sergiotarxz/Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Escape , , and for use in attributes by default since so many themes don't escape them. Use wp_get_current_commenter() to get the raw values.

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@11722 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ryan Boren 2009-07-20 01:11:14 +00:00
parent c7a3747476
commit a692acecdf
1 changed files with 24 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
wp-includes/comment-template.php
View File

@ -818,8 +818,31 @@ function comments_template( $file = '/comments.php', $separate_comments = false
$file = '/comments.php';
$req = get_option('require_name_email');
/**
* Raw comment author information fetched from the comment cookies.
*
* @uses wp_get_current_commenter()
*/
$commenter = wp_get_current_commenter();
extract($commenter, EXTR_SKIP);
/**
* The name of the current comment author escaped for use in attributes. Use
* wp_get_current_commenter() to get the raw value.
*/
$comment_author = esc_attr($commenter['comment_author']);
/**
* The email address of the current comment author escaped for use in attributes. Use
* wp_get_current_commenter() to get the raw value.
*/
$comment_author_email = esc_attr($commenter['comment_author_email']);
/**
* The url of the current comment author escaped for use in attributes. Use
* wp_get_current_commenter() to get the raw value.
*/
$comment_author_url = esc_url($commenter['comment_author_url']);
/** @todo Use API instead of SELECTs. */
if ( $user_ID) {