Changeset 3139

Timestamp:

11/17/05 23:01:28 (3 years ago)

Author:

ryan

Message:

Don't stripslashes() in plugin_basename() since this breaks established expectation of being able to pass a non-escaped FILE. Instead, stripslashes further up the stack. fixes #1866

Files:

• trunk/wp-admin/admin.php (modified) (1 diff)
• trunk/wp-includes/functions.php (modified) (1 diff)

trunk/wp-admin/admin.php

@@ -42 +42 @@
-// Handle plugin admin pages.
-if (isset($_GET['page'])) {
+    $plugin_page = stripslashes($_GET['page']);
-    $plugin_page = plugin_basename($_GET['page']);
-    $page_hook = get_plugin_page_hook($plugin_page, $pagenow);

trunk/wp-includes/functions.php

@@ -2143 +2143 @@
-function plugin_basename($file) {
-    $file = preg_replace('/^.*wp-content[\\\\\/]plugins[\\\\\/]/', '', $file);
-    $file = stripslashes($file);
-    return $file;
-}