Changeset 5044

Show
Ignore:
Timestamp:
03/16/07 01:20:53 (2 years ago)
Author:
ryan
Message:

More attribute_escape().

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • trunk/wp-includes/functions.php

    r5039 r5044  
    12811281        $q = http_build_query($_POST); 
    12821282        $q = explode( ini_get('arg_separator.output'), $q); 
    1283         $html .= "\t<form method='post' action='$pagenow'>\n"; 
     1283        $html .= "\t<form method='post' action='" . attribute_escape($pagenow) . "'>\n"; 
    12841284        foreach ( (array) $q as $a ) { 
    12851285            $v = substr(strstr($a, '='), 1);