Changeset 2231

Show
Ignore:
Timestamp:
02/06/05 19:02:10 (4 years ago)
Author:
rboren
Message:

Addslashes to user data before inserting in DB.

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • trunk/wp-comments-post.php

    r2221 r2231  
    2222get_currentuserinfo(); 
    2323if ( $user_ID ) : 
    24     $comment_author       = $user_identity; 
    25     $comment_author_email = $user_email; 
    26     $comment_author_url   = str_replace('http://', '', $user_url); 
     24    $comment_author       = addslashes($user_identity); 
     25    $comment_author_email = addslashes($user_email); 
     26    $comment_author_url   = addslashes(str_replace('http://', '', $user_url)); 
    2727else : 
    2828    if ( get_option('comment_registration') )