Andrew Nacin 7d53bd66ed Use maybe_unserialize() in upgrade.php's private get_option() function. This actually predates maybe_unserialize() ([2487], [3234]). props leewillis77. fixes #24365. ...

git-svn-id: http://core.svn.wordpress.org/trunk@24625 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2013-07-10 04:01:20 +00:00

..

admin.php

…

ajax-actions.php

Heartbeat: fix comment spelling

2013-07-03 01:59:46 +00:00

bookmark.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:00:25 +00:00

class-ftp-pure.php

…

class-ftp-sockets.php

…

class-ftp.php

…

class-pclzip.php

…

class-wp-comments-list-table.php

Remove obsolete translator comment. props zeo. fixes #24464.

2013-06-23 08:30:30 +00:00

class-wp-filesystem-base.php

…

class-wp-filesystem-direct.php

…

class-wp-filesystem-ftpext.php

…

class-wp-filesystem-ftpsockets.php

…

class-wp-filesystem-ssh2.php

…

class-wp-importer.php

Better validation of the URL used in core HTTP requests.

2013-06-21 06:07:47 +00:00

class-wp-links-list-table.php

Remove unused variables reset by wp_reset_vars(). Many of these haven't been used since b2. see #21767.

2013-02-16 18:28:41 +00:00

class-wp-list-table.php

Remove redundant echo calls from list tables. Don't mix string concatenation with direct output. see #24210.

2013-04-29 01:10:50 +00:00

class-wp-media-list-table.php

Replace the global $id from manage_media_custom_column action with $post-ID. Missed in [24337]. props nickdaugherty. fixes #24476.

2013-06-01 09:40:00 +00:00

class-wp-ms-sites-list-table.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:00:25 +00:00

class-wp-ms-themes-list-table.php

Revert [23394] until there is a consensus on target="_blank" (or not) for these external links. see #20839.

2013-07-08 13:04:07 +00:00

class-wp-ms-users-list-table.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:00:25 +00:00

class-wp-plugin-install-list-table.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:00:25 +00:00

class-wp-plugins-list-table.php

Revert [23394] until there is a consensus on target="_blank" (or not) for these external links. see #20839.

2013-07-08 13:04:07 +00:00

class-wp-posts-list-table.php

Use meta caps edit_post, read_post, and delete_post directly, rather than consulting the post type object. map_meta_cap() handles that for us. props markjaquith, kovshenin. fixes #23226.

2013-07-08 20:05:42 +00:00

class-wp-terms-list-table.php

Remove unnecessary esc_attr() call and redundant title attributes. props zeo. fixes #24437.

2013-05-28 04:53:46 +00:00

class-wp-theme-install-list-table.php

Fix E_STRICT notice in WP_Theme_Install_List_Table::_js_vars(). see #24356.

2013-06-05 16:51:07 +00:00

class-wp-themes-list-table.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:00:25 +00:00

class-wp-upgrader.php

More robust escaping in the plugin/theme upgrader.

2013-06-21 05:54:40 +00:00

class-wp-users-list-table.php

Remove redundant echo calls from list tables. Don't mix string concatenation with direct output. see #24210.

2013-04-29 01:10:50 +00:00

comment.php

Revert 23416, 23419, 23445 except for wp_reset_vars() changes. We are going a different direction with the slashing cleanup, so resetting to a clean slate. see #21767

2013-03-01 16:28:40 +00:00

continents-cities.php

…

dashboard.php

Remove /extend/ from URLs to wordpress.org/plugins, /themes, and /mobile, as those are all now top-level. see #24389.

2013-05-22 21:01:57 +00:00

deprecated.php

Remove an unslash in the deprecated WP_User_Search, as search_term is already unslashed in the constructor. see #21767.

2013-03-01 17:57:49 +00:00

export.php

Remove redundant esc_url() call. props pauldewouters. fixes #23643.

2013-03-01 16:27:03 +00:00

file.php

Better validation of the URL used in core HTTP requests.

2013-06-21 06:07:47 +00:00

image-edit.php

Instead of saying that scaling up images will result in fuzzy images, just say that it's not supported (because it isn't).

2013-07-05 15:45:43 +00:00

image.php

Add functions for generating metadata for video and audio, using the

2013-03-21 04:55:42 +00:00

import.php

Fix E_STRICT notice in wp_get_popular_importers(). see #24356.

2013-05-28 03:53:59 +00:00

list-table.php

…

media.php

Use meta caps edit_post, read_post, and delete_post directly, rather than consulting the post type object. map_meta_cap() handles that for us. props markjaquith, kovshenin. fixes #23226.

2013-07-08 20:05:42 +00:00

menu.php

Prevent an offset error if the first menu item is a separator.

2013-06-20 16:45:45 +00:00

meta-boxes.php

Consistently use get_post_format_string() to get Standard post format name with the correct context. props johnbillion. fixes #23503.

2013-06-27 06:56:45 +00:00

misc.php

Support IIS 8 and above.

2013-07-08 20:27:06 +00:00

ms-deprecated.php

…

ms.php

Pass blog_id to the wpmu_drop_tables filter. props mitchoyoshitaka. see #24320.

2013-05-11 21:58:40 +00:00

nav-menu.php

Fix E_STRICT notices in walkers. props dvarga. see #24356.

2013-05-28 03:29:15 +00:00

plugin-install.php

Use numbered placeholders. see #24389.

2013-05-22 21:26:36 +00:00

plugin.php

Revert [23394] until there is a consensus on target="_blank" (or not) for these external links. see #20839.

2013-07-08 13:04:07 +00:00

post.php

Use meta caps edit_post, read_post, and delete_post directly, rather than consulting the post type object. map_meta_cap() handles that for us. props markjaquith, kovshenin. fixes #23226.

2013-07-08 20:05:42 +00:00

revision.php

Pass back dateUnix (a unix timestamp) for better sorting of revisions in Backbone.

2013-07-09 19:21:25 +00:00

schema.php

In populate_options(), only query the option names we are checking against. No need to load the entire table into memory. props leewillis77. fixes #24620.

2013-07-09 19:14:33 +00:00

screen.php

Remove post format icons next to header on edit post screen. fixes #24502. see #24452.

2013-06-06 14:45:25 +00:00

taxonomy.php

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

2013-03-01 17:00:25 +00:00

template.php

Use meta caps edit_post, read_post, and delete_post directly, rather than consulting the post type object. map_meta_cap() handles that for us. props markjaquith, kovshenin. fixes #23226.

2013-07-08 20:05:42 +00:00

theme-install.php

Fix usage of undeclared variables.

2013-05-07 16:35:03 +00:00

theme.php

Use correct variable when calling request_filesystem_credentials() in delete_theme(). see #24210.

2013-07-08 17:10:47 +00:00

update-core.php

Remove redundant swfupload-all.js file.

2013-06-21 09:26:18 +00:00

update.php

…

upgrade.php

Use maybe_unserialize() in upgrade.php's private get_option() function. This actually predates maybe_unserialize() ([2487], [3234]). props leewillis77. fixes #24365.

2013-07-10 04:01:20 +00:00

user.php

Revert to storing a hash of the slashed password. fixes #24367. see #17018.

2013-06-25 11:14:50 +00:00

widgets.php

Fix typos in phpdoc. props TheLastCicada. fixes #24302.

2013-05-10 01:39:30 +00:00