Ticket #3986: clean_url-admin_a-l.diff

wp-admin/edit-comments.php

@@ -101 +101 @@
-$r = '';
-if ( 1 < $page ) {
-        $args['apage'] = ( 1 == $page - 1 ) ? FALSE : $page - 1;
-attribute_escape
+clean_url
-}
-if ( ( $total_pages = ceil( $total / 20 ) ) > 1 ) {
-        for ( $page_num = 1; $page_num <= $total_pages; $page_num++ ) :
@@ -111 +111 @@
-                        $p = false;
-                        if ( $page_num < 3 || ( $page_num >= $page - 3 && $page_num <= $page + 3 ) || $page_num > $total_pages - 3 ) :
-                                $args['apage'] = ( 1 == $page_num ) ? FALSE : $page_num;
-attribute_escape
+clean_url
-                                $in = true;
-                        elseif ( $in == true ) :
-                                $r .= "...\n";
@@ -122 +122 @@
-}
-if ( ( $page ) * 20 < $total || -1 == $total ) {
-        $args['apage'] = $page + 1;
-attribute_escape
+clean_url
-}
-echo "<p class='pagenav'>$r</p>";
-?>
@@ -248 +248 @@
-$r = '';
-if ( 1 < $page ) {
-        $args['apage'] = ( 1 == $page - 1 ) ? FALSE : $page - 1;
-attribute_escape
+clean_url
-}
-if ( ( $total_pages = ceil( $total / 20 ) ) > 1 ) {
-        for ( $page_num = 1; $page_num <= $total_pages; $page_num++ ) :
@@ -258 +258 @@
-                        $p = false;
-                        if ( $page_num < 3 || ( $page_num >= $page - 3 && $page_num <= $page + 3 ) || $page_num > $total_pages - 3 ) :
-                                $args['apage'] = ( 1 == $page_num ) ? FALSE : $page_num;
-attribute_escape
+clean_url
-                                $in = true;
-                        elseif ( $in == true ) :
-                                $r .= "...\n";
@@ -269 +269 @@
-}
-if ( ( $page ) * 20 < $total || -1 == $total ) {
-        $args['apage'] = $page + 1;
-attribute_escape
+clean_url
-}
-echo "<p class='pagenav'>$r</p>";
-?>

wp-admin/admin-functions.php

@@ -370 +370 @@
-        else if ( !empty( $post_title ) ) {
-                $text       = wp_specialchars( stripslashes( urldecode( $_REQUEST['text'] ) ) );
-                $text       = funky_javascript_fix( $text);
-attribute_escape
+clean_url
-        $post_content = '<a href="'.$popupurl.'">'.$post_title.'</a>'."\n$text";
-    }
-
@@ -429 +429 @@
-        $user = new WP_User( $user_id );
-        $user->user_login   = attribute_escape($user->user_login);
-        $user->user_email   = attribute_escape($user->user_email);
-attribute_escape
+clean_url
-        $user->first_name   = attribute_escape($user->first_name);
-        $user->last_name    = attribute_escape($user->last_name);
-        $user->display_name = attribute_escape($user->display_name);
@@ -574 +574 @@
-function get_link_to_edit( $link_id ) {
-        $link = get_link( $link_id );
-
-attribute_escape
+clean_url
-        $link->link_name        = attribute_escape($link->link_name);
-        $link->link_image       = attribute_escape($link->link_image);
-        $link->link_description = attribute_escape($link->link_description);
-attribute_escape
+clean_url
-        $link->link_rel         = attribute_escape($link->link_rel);
-        $link->link_notes       =  wp_specialchars($link->link_notes);
-        $link->post_category    = $link->link_category;
@@ -588 +588 @@
-
-function get_default_link_to_edit() {
-        if ( isset( $_GET['linkurl'] ) )
-attribute_escape
+clean_url
-        else
-                $link->link_url = '';
-
@@ -879 +879 @@
-        }
-        $r .= "</td>\n\t\t<td>";
-        if ( current_user_can( 'edit_user', $user_object->ID ) ) {
-attribute_escape
+clean_url
-                $r .= "<a href='$edit_link' class='edit'>".__( 'Edit' )."</a>";
-        }
-        $r .= "</td>\n\t</tr>";

wp-admin/edit-page-form.php

@@ -13 +13 @@
-        $form_extra = "<input type='hidden' id='post_ID' name='post_ID' value='$post_ID' />";
-}
-
-attribute_escape
+clean_url
-
-if ( 0 != $post_ID && $sendto == get_permalink($post_ID) )
-        $sendto = 'redo';

wp-admin/edit-form-advanced.php

@@ -168 +168 @@
-?>
-<input name="referredby" type="hidden" id="referredby" value="<?php 
-if ( !empty($_REQUEST['popupurl']) )
-attribute_escape
+clean_url
-else if ( url_to_postid(wp_get_referer()) == $post_ID )
-        echo 'redo';
-else
-attribute_escape
+clean_url
-?>" /></p>
-
-<?php do_action('edit_form_advanced'); ?>

wp-admin/link-manager.php

@@ -133 +133 @@
-        foreach ($links as $link) {
-                $link->link_name = attribute_escape(apply_filters('link_title', $link->link_name));
-                $link->link_description = wp_specialchars(apply_filters('link_description', $link->link_description));
-attribute_escape
+clean_url
-                $link->link_category = wp_get_link_cats($link->link_id);
-                $short_url = str_replace('http://', '', $link->link_url);
-                $short_url = str_replace('www.', '', $short_url);

wp-admin/bookmarklet.php

@@ -37 +37 @@
-
-
-$content  = wp_specialchars($_REQUEST['content']);
-attribute_escape
+clean_url
-if ( !empty($content) ) {
-        $post->post_content = wp_specialchars( stripslashes($_REQUEST['content']) );
-} else {