Changeset 5768 for branches/2.0/xmlrpc.php

Timestamp:

06/27/07 08:22:02 (1 year ago)

Author:

markjaquith

Message:

escape before extracting. Props Alexander Concha.

Files:

• branches/2.0/xmlrpc.php (modified) (2 diffs)

branches/2.0/xmlrpc.php

@@ -432 +432 @@
-        return new IXR_Error(401, 'Sorry, you do not have the right to edit this post.');
-
-
+, EXTR_SKIP
-
-      if ( ('publish' == $post_status) && !current_user_can('publish_posts') )
@@ -598 +598 @@
-
-      $postdata = wp_get_single_post($post_ID, ARRAY_A);
-      extract($postdata);
-        $this->escape($postdata);
+        extract($postdata, EXTR_SKIP);
-
-      $post_title = $content_struct['title'];