sergiotarxz/Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix array handling in sanitize_bookmark_field(). Props mdawaffe. fixes #13098

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@14239 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ryan Boren 2010-04-26 14:10:12 +00:00
parent d529ec69c1
commit 9df1546b16
1 changed files with 18 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
wp-includes/bookmark.php
View File

@ -309,25 +309,25 @@ function sanitize_bookmark($bookmark, $context = 'display') {
* @return mixed The filtered value
*/
function sanitize_bookmark_field($field, $value, $bookmark_id, $context) {
$int_fields = array('link_id', 'link_rating');
if ( in_array($field, $int_fields) )
switch ( $field ) {
case 'link_id' : // ints
case 'link_rating' :
$value = (int) $value;
// Fields which contain arrays of ints.
$array_int_fields = array( 'link_category' );
if ( in_array($field, $array_int_fields) ) {
$value = array_map( 'absint', $value);
break;
case 'link_category' : // array( ints )
$value = array_map('absint', (array) $value);
// We return here so that the categories aren't filtered.
// The 'link_category' filter is for the name of a link category, not an array of a link's link categories
return $value;
}
$yesno = array('link_visible');
if ( in_array($field, $yesno) )
break;
case 'link_visible' : // bool stored as Y|N
$value = preg_replace('/[^YNyn]/', '', $value);
if ( 'link_target' == $field ) {
break;
case 'link_target' : // "enum"
$targets = array('_top', '_blank');
if ( ! in_array($value, $targets) )
$value = '';
break;
}
if ( 'raw' == $context )
@ -347,12 +347,12 @@ function sanitize_bookmark_field($field, $value, $bookmark_id, $context) {
} else {
// Use display filters by default.
$value = apply_filters($field, $value, $bookmark_id, $context);
}
if ( 'attribute' == $context )
$value = esc_attr($value);
else if ( 'js' == $context )
$value = esc_js($value);
if ( 'attribute' == $context )
$value = esc_attr($value);
else if ( 'js' == $context )
$value = esc_js($value);
}
return $value;
}