sergiotarxz
/
Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Escape content and title before inserting into the DB. http://wordpress.org/support/2/12153 

git-svn-id: https://develop.svn.wordpress.org/trunk@1590 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ryan Boren 2004-09-04 08:03:20 +00:00
parent 68246928c2
commit 24d5a6bddd
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
wp-admin/import-textpattern.php
View File

@ -97,8 +97,8 @@ while ($post = mysql_fetch_array($posts)) {
$timestamp = mktime($hour, $minute, $second, $month, $day, $year);
$posted = date('Y-m-d H:i:s', $timestamp);
$content = $post['Body_html'];
$title = $post['Title'];
$content = addslashes($post['Body_html']);
$title = addslashes($post['Title']);
$post_name = sanitize_title($title);
$wpdb->query("INSERT INTO $wpdb->posts