sergiotarxz/Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
21,575 Commits 2 Branches 473 Tags 137 MiB
3624fa4fde
Commit Graph

186 Commits

Author SHA1 Message Date
Ryan Boren
c363aea627 Revert 23416, 23419, 23445 except for wp_reset_vars() changes. We are going a different direction with the slashing cleanup, so resetting to a clean slate. see #21767 
git-svn-id: https://develop.svn.wordpress.org/trunk@23554 602fd350-edb4-49c9-b593-d223f7449a82
 2013-03-01 16:28:40 +00:00
Ryan Boren
a6c8efadb9 Change all core API to expect unslashed rather than slashed arguments. 
The exceptions to this are update_post_meta() and add_post_meta() which are often used by plugins in POST handlers and will continue accepting slashed data for now.

Introduce wp_upate_post_meta() and wp_add_post_meta() as unslashed alternatives to update_post_meta() and add_post_meta(). These functions could become methods in WP_Post so don't use them too heavily yet.

Remove all escape() calls from wp_xmlrpc_server. Now that core expects unslashed data this is no longer needed.

Remove addslashes(), addslashes_gpc(), add_magic_quotes() calls on data being prepared for handoff to core functions that until now expected slashed data. Adding slashes in no longer necessary.

Introduce wp_unslash() and use to it remove slashes from GPCS data before using it in core API. Almost every instance of stripslashes() in core should now be wp_unslash(). In the future (a release or three) when GPCS is no longer slashed, wp_unslash() will stop stripping slashes and simply return what is passed. At this point wp_unslash() calls can be removed from core.

Introduce wp_slash() for slashing GPCS data. This will also turn into a noop once GPCS is no longer slashed. wp_slash() should almost never be used. It is mainly of use in unit tests.

Plugins should use wp_unslash() on data being passed to core API.

Plugins should no longer slash data being passed to core. So when you get_post() and then wp_insert_post() the post data from get_post() no longer needs addslashes(). Most plugins were not bothering with this. They will magically start doing the right thing. Unfortunately, those few souls who did it properly will now have to avoid calling addslashes() for 3.6 and newer.

Use wp_kses_post() and wp_kses_data(), which expect unslashed data, instead of wp_filter_post_kses() and wp_filter_kses(), which expect slashed data. Filters are no longer passed slashed data.

Remove many no longer necessary calls to $wpdb->escape() and esc_sql().

In wp_get_referer() and wp_get_original_referer(), return unslashed data.

Remove old stripslashes() calls from WP_Widget::update() handlers. These haven't been necessary since WP_Widget.

Switch several queries over to prepare().

Expect something to break.

Props alexkingorg
see #21767


git-svn-id: https://develop.svn.wordpress.org/trunk@23416 602fd350-edb4-49c9-b593-d223f7449a82
 2013-02-14 22:51:06 +00:00
Sergey Biryukov
16e16c7ee4 Use correct escaping function. fixes #23334. 
git-svn-id: https://develop.svn.wordpress.org/trunk@23413 602fd350-edb4-49c9-b593-d223f7449a82
 2013-02-14 05:52:23 +00:00
Ryan Boren
c53137f535 Scope button classes so they can be used on the frontend without interfering with theme styles. 
Props helenyhou, koopersmith
fixes #22644


git-svn-id: https://develop.svn.wordpress.org/trunk@22948 602fd350-edb4-49c9-b593-d223f7449a82
 2012-11-30 13:40:59 +00:00
Ryan Boren
6d8bce688f Pinking shears 
git-svn-id: https://develop.svn.wordpress.org/trunk@22634 602fd350-edb4-49c9-b593-d223f7449a82
 2012-11-17 15:11:29 +00:00
Ryan Boren
46d017a331 Use retina logo in install, upgrade, setup-config, repair, and confirmation screens. 
Props kopepasah, SergeyBiryukov
fixes #22375


git-svn-id: https://develop.svn.wordpress.org/trunk@22419 602fd350-edb4-49c9-b593-d223f7449a82
 2012-11-07 17:34:22 +00:00
Andrew Ozz
2d6b896243 Buttons: make install.css depend on buttons.css (so button styles are always loaded), see #21598 
git-svn-id: https://develop.svn.wordpress.org/trunk@22327 602fd350-edb4-49c9-b593-d223f7449a82
 2012-10-30 16:28:13 +00:00
Andrew Ozz
c71700c7b4 Buttons: 
- Update the install/initial configuration/repair screens buttons, props DrewAPicture
- Fix the welcome screen buttons and fine-tune the buttons css, props lessbloat

