Changeset 9772 for trunk/src/bp-core/admin/bp-core-admin-functions.php

Timestamp:

04/20/2015 03:38:54 PM (11 years ago)

Author:

johnjamesjacoby

Message:

All: make sure URL variables are escaped (trunk)

File:

• trunk/src/bp-core/admin/bp-core-admin-functions.php (modified) (3 diffs)

trunk/src/bp-core/admin/bp-core-admin-functions.php

@@ -299 +299 @@
     if ( !empty( $orphaned_components ) ) {
         $admin_url = bp_get_admin_url( add_query_arg( array( 'page' => 'bp-page-settings' ), 'admin.php' ) );
-        $notice    = sprintf( __( 'The following active BuddyPress Components do not have associated WordPress Pages: %2$s. <a href="%1$s">Repair</a>', 'buddypress' ), $admin_url, '<strong>' . implode( '</strong>, <strong>', $orphaned_components ) . '</strong>' );
+        $notice    = sprintf( __( 'The following active BuddyPress Components do not have associated WordPress Pages: %2$s. <a href="%1$s">Repair</a>', 'buddypress' ), esc_url( $admin_url ), '<strong>' . implode( '</strong>, <strong>', $orphaned_components ) . '</strong>' );
 
         bp_core_add_admin_notice( $notice );
@@ -321 +321 @@
     if ( !empty( $dupe_names ) ) {
         $admin_url = bp_get_admin_url( add_query_arg( array( 'page' => 'bp-page-settings' ), 'admin.php' ) );
-        $notice    = sprintf( __( 'Each BuddyPress Component needs its own WordPress page. The following WordPress Pages have more than one component associated with them: %2$s. <a href="%1$s">Repair</a>', 'buddypress' ), $admin_url, '<strong>' . implode( '</strong>, <strong>', $dupe_names ) . '</strong>' );
+        $notice    = sprintf( __( 'Each BuddyPress Component needs its own WordPress page. The following WordPress Pages have more than one component associated with them: %2$s. <a href="%1$s">Repair</a>', 'buddypress' ), esc_url( $admin_url ), '<strong>' . implode( '</strong>, <strong>', $dupe_names ) . '</strong>' );
 
         bp_core_add_admin_notice( $notice );
@@ -910 +910 @@
         bp_core_process_spammer_status( $user_id, $status );
 
-        $redirect = add_query_arg( array( 'updated' => 'marked-' . $status ), $redirect);
+        $redirect = add_query_arg( array( 'updated' => 'marked-' . $status ), $redirect );
 
         wp_redirect( $redirect );