diff --git a/wp-includes/functions-formatting.php b/wp-includes/functions-formatting.php index cfb73b1cc..6de36cfe0 100644 --- a/wp-includes/functions-formatting.php +++ b/wp-includes/functions-formatting.php @@ -70,7 +70,7 @@ function wpautop($pee, $br = 1) { if ($br) $pee = preg_replace('|(?)\s*\n|', "
\n", $pee); // optionally make line breaks $pee = preg_replace('!(]*>)\s*
!', "$1", $pee); $pee = preg_replace('!
(\s*)!', '$1', $pee); - $pee = preg_replace('!()(.*?)!ise', " '$1' . clean_pre('$2') . '' ", $pee); + $pee = preg_replace('!()(.*?)!ise', " stripslashes('$1') . clean_pre('$2') . '' ", $pee); $pee = preg_replace('/&([^#])(?![a-z]{1,8};)/', '&$1', $pee); return $pee; @@ -224,6 +224,7 @@ function autobrize($content) { $content = preg_replace("/(\015\012)|(\015)|(\012)/", "
\n", $content); return $content; } + function unautobrize($content) { $content = preg_replace("/
\n/", "\n", $content); //for PHP versions before 4.0.5 $content = preg_replace("/
\n/", "\n", $content); @@ -232,16 +233,15 @@ function unautobrize($content) { function format_to_edit($content) { - global $autobr; $content = stripslashes($content); - if ($autobr) { $content = unautobrize($content); } $content = htmlspecialchars($content); return $content; } + function format_to_post($content) { - global $post_autobr,$comment_autobr; - $content = addslashes($content); - if ($post_autobr || $comment_autobr) { $content = autobrize($content); } + global $wpdb; + $content = stripslashes(stripslashes($content)); + $content = $wpdb->escape($content); return $content; }