Changeset 5050

Show
Ignore:
Timestamp:
03/16/07 19:30:21 (2 years ago)
Author:
ryan
Message:

attribute_escape pagenow. 2.1

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • branches/2.1/wp-includes/functions.php

    r5040 r5050  
    12011201        $q = http_build_query($_POST); 
    12021202        $q = explode( ini_get('arg_separator.output'), $q); 
    1203         $html .= "\t<form method='post' action='$pagenow'>\n"; 
     1203        $html .= "\t<form method='post' action='" . attribute_escape($pagenow) . "'>\n"; 
    12041204        foreach ( (array) $q as $a ) { 
    12051205            $v = substr(strstr($a, '='), 1);