sergiotarxz
/
Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

In sanitize_title(), strip_tags() before sanitizing, not after. In post.php, if post name is empty, pass the post title to the sanitizer. 

git-svn-id: https://develop.svn.wordpress.org/trunk@1512 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ryan Boren 2004-08-06 01:28:51 +00:00
parent c142f1c2a1
commit 32bd9e6ac7
2 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
wp-admin/post.php
View File

@ -302,7 +302,11 @@ case 'editpost':
if (empty($ping_status)) $ping_status = 'closed';
//if (!$_POST['ping_status']) $ping_status = get_settings('default_ping_status');
$post_password = $_POST['post_password'];
$post_name = sanitize_title($_POST['post_name'], $post_ID);
$post_name = $_POST['post_name'];
if (empty($post_name)) {
$post_name = $post_title;
}
$post_name = sanitize_title($post_name, $post_ID);
if (empty($post_name)) $post_name = sanitize_title($post_title);
$trackback = $_POST['trackback_url'];
// Format trackbacks

3
wp-includes/functions-formatting.php
View File

@ -120,8 +120,9 @@ function remove_accents($string) {
}
function sanitize_title($title, $fallback_title = '') {
$title = apply_filters('sanitize_title', $title);
$title = strip_tags($title);
$title = apply_filters('sanitize_title', $title);
if (empty($title)) {
$title = $fallback_title;
}