th> 
     
    709712</td> 
    710713</tr> 
    711714</table> 
    712 </div> 
    713715</form> 
    714716<?php elseif ( $action == 'links' ) : ?> 
    715717<div id="links"> 
  • wp-admin/moderation.php

    old new  
    152152<a href="<?php echo get_permalink($comment->comment_post_ID); ?>"><?php _e('View Post') ?></a> |  
    153153<?php  
    154154echo " <a href=\"" . wp_nonce_url("post.php?action=deletecomment&amp;p=".$comment->comment_post_ID."&amp;comment=".$comment->comment_ID, 'delete-comment_' . $comment->comment_ID) . "\" onclick=\"return deleteSomething( 'comment', $comment->comment_ID, '" . __("You are about to delete this comment.\\n&quot;Cancel&quot; to stop, &quot;OK&quot; to delete.") . "' );\">" . __('Delete just this comment') . "</a> | "; ?>  <?php _e('Bulk action:') ?> 
    155         <input type="radio" name="comment[<?php echo $comment->comment_ID; ?>]" id="comment[<?php echo $comment->comment_ID; ?>]-approve" value="approve" /> <label for="comment[<?php echo $comment->comment_ID; ?>]-approve"><?php _e('Approve') ?></label> 
    156         <input type="radio" name="comment[<?php echo $comment->comment_ID; ?>]" id="comment[<?php echo $comment->comment_ID; ?>]-spam" value="spam" /> <label for="comment[<?php echo $comment->comment_ID; ?>]-spam"><?php _e('Spam') ?></label> 
    157         <input type="radio" name="comment[<?php echo $comment->comment_ID; ?>]" id="comment[<?php echo $comment->comment_ID; ?>]-delete" value="delete" /> <label for="comment[<?php echo $comment->comment_ID; ?>]-delete"><?php _e('Delete') ?></label> 
    158         <input type="radio" name="comment[<?php echo $comment->comment_ID; ?>]" id="comment[<?php echo $comment->comment_ID; ?>]-nothing" value="later" checked="checked" /> <label for="comment[<?php echo $comment->comment_ID; ?>]-nothing"><?php _e('Defer until later') ?></label> 
     155        <input type="radio" name="comment[<?php echo $comment->comment_ID; ?>]" id="comment-<?php echo $comment->comment_ID; ?>-approve" value="approve" /> <label for="comment[<?php echo $comment->comment_ID; ?>]-approve"><?php _e('Approve') ?></label> 
     156        <input type="radio" name="comment[<?php echo $comment->comment_ID; ?>]" id="comment-<?php echo $comment->comment_ID; ?>-spam" value="spam" /> <label for="comment[<?php echo $comment->comment_ID; ?>]-spam"><?php _e('Spam') ?></label> 
     157        <input type="radio" name="comment[<?php echo $comment->comment_ID; ?>]" id="comment-<?php echo $comment->comment_ID; ?>-delete" value="delete" /> <label for="comment[<?php echo $comment->comment_ID; ?>]-delete"><?php _e('Delete') ?></label> 
     158        <input type="radio" name="comment[<?php echo $comment->comment_ID; ?>]" id="comment-<?php echo $comment->comment_ID; ?>-nothing" value="later" checked="checked" /> <label for="comment[<?php echo $comment->comment_ID; ?>]-nothing"><?php _e('Defer until later') ?></label> 
    159159        </p> 
    160160 
    161161        </li>