Show
Ignore:
Timestamp:
12/21/06 10:10:04 (2 years ago)
Author:
markjaquith
Message:

new function for escaping within attributes: attribute_escape()

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved
  • branches/2.0/wp-admin/edit-comments.php

    r3945 r4656  
    88require_once('admin-header.php'); 
    99if (empty($_GET['mode'])) $mode = 'view'; 
    10 else $mode = wp_specialchars($_GET['mode'], 1); 
     10else $mode = attribute_escape($_GET['mode']); 
    1111?> 
    1212 
     
    3131  <fieldset>  
    3232  <legend><?php _e('Show Comments That Contain...') ?></legend>  
    33   <input type="text" name="s" value="<?php if (isset($_GET['s'])) echo wp_specialchars($_GET['s'], 1); ?>" size="17" />  
     33  <input type="text" name="s" value="<?php if (isset($_GET['s'])) echo attribute_escape($_GET['s']); ?>" size="17" />  
    3434  <input type="submit" name="submit" value="<?php _e('Search') ?>"  />   
    3535  <input type="hidden" name="mode" value="<?php echo $mode; ?>" />