diff --git a/wp-admin/press-this.php b/wp-admin/press-this.php index a618f73cf4..74e03f4f58 100644 --- a/wp-admin/press-this.php +++ b/wp-admin/press-this.php @@ -89,8 +89,9 @@ if ( 'post' == $_REQUEST['action'] ) { } // Ajax Requests -$url = $_REQUEST['url']; -$selection = $_REQUEST['selection']; +$title = wp_specialchars(stripslashes($_GET['t'])); +$selection = trim(wp_specialchars(str_replace("\n", ' ',stripslashes($_GET['s'])))); +$url = $_GET['u']; if($_REQUEST['ajax'] == 'video') { ?>
@@ -101,6 +102,9 @@ if($_REQUEST['ajax'] == 'video') { ?> } if($_REQUEST['ajax'] == 'photo_images') { +$url = urldecode($url); +$url = str_replace(' ', '%20', $url); + function get_images_from_uri($uri) { $content = wp_remote_fopen($uri); $host = parse_url($uri); @@ -164,7 +168,7 @@ if($_REQUEST['ajax'] == 'photo_js') { ?> url: "", cache : false, async : false, - data: "ajax=photo_images&url=", + data: "ajax=photo_images&u=", dataType : "script" }).responseText); @@ -221,10 +225,6 @@ if($_REQUEST['ajax'] == 'photo') { ?> > @@ -355,7 +355,7 @@ $url = clean_url($_GET['u']); jQuery('body').addClass('video_split'); - jQuery('#extra_fields').load('', { ajax: 'video', selection: ''}, function() { + jQuery('#extra_fields').load('', { ajax: 'video', s: ''}, function() { ">'); jQuery('#extra_fields').show(); - jQuery('#extra_fields').load(''); + jQuery('#extra_fields').load(''); jQuery('#extra_fields').prepend('