Changeset 883
- Timestamp:
- 02/13/07 12:09:06 (2 years ago)
- Files:
-
- trunk/wp-admin/index-extra.php (modified) (1 diff)
- trunk/wp-includes/post.php (modified) (1 diff)
- trunk/xmlrpc.php (modified) (3 diffs)
Legend:
- Unmodified
- Added
- Removed
- Modified
- Copied
- Moved
trunk/wp-admin/index-extra.php
r810 r883 2 2 require_once('admin.php'); 3 3 require_once (ABSPATH . WPINC . '/rss.php'); 4 5 @header('Content-type: ' . get_option('html_type') . '; charset=' . get_option('blog_charset')); 4 6 5 7 switch ( $_GET['jax'] ) { trunk/wp-includes/post.php
r875 r883 675 675 if ( defined('XMLRPC_REQUEST') ) 676 676 do_action('xmlrpc_publish_post', $post_ID); 677 if ( defined('APP_REQUEST') ) 678 do_action('app_publish_post', $post_ID); 677 679 678 680 if ( !defined('WP_IMPORTING') ) { trunk/xmlrpc.php
r882 r883 149 149 global $wpdb; 150 150 151 foreach ( (array) $array as $k => $v ) { 152 if (is_array($v)) { 153 $this->escape($array[$k]); 154 } else if (is_object($v)) { 155 //skip 156 } else { 157 $array[$k] = $wpdb->escape($v); 151 if(is_string($array)) { 152 return($wpdb->escape($array)); 153 } 154 else { 155 foreach ( (array) $array as $k => $v ) { 156 if (is_array($v)) { 157 $this->escape($array[$k]); 158 } else if (is_object($v)) { 159 //skip 160 } else { 161 $array[$k] = $wpdb->escape($v); 162 } 158 163 } 159 164 } … … 284 289 */ 285 290 function wp_newPage($args) { 286 $this->escape($args); 287 288 $blog_id = $args[0]; 289 $username = $args[1]; 290 $password = $args[2]; 291 // Items not escaped here will be escaped in newPost. 292 $username = $this->escape($args[1]); 293 $password = $this->escape($args[2]); 291 294 $page = $args[3]; 292 295 $publish = $args[4]; … … 356 359 */ 357 360 function wp_editPage($args) { 358 $this->escape($args); 359 361 // Items not escaped here will be escaped in editPost. 360 362 $blog_id = $args[0]; 361 $page_id = $ args[1];362 $username = $ args[2];363 $password = $ args[3];363 $page_id = $this->escape($args[1]); 364 $username = $this->escape($args[2]); 365 $password = $this->escape($args[3]); 364 366 $content = $args[4]; 365 367 $publish = $args[5];
