Escape parsed fields.

git-svn-id: http://svn.automattic.com/wordpress/trunk@5946 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
ryan 2007-08-26 22:13:54 +00:00
parent e80177b92b
commit c89928a4c8
1 changed files with 8 additions and 8 deletions

View File

@ -420,9 +420,9 @@ EOD;
$blog_ID = (int ) $blog_id; $blog_ID = (int ) $blog_id;
$post_status = ($publish) ? 'publish' : 'draft'; $post_status = ($publish) ? 'publish' : 'draft';
$post_author = (int) $user->ID; $post_author = (int) $user->ID;
$post_title = $entry->title; $post_title = $this->escape($entry->title);
$post_content = $entry->content; $post_content = $this->escape($entry->content);
$post_excerpt = $entry->summary; $post_excerpt = $this->escape($entry->summary);
$post_date = current_time('mysql'); $post_date = current_time('mysql');
$post_date_gmt = current_time('mysql', 1); $post_date_gmt = current_time('mysql', 1);
@ -478,9 +478,9 @@ EOD;
extract($entry); extract($entry);
$post_title = $parsed->title; $post_title = $this->escape($parsed->title);
$post_content = $parsed->content; $post_content = $this->escape($parsed->content);
$post_excerpt = $parsed->summary; $post_excerpt = $this->escape($parsed->summary);
// let's not go backwards and make something draft again. // let's not go backwards and make something draft again.
if(!$publish && $post_status == 'draft') { if(!$publish && $post_status == 'draft') {
@ -619,8 +619,8 @@ EOD;
extract($entry); extract($entry);
$post_title = $parsed->title; $post_title = $this->escape($parsed->title);
$post_content = $parsed->content; $post_content = $this->escape($parsed->content);
$postdata = compact('ID', 'post_content', 'post_title', 'post_category', 'post_status', 'post_excerpt'); $postdata = compact('ID', 'post_content', 'post_title', 'post_category', 'post_status', 'post_excerpt');