Changeset 6500

Show
Ignore:
Timestamp:
12/27/07 08:08:11 (8 months ago)
Author:
ryan
Message:

Add some sanitization

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • trunk/wp-mail.php

    r6404 r6500  
    182182    do_action('publish_phone', $post_ID); 
    183183 
    184     echo "\n<p><b>Author:</b> $post_author</p>"; 
    185     echo "\n<p><b>Posted title:</b> $post_title<br />"; 
    186     echo "\n<b>Posted content:</b><br /><pre>".$content.'</pre></p>'; 
     184    echo "\n<p><b>Author:</b> " . wp_specialchars($post_author) . "</p>"; 
     185    echo "\n<p><b>Posted title:</b> " . sanitize_post_field('post_title', $post_title, $post_ID, 'display') . "<br />"; 
     186    echo "\n<b>Posted content:</b><br /><pre>". sanitize_post_field('post_content', $post_content, $post_ID, 'display') . '</pre></p>'; 
    187187 
    188188    if(!$pop3->delete($i)) { 
    189         echo '<p>Oops '.$pop3->ERROR.'</p></div>'; 
     189        echo '<p>Oops '.wp_specialchars($pop3->ERROR).'</p></div>'; 
    190190        $pop3->reset(); 
    191191        exit;