Changeset 4383
- Timestamp:
- 10/13/06 00:23:25 (2 years ago)
- Files:
-
- trunk/wp-admin/admin-functions.php (modified) (3 diffs)
- trunk/wp-admin/options.php (modified) (1 diff)
- trunk/wp-includes/functions.php (modified) (3 diffs)
- trunk/wp-includes/post.php (modified) (2 diffs)
- trunk/wp-includes/user.php (modified) (1 diff)
Legend:
- Unmodified
- Added
- Removed
- Modified
- Copied
- Moved
trunk/wp-admin/admin-functions.php
r4382 r4383 984 984 985 985 if ( is_serialized($entry['meta_value']) ) { 986 if ( 's' == $entry['meta_value']{0}) {986 if ( is_serialized_string($entry['meta_value']) ) { 987 987 // this is a serialized string, so we should display it 988 988 $entry['meta_value'] = maybe_unserialize($entry['meta_value']); … … 1069 1069 $metakeyselect = $wpdb->escape(stripslashes(trim($_POST['metakeyselect']))); 1070 1070 $metakeyinput = $wpdb->escape(stripslashes(trim($_POST['metakeyinput']))); 1071 $metavalue = prepare_data(stripslashes((trim($_POST['metavalue']))));1071 $metavalue = maybe_serialize(stripslashes((trim($_POST['metavalue'])))); 1072 1072 $metavalue = $wpdb->escape($metavalue); 1073 1073 … … 1101 1101 function update_meta($mid, $mkey, $mvalue) { 1102 1102 global $wpdb; 1103 if ( is_serialized(stripslashes($mvalue)) ) // $mvalue looks to be already serialized, so we should serialize it again to prevent the data from coming out in a different form than it came in1104 $mvalue = serialize($mvalue);1103 $mvalue = maybe_serialize(stripslashes($mvalue)); 1104 $mvalue = $wpdb->escape($mvalue); 1105 1105 $mid = (int) $mid; 1106 1106 return $wpdb->query("UPDATE $wpdb->postmeta SET meta_key = '$mkey', meta_value = '$mvalue' WHERE meta_id = '$mid'"); trunk/wp-admin/options.php
r4382 r4383 129 129 $disabled = ''; 130 130 if ( is_serialized($option->option_value) ) { 131 if ( 's' == $option->option_value{0}) {131 if ( is_serialized_string($option->option_value) ) { 132 132 // this is a serialized string, so we should display it 133 133 $value = wp_specialchars(maybe_unserialize($option->option_value), 'single'); trunk/wp-includes/functions.php
r4382 r4383 258 258 259 259 $_newvalue = $newvalue; 260 $newvalue = prepare_data($newvalue);260 $newvalue = maybe_serialize($newvalue); 261 261 262 262 wp_cache_set($option_name, $newvalue, 'options'); … … 280 280 return; 281 281 282 $value = prepare_data($value);282 $value = maybe_serialize($value); 283 283 284 284 wp_cache_set($name, $value, 'options'); … … 302 302 } 303 303 304 function prepare_data($data) {304 function maybe_serialize($data) { 305 305 if ( is_string($data) ) 306 306 $data = trim($data); trunk/wp-includes/post.php
r4382 r4383 232 232 $post_meta_cache[$post_id][$key][] = $value; 233 233 234 $value = prepare_data($value);234 $value = maybe_serialize($value); 235 235 $value = $wpdb->escape($value); 236 236 … … 311 311 312 312 $original_value = $value; 313 $value = prepare_data($value);313 $value = maybe_serialize($value); 314 314 $value = $wpdb->escape($value); 315 315 316 316 $original_prev = $prev_value; 317 $prev_value = prepare_data($prev_value);317 $prev_value = maybe_serialize($prev_value); 318 318 $prev_value = $wpdb->escape($prev_value); 319 319 trunk/wp-includes/user.php
r4382 r4383 117 117 // FIXME: usermeta data is assumed to be already escaped 118 118 $meta_value = stripslashes($meta_value); 119 $meta_value = prepare_data($meta_value);119 $meta_value = maybe_serialize($meta_value); 120 120 $meta_value = $wpdb->escape($meta_value); 121 121
