From b0e4f9d0a7aab52591a4c5f2da2cdaf7dd9801c0 Mon Sep 17 00:00:00 2001 From: John Blackbourn Date: Thu, 27 Jul 2017 02:54:09 +0000 Subject: [PATCH] Users: Re-add entity decoding to the site name before it's used in the email address change confirmation email. This was accidentally removed in [41163]. See #40015, #16470 git-svn-id: https://develop.svn.wordpress.org/trunk@41165 602fd350-edb4-49c9-b593-d223f7449a82 --- src/wp-includes/user.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/wp-includes/user.php b/src/wp-includes/user.php index d27bbda392..9d3b936fea 100644 --- a/src/wp-includes/user.php +++ b/src/wp-includes/user.php @@ -2675,7 +2675,7 @@ All at ###SITENAME### $content = str_replace( '###USERNAME###', $current_user->user_login, $content ); $content = str_replace( '###ADMIN_URL###', esc_url( admin_url( 'profile.php?newuseremail=' . $hash ) ), $content ); $content = str_replace( '###EMAIL###', $_POST['email'], $content ); - $content = str_replace( '###SITENAME###', get_site_option( 'site_name' ), $content ); + $content = str_replace( '###SITENAME###', wp_specialchars_decode( get_site_option( 'site_name' ), ENT_QUOTES ), $content ); $content = str_replace( '###SITEURL###', network_home_url(), $content ); wp_mail( $_POST['email'], sprintf( __( '[%s] New Email Address' ), wp_specialchars_decode( get_option( 'blogname' ) ) ), $content );