$v) { if (is_array($v)) { $array[$k] = add_magic_quotes($v); } else { $array[$k] = addslashes($v); } } return $array; } function validate_file($file) { if ('..' == substr($file,0,2)) die (__('Sorry, can’t edit files with ".." in the name. If you are trying to edit a file in your WordPress home directory, you can just type the name of the file in.')); if (':' == substr($file,1,1)) die (__('Sorry, can’t call files with their real path.')); if ('/' == substr($file,0,1)) $file = '.' . $file; $file = stripslashes($file); $file = str_replace('../', '', $file); return $file; } if (!get_magic_quotes_gpc()) { $_GET = add_magic_quotes($_GET); $_POST = add_magic_quotes($_POST); $_COOKIE = add_magic_quotes($_COOKIE); } $wpvarstoreset = array('action','standalone','redirect','profile','error','warning','a','file', 'theme'); for ($i=0; $iYou have do not have sufficient permissions to edit templates for this blog.

')); } $newcontent = stripslashes($_POST['newcontent']); $file = $_POST['file']; $file = validate_file($file); $real_file = '../' . $file; if (is_writeable($real_file)) { $f = fopen($real_file, 'w+'); fwrite($f, $newcontent); fclose($f); header("Location: theme-editor.php?file=$file&a=te"); } else { header("Location: theme-editor.php?file=$file"); } exit(); break; default: require_once('admin-header.php'); update_option('recently_edited', array(1, 2, 3) ); if ($user_level <= 5) { die(__('

You have do not have sufficient permissions to edit themes for this blog.

')); } $themes = get_themes(); if (! isset($theme) || empty($theme)) { $theme = 'Default'; } $stylesheet_files = $themes[$theme]['Stylesheet Files']; $template_files = $themes[$theme]['Template Files']; if ('' == $file) { $file = $stylesheet_files[0]; } $home = get_settings('home'); if (($home != '') && ($home != get_settings('siteurl')) && ('index.php' == $file || get_settings('blogfilename') == $file || '.htaccess' == $file)) { $home_root = parse_url($home); $home_root = $home_root['path']; $root = str_replace($_SERVER["PHP_SELF"], '', $_SERVER["PATH_TRANSLATED"]); $home_root = $root . $home_root; $real_file = $home_root . '/' . $file; } else { $file = validate_file($file); $real_file = '../' . $file; } if (!is_file($real_file)) $error = 1; if (!$error) { $f = fopen($real_file, 'r'); $content = fread($f, filesize($real_file)); $content = htmlspecialchars($content); } ?>

" . sprintf(__('Editing %s'), $file) . "

"; if (!$error) { ?>

' . __('Oops, no such file exists! Double check the name and try again, merci.') . '

'; } ?>

%s theme files:'), $theme) ?>