fixes #21598


git-svn-id: https://develop.svn.wordpress.org/trunk@22314 602fd350-edb4-49c9-b593-d223f7449a82
 2012-10-26 19:40:39 +00:00
Ryan Boren
8c50f982ea Pinking shears 
git-svn-id: https://develop.svn.wordpress.org/trunk@20715 602fd350-edb4-49c9-b593-d223f7449a82
 2012-05-03 16:41:59 +00:00
Andrew Nacin
fcf7cda3c6 A more resilient check for the base table prefix. see #19970. 
git-svn-id: https://develop.svn.wordpress.org/trunk@20700 602fd350-edb4-49c9-b593-d223f7449a82
 2012-05-02 20:38:58 +00:00
Andrew Nacin
6b46997aa1 Issue an error during the WordPress install process if wp-config.php is configured with an empty database table prefix, which is not supported. 
props SergeyBiryukov.
fixes #19970.



git-svn-id: https://develop.svn.wordpress.org/trunk@20699 602fd350-edb4-49c9-b593-d223f7449a82
 2012-05-02 20:37:18 +00:00
Andrew Nacin
5b0664dde5 Int cast a step variable. see #19786. props Caspie. 
git-svn-id: https://develop.svn.wordpress.org/trunk@20618 602fd350-edb4-49c9-b593-d223f7449a82
 2012-04-27 18:57:08 +00:00
Andrew Nacin
09b4c5d21f Update login-logo.png to use proper color. Copy it over wordpress-logo.png. Make that one canonical, and stop using login-logo.png. Leave it for plugins. props iammattthomas. see #19955. 
git-svn-id: https://develop.svn.wordpress.org/trunk@19937 602fd350-edb4-49c9-b593-d223f7449a82
 2012-02-17 04:57:56 +00:00
Andrew Nacin
0c59eacb55 Use is_rtl() for html direction when possible. In sites.php, language_attributes() will always exist (MU vestige). When the DB is dead, language_attributes() is worse than a simple is_rtl() check. is_rtl() exists here due to wp_load_translations_early(). see #18180. 
git-svn-id: https://develop.svn.wordpress.org/trunk@19862 602fd350-edb4-49c9-b593-d223f7449a82
 2012-02-08 06:05:35 +00:00
Andrew Nacin
6a5ea2418a Provide a more WordPress-like context for 'Welcome' on the install screen. see #19698. 
git-svn-id: https://develop.svn.wordpress.org/trunk@19808 602fd350-edb4-49c9-b593-d223f7449a82
 2012-02-01 14:49:41 +00:00
Andrew Nacin
db7ac5be83 Provide contexts for a 'Welcome' string. Sometimes we're saying hello, other times referring to the welcome panel. props pavelevap, fixes #19698. 
git-svn-id: https://develop.svn.wordpress.org/trunk@19807 602fd350-edb4-49c9-b593-d223f7449a82
 2012-02-01 14:47:49 +00:00
Ryan Boren
939ed92f83 Remove references to specific search engines. fixes #18605 
git-svn-id: https://develop.svn.wordpress.org/trunk@19794 602fd350-edb4-49c9-b593-d223f7449a82
 2012-01-30 20:51:00 +00:00
Ryan Boren
676ba7043e Use one space, not two, after trailing punctuation. fixes #19537 
git-svn-id: https://develop.svn.wordpress.org/trunk@19593 602fd350-edb4-49c9-b593-d223f7449a82
 2011-12-13 23:45:31 +00:00
Andrew Ozz
0b8d97f135 Fix styling for the installation screens, props chexee, fixes #18576 
git-svn-id: https://develop.svn.wordpress.org/trunk@19297 602fd350-edb4-49c9-b593-d223f7449a82
 2011-11-15 15:47:07 +00:00
Andrew Nacin
44a62f0b3b Revert [18817]. Adding the new HTML to setup-config would make translation files stale, and I'd rather i18n that file first (see #18180). fixes #18865, see #16413. 
git-svn-id: https://develop.svn.wordpress.org/trunk@18897 602fd350-edb4-49c9-b593-d223f7449a82
 2011-10-05 23:42:11 +00:00
Andrew Nacin
4aee3254f3 Kill the tables in install.php. props andrewryno. see #16413. 
