Changeset 3370

Timestamp:

11/07/2010 12:24:39 AM (14 years ago)

Author:

djpaul

Message:

Use esc_html() instead of deprecated wp_specialchars()

Location:

trunk

Files:

• bp-blogs/bp-blogs-templatetags.php (modified) (1 diff)
• bp-core/bp-core-filters.php (modified) (2 diffs)
• bp-core/bp-core-settings.php (modified) (1 diff)
• bp-core/bp-core-signup.php (modified) (1 diff)
• bp-xprofile/bp-xprofile-admin.php (modified) (1 diff)

trunk/bp-blogs/bp-blogs-templatetags.php

@@ -397 +397 @@
         <p class="error"><?php echo $errmsg ?></p>
     <?php }
-    echo '<input name="blog_title" type="text" id="blog_title" value="'.wp_specialchars($blog_title, 1).'" /></p>';
+    echo '<input name="blog_title" type="text" id="blog_title" value="'.esc_html($blog_title, 1).'" /></p>';
     ?>
 

trunk/bp-core/bp-core-filters.php

@@ -195 +195 @@
         $admin_email = 'support@' . $_SERVER['SERVER_NAME'];
 
-    $from_name = ( '' == get_site_option( "site_name" ) ) ? 'WordPress' : wp_specialchars( get_site_option( "site_name" ) );
+    $from_name = ( '' == get_site_option( "site_name" ) ) ? 'WordPress' : esc_html( get_site_option( "site_name" ) );
     $message_headers = "MIME-Version: 1.0\n" . "From: \"{$from_name}\" <{$admin_email}>\n" . "Content-Type: text/plain; charset=\"" . get_option('blog_charset') . "\"\n";
     $message = sprintf(__("Thanks for registering! To complete the activation of your account and blog, please click the following link:\n\n%1$s\n\n\n\nAfter you activate, you can visit your blog here:\n\n%2$s", 'buddypress' ), $activate_url, esc_url("http://{$domain}{$path}" ) );
@@ -229 +229 @@
         $email = '&e=1';
 
-    $from_name = ( '' == get_site_option( "site_name" ) ) ? 'WordPress' : wp_specialchars( get_site_option( "site_name" ) );
+    $from_name = ( '' == get_site_option( "site_name" ) ) ? 'WordPress' : esc_html( get_site_option( "site_name" ) );
     $message_headers = "MIME-Version: 1.0\n" . "From: \"{$from_name}\" <{$admin_email}>\n" . "Content-Type: text/plain; charset=\"" . get_option('blog_charset') . "\"\n";
     $message = sprintf( __( "Thanks for registering! To complete the activation of your account please click the following link:\n\n%s\n\n", 'buddypress' ), $activate_url . $email, esc_url( "http://{$domain}{$path}" ) );

trunk/bp-core/bp-core-settings.php

@@ -43 +43 @@
 
         if ( $_POST['email'] != '' )
-            $current_user->user_email = wp_specialchars( trim( $_POST['email'] ) );
+            $current_user->user_email = esc_html( trim( $_POST['email'] ) );
 
         if ( $_POST['pass1'] != '' && $_POST['pass2'] != '' ) {

trunk/bp-core/bp-core-signup.php

@@ -610 +610 @@
         $admin_email = 'noreply@' . $_SERVER['SERVER_NAME'];
 
-    $from_name = ( '' == get_option( 'blogname' ) ) ? 'BuddyPress' : wp_specialchars( get_option( 'blogname' ) );
+    $from_name = ( '' == get_option( 'blogname' ) ) ? 'BuddyPress' : esc_html( get_option( 'blogname' ) );
     $message_headers = "MIME-Version: 1.0\n" . "From: \"{$from_name}\" <{$admin_email}>\n" . "Content-Type: text/plain; charset=\"" . get_option( 'blog_charset' ) . "\"\n";
     $message = sprintf( __( "Thanks for registering! To complete the activation of your account please click the following link:\n\n%s\n\n", 'buddypress' ), $activate_url );

trunk/bp-xprofile/bp-xprofile-admin.php

@@ -59 +59 @@
 
                 <div id="message" class="<?php echo $type; ?> fade">
-                    <p><?php echo wp_specialchars( esc_attr( $message ) ); ?></p>
+                    <p><?php echo esc_html( esc_attr( $message ) ); ?></p>
                 </div>
 <?php       endif; ?>