Changeset 3144

Timestamp:

07/22/2010 10:56:33 AM (16 years ago)

Author:

johnjamesjacoby

Message:

Fixes #2526 props cnorris23

Location:

branches/1.2

Files:

• bp-activity.php (modified) (1 diff)
• bp-core/bp-core-catchuri.php (modified) (1 diff)
• bp-core/bp-core-filters.php (modified) (4 diffs)
• bp-core/bp-core-signup.php (modified) (1 diff)

branches/1.2/bp-activity.php

@@ -252 +252 @@
                         bp_core_redirect( $bp->loggedin_user->domain );
                 else
-                        bp_core_redirect( site_url( 'wp-login.php?redirect_to=' . clean_url( $bp->root_domain . '/' . $bp->activity->slug . '/p/' . $bp->current_action ) ) );
+                        bp_core_redirect( site_url( 'wp-login.php?redirect_to=' . esc_url( $bp->root_domain . '/' . $bp->activity->slug . '/p/' . $bp->current_action ) ) );
         }
 

branches/1.2/bp-core/bp-core-catchuri.php

@@ -42 +42 @@
                 $path = bp_core_referrer();
         else
-                $path = clean_url( $_SERVER['REQUEST_URI'] );
+                $path = esc_url( $_SERVER['REQUEST_URI'] );
 
         $path = apply_filters( 'bp_uri', $path );

branches/1.2/bp-core/bp-core-filters.php

@@ -166 +166 @@
         // Send email with activation link.
         $activate_url = bp_get_activation_page() ."?key=$key";
-        $activate_url = clean_url($activate_url);
+        $activate_url = esc_url($activate_url);
 
         $admin_email = get_site_option( "admin_email" );
@@ -175 +175 @@
         $from_name = ( '' == get_site_option( "site_name" ) ) ? 'WordPress' : wp_specialchars( get_site_option( "site_name" ) );
         $message_headers = "MIME-Version: 1.0\n" . "From: \"{$from_name}\" <{$admin_email}>\n" . "Content-Type: text/plain; charset=\"" . get_option('blog_charset') . "\"\n";
-        $message = sprintf(__("Thanks for registering! To complete the activation of your account and blog, please click the following link:\n\n%s\n\n\n\nAfter you activate, you can visit your blog here:\n\n%s", 'buddypress' ), $activate_url, clean_url("http://{$domain}{$path}" ) );
-        $subject = '[' . $from_name . '] ' . sprintf(__('Activate %s', 'buddypress' ), clean_url('http://' . $domain . $path));
+        $message = sprintf(__("Thanks for registering! To complete the activation of your account and blog, please click the following link:\n\n%s\n\n\n\nAfter you activate, you can visit your blog here:\n\n%s", 'buddypress' ), $activate_url, esc_url("http://{$domain}{$path}" ) );
+        $subject = '[' . $from_name . '] ' . sprintf(__('Activate %s', 'buddypress' ), esc_url('http://' . $domain . $path));
 
         /* Send the message */
@@ -195 +195 @@
 
         $activate_url = bp_get_activation_page() ."?key=$key";
-        $activate_url = clean_url($activate_url);
+        $activate_url = esc_url($activate_url);
         $admin_email = get_site_option( "admin_email" );
 
@@ -207 +207 @@
         $from_name = ( '' == get_site_option( "site_name" ) ) ? 'WordPress' : wp_specialchars( get_site_option( "site_name" ) );
         $message_headers = "MIME-Version: 1.0\n" . "From: \"{$from_name}\" <{$admin_email}>\n" . "Content-Type: text/plain; charset=\"" . get_option('blog_charset') . "\"\n";
-        $message = sprintf( __( "Thanks for registering! To complete the activation of your account please click the following link:\n\n%s\n\n", 'buddypress' ), $activate_url . $email, clean_url("http://{$domain}{$path}" ) );
+        $message = sprintf( __( "Thanks for registering! To complete the activation of your account please click the following link:\n\n%s\n\n", 'buddypress' ), $activate_url . $email, esc_url( "http://{$domain}{$path}" ) );
         $subject = '[' . $from_name . '] ' . __( 'Activate Your Account', 'buddypress' );
 

branches/1.2/bp-core/bp-core-signup.php

@@ -575 +575 @@
 function bp_core_signup_send_validation_email( $user_id, $user_email, $key ) {
         $activate_url = bp_get_activation_page() ."?key=$key";
-        $activate_url = clean_url( $activate_url );
+        $activate_url = esc_url( $activate_url );
         $admin_email = get_site_option( "admin_email" );