git-svn-id: https://develop.svn.wordpress.org/trunk@18817 602fd350-edb4-49c9-b593-d223f7449a82
 2011-09-29 19:57:36 +00:00
Dion Hulse
cb62838943 Mark the install page as rtl for styling purposes. Props SergeyBiryukov. See #18314 and #18180 
git-svn-id: https://develop.svn.wordpress.org/trunk@18622 602fd350-edb4-49c9-b593-d223f7449a82
 2011-08-30 03:55:40 +00:00
Andrew Nacin
c30907963d Use wp_print_scripts() in install.php. Fixes issues with SCRIPT_DEBUG, removes l10n.js reference. fixes #18394. 
git-svn-id: https://develop.svn.wordpress.org/trunk@18544 602fd350-edb4-49c9-b593-d223f7449a82
 2011-08-13 18:01:26 +00:00
Andrew Ozz
9bcfc3da39 <!DOCTYPE html> for all, fixes #18202 
git-svn-id: https://develop.svn.wordpress.org/trunk@18460 602fd350-edb4-49c9-b593-d223f7449a82
 2011-07-22 00:25:41 +00:00
Peter Westwood
c6b0c233c1 Use the l10n helper js file in the installer. See #15124. 
git-svn-id: https://develop.svn.wordpress.org/trunk@16325 602fd350-edb4-49c9-b593-d223f7449a82
 2010-11-12 11:44:08 +00:00
Andrew Nacin
e2dfe4f5c2 Revert submit_button() for wp-includes, setup-config, install, login, signup. see [16061], see #15064, fixes #15247. 
git-svn-id: https://develop.svn.wordpress.org/trunk@16066 602fd350-edb4-49c9-b593-d223f7449a82
 2010-10-29 00:31:27 +00:00
Mark Jaquith
d65cdf4ba8 Expand submit_button() capabilities. Replace all (or almost all) manual HTML instances in WP. props sbressler. see #15064 
git-svn-id: https://develop.svn.wordpress.org/trunk@16061 602fd350-edb4-49c9-b593-d223f7449a82
 2010-10-28 21:56:43 +00:00
Peter Westwood
b138a1b60a Bring back a seperate js file for the password strength meter and correctly mark it as a dependancy of the user profile code. See #5919. 
git-svn-id: https://develop.svn.wordpress.org/trunk@15998 602fd350-edb4-49c9-b593-d223f7449a82
 2010-10-27 06:39:20 +00:00
scribu
33077f83fa move password-strength-meter.js into user-profile.js. See #5919 
git-svn-id: https://develop.svn.wordpress.org/trunk@15780 602fd350-edb4-49c9-b593-d223f7449a82
 2010-10-12 20:29:19 +00:00
Peter Westwood
e777a1fbf4 Context for the medium password strength string to disabiguate it. Fixes #14431 for trunk props demetris. 
git-svn-id: https://develop.svn.wordpress.org/trunk@15475 602fd350-edb4-49c9-b593-d223f7449a82
 2010-07-29 20:42:05 +00:00
Dion Hulse
f96e44e293 Do not stripslashes() passwords during Install, Matches Login/Updating password handling. Props johanee. See #13654 
git-svn-id: https://develop.svn.wordpress.org/trunk@15073 602fd350-edb4-49c9-b593-d223f7449a82
 2010-05-31 10:53:02 +00:00
Peter Westwood
41bc31f294 Style the error messages in the installer. 
git-svn-id: https://develop.svn.wordpress.org/trunk@14828 602fd350-edb4-49c9-b593-d223f7449a82
 2010-05-24 08:18:48 +00:00
Andrew Nacin
2473cefe8f s/blog/site/ in even more places. props PeteMall, see #11644. 
git-svn-id: https://develop.svn.wordpress.org/trunk@14315 602fd350-edb4-49c9-b593-d223f7449a82
 2010-04-30 03:17:49 +00:00
Andrew Nacin
3114dfddce Poka yoke for username sanitization during install. see #13159. 
git-svn-id: https://develop.svn.wordpress.org/trunk@14265 602fd350-edb4-49c9-b593-d223f7449a82
 2010-04-28 02:20:32 +00:00
Andrew Nacin
da1170a530 Show the sanitized username on install.php completion page. Also add some help text. see #13159. 
git-svn-id: https://develop.svn.wordpress.org/trunk@14264 602fd350-edb4-49c9-b593-d223f7449a82
