Show
Ignore:
Timestamp:
12/21/06 10:10:04 (2 years ago)
Author:
markjaquith
Message:

new function for escaping within attributes: attribute_escape()

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved
  • branches/2.0/wp-admin/link-manager.php

    r4470 r4656  
    328328    <input type="hidden" name="link_id" value="" /> 
    329329    <input type="hidden" name="action" value="" /> 
    330     <input type="hidden" name="order_by" value="<?php echo wp_specialchars($order_by, 1); ?>" /> 
     330    <input type="hidden" name="order_by" value="<?php echo attribute_escape($order_by); ?>" /> 
    331331    <input type="hidden" name="cat_id" value="<?php echo (int) $cat_id ?>" /> 
    332332  <table id="the-list-x" width="100%" cellpadding="3" cellspacing="3"> 
     
    358358    if ($links) { 
    359359        foreach ($links as $link) { 
    360             $link->link_name = wp_specialchars($link->link_name); 
     360            $link->link_name = attribute_escape($link->link_name); 
    361361            $link->link_category = wp_specialchars($link->link_category); 
    362362            $link->link_description = wp_specialchars($link->link_description); 
    363             $link->link_url = wp_specialchars($link->link_url); 
     363            $link->link_url = attribute_escape($link->link_url); 
    364364            $short_url = str_replace('http://', '', $link->link_url); 
    365365            $short_url = str_replace('www.', '', $short_url);