Changeset 3574

Timestamp:

02/28/06 04:22:24 (3 years ago)

Author:

ryan

Message:

Strip all html from comment author name, email, and url.

Files:

• trunk/wp-comments-post.php (modified) (1 diff)
• trunk/wp-includes/kses.php (modified) (2 diffs)

trunk/wp-comments-post.php

@@ -49 +49 @@
-$commentdata = compact('comment_post_ID', 'comment_author', 'comment_author_email', 'comment_author_url', 'comment_content', 'comment_type', 'user_ID');
-
-
+$comment_id = 
-
+$comment = get_comment($comment_id);
-if ( !$user->ID ) :
-stripslashes($comment_author)
-stripslashes($comment_author_email)
-stripslashes(clean_url($comment_author_url)
+$comment->comment_author
+$comment->comment_author_email
+clean_url($comment->$comment_author_url
-endif;
-

trunk/wp-includes/kses.php

@@ -513 +513 @@
-function wp_filter_kses($data) {
-    global $allowedtags;
-wp_kses($data, $allowedtags
+addslashes( wp_kses(stripslashes( $data ), $allowedtags) 
-}
-
@@ -521 +521 @@
-}
-
+function wp_filter_nohtml_kses($data) {
+    return addslashes ( wp_kses(stripslashes( $data ), array()) );
+}
+
-function kses_init_filters() {
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-}
-
-function kses_init() {
-
-
-
-
+
-
-    if (current_user_can('unfiltered_html') == false)
-        kses_init_filters();
-}
+
-add_action('init', 'kses_init');
-add_action('set_current_user', 'kses_init');