 2010-04-28 02:17:19 +00:00
Nikolay Bachiyski
98da786577 Change user name to username for consistency 
git-svn-id: https://develop.svn.wordpress.org/trunk@14172 602fd350-edb4-49c9-b593-d223f7449a82
 2010-04-20 17:40:08 +00:00
Dion Hulse
a999fdc1a6 Add Password Mismatch feedback to the Password Strength Meter. Props dancole. Fixes #12576 
git-svn-id: https://develop.svn.wordpress.org/trunk@13900 602fd350-edb4-49c9-b593-d223f7449a82
 2010-03-31 08:45:51 +00:00
Andrew Nacin
dd306def81 Remove redundant isset() and empty() checks. 
git-svn-id: https://develop.svn.wordpress.org/trunk@13770 602fd350-edb4-49c9-b593-d223f7449a82
 2010-03-19 21:29:21 +00:00
Andrew Nacin
ddc506f01c Remove unnecessary ternary operators such as (expr) ? true : false. 
git-svn-id: https://develop.svn.wordpress.org/trunk@13769 602fd350-edb4-49c9-b593-d223f7449a82
 2010-03-19 21:15:00 +00:00
Andrew Nacin
22506c9721 install.php password UI cleanup. see #10396 
git-svn-id: https://develop.svn.wordpress.org/trunk@13696 602fd350-edb4-49c9-b593-d223f7449a82
 2010-03-14 02:30:50 +00:00
Peter Westwood
bb7b2b24a8 Make the sanitity check html in the installer more poetic. 
git-svn-id: https://develop.svn.wordpress.org/trunk@13670 602fd350-edb4-49c9-b593-d223f7449a82
 2010-03-11 20:45:24 +00:00
Dion Hulse
7f001d5aa2 Do not display user specified password during install. Fixes #12479. See #10396 for feedback 
git-svn-id: https://develop.svn.wordpress.org/trunk@13592 602fd350-edb4-49c9-b593-d223f7449a82
 2010-03-05 12:25:30 +00:00
Andrew Nacin
36da22d334 Add a sanity check in install.php, accounting for whether PHP is running. fixes #11728 
git-svn-id: https://develop.svn.wordpress.org/trunk@13428 602fd350-edb4-49c9-b593-d223f7449a82
 2010-02-26 06:31:40 +00:00
Andrew Nacin
1c9ff8788f Show "Log In" button on install.php when already installed. fixes #10488 props dancole 
git-svn-id: https://develop.svn.wordpress.org/trunk@13356 602fd350-edb4-49c9-b593-d223f7449a82
 2010-02-24 01:58:27 +00:00
Andrew Nacin
35eafcfed4 Add links to the codex changelog in update notification strings. props dtoj, see #11739 
git-svn-id: https://develop.svn.wordpress.org/trunk@13250 602fd350-edb4-49c9-b593-d223f7449a82
 2010-02-20 12:28:10 +00:00
Andrew Nacin
fb08796f48 Actually remove stray line ref. [13135]. see #10396 
git-svn-id: https://develop.svn.wordpress.org/trunk@13136 602fd350-edb4-49c9-b593-d223f7449a82
 2010-02-14 03:28:34 +00:00
Andrew Nacin
db5b2edbf6 Manual L10n JS strings in install.php. Remove stray line, see #13134 
git-svn-id: https://develop.svn.wordpress.org/trunk@13135 602fd350-edb4-49c9-b593-d223f7449a82
 2010-02-14 03:24:25 +00:00
Dion Hulse
ae5ba76658 First pass at allowing username/password selection upon install. Includes some extra cleanup of the patch. Props dancole. See #10396 
git-svn-id: https://develop.svn.wordpress.org/trunk@13134 602fd350-edb4-49c9-b593-d223f7449a82
 2010-02-14 03:07:47 +00:00
Andrew Nacin
4ce1c841cb install.php whitespace cleanup, inline docs, function @sinces, fixes #11491 
git-svn-id: https://develop.svn.wordpress.org/trunk@13124 602fd350-edb4-49c9-b593-d223f7449a82
 2010-02-13 20:40:42 +00:00
Ryan Boren
d04b00c481 Check PHP and MySQL versions in install.php. see #11666 
git-svn-id: https://develop.svn.wordpress.org/trunk@12577 602fd350-edb4-49c9-b593-d223f7449a82
 2009-12-29 22:07:35 +00:00