1616$ action = isset ($ action ) ? $ action : '' ;
1717if ( isset ($ _GET ['message ' ]) )
1818 $ _GET ['message ' ] = absint ( $ _GET ['message ' ] );
19- $ messages [1 ] = sprintf ( __ ( 'Post updated. Continue editing below or <a href="%s">go back</a>. ' ), attribute_escape ( stripslashes ( ( isset ( $ _GET ['_wp_original_http_referer ' ] ) ? $ _GET ['_wp_original_http_referer ' ] : '' ) ) ) );
19+ $ messages [1 ] = sprintf ( __ ( 'Post updated. Continue editing below or <a href="%s">go back</a>. ' ), attr ( stripslashes ( ( isset ( $ _GET ['_wp_original_http_referer ' ] ) ? $ _GET ['_wp_original_http_referer ' ] : '' ) ) ) );
2020$ messages [2 ] = __ ('Custom field updated. ' );
2121$ messages [3 ] = __ ('Custom field deleted. ' );
2222$ messages [4 ] = __ ('Post updated. ' );
@@ -169,15 +169,15 @@ function post_submit_meta_box($post) {
169169?> <?php echo wp_specialchars ( $ visibility_trans ); ?> </span></b> <?php if ( $ can_publish ) { ?> <a href="#visibility" class="edit-visibility hide-if-no-js"><?php _e ('Edit ' ); ?> </a>
170170
171171<div id="post-visibility-select" class="hide-if-js">
172- <input type="hidden" name="hidden_post_password" id="hidden-post-password" value="<?php echo attribute_escape ($ post ->post_password ); ?> " />
172+ <input type="hidden" name="hidden_post_password" id="hidden-post-password" value="<?php echo attr ($ post ->post_password ); ?> " />
173173<input type="checkbox" style="display:none" name="hidden_post_sticky" id="hidden-post-sticky" value="sticky" <?php checked (is_sticky ($ post ->ID )); ?> />
174- <input type="hidden" name="hidden_post_visibility" id="hidden-post-visibility" value="<?php echo attribute_escape ( $ visibility ); ?> " />
174+ <input type="hidden" name="hidden_post_visibility" id="hidden-post-visibility" value="<?php echo attr ( $ visibility ); ?> " />
175175
176176
177177<input type="radio" name="visibility" id="visibility-radio-public" value="public" <?php checked ( $ visibility , 'public ' ); ?> /> <label for="visibility-radio-public" class="selectit"><?php _e ('Public ' ); ?> </label><br />
178178<span id="sticky-span"><input id="sticky" name="sticky" type="checkbox" value="sticky" <?php checked (is_sticky ($ post ->ID )); ?> tabindex="4" /> <label for="sticky" class="selectit"><?php _e ('Stick this post to the front page ' ) ?> </label><br /></span>
179179<input type="radio" name="visibility" id="visibility-radio-password" value="password" <?php checked ( $ visibility , 'password ' ); ?> /> <label for="visibility-radio-password" class="selectit"><?php _e ('Password protected ' ); ?> </label><br />
180- <span id="password-span"><label for="post_password"><?php _e ('Password: ' ); ?> </label> <input type="text" name="post_password" id="post_password" value="<?php echo attribute_escape ($ post ->post_password ); ?> " /><br /></span>
180+ <span id="password-span"><label for="post_password"><?php _e ('Password: ' ); ?> </label> <input type="text" name="post_password" id="post_password" value="<?php echo attr ($ post ->post_password ); ?> " /><br /></span>
181181<input type="radio" name="visibility" id="visibility-radio-private" value="private" <?php checked ( $ visibility , 'private ' ); ?> /> <label for="visibility-radio-private" class="selectit"><?php _e ('Private ' ); ?> </label><br />
182182
183183<p>
@@ -271,7 +271,7 @@ function post_submit_meta_box($post) {
271271function post_tags_meta_box ($ post , $ box ) {
272272 $ tax_name = substr ($ box ['id ' ], 8 );
273273 $ taxonomy = get_taxonomy ($ tax_name );
274- $ helps = isset ($ taxonomy ->helps ) ? attribute_escape ($ taxonomy ->helps ) : __ ('Separate tags with commas. ' );
274+ $ helps = isset ($ taxonomy ->helps ) ? attr ($ taxonomy ->helps ) : __ ('Separate tags with commas. ' );
275275?>
276276<div class="tagsdiv" id="<?php echo $ tax_name ; ?> ">
277277 <p class="jaxtag">
@@ -293,7 +293,7 @@ function post_tags_meta_box($post, $box) {
293293foreach ( get_object_taxonomies ('post ' ) as $ tax_name ) {
294294 if ( !is_taxonomy_hierarchical ($ tax_name ) ) {
295295 $ taxonomy = get_taxonomy ($ tax_name );
296- $ label = isset ($ taxonomy ->label ) ? attribute_escape ($ taxonomy ->label ) : $ tax_name ;
296+ $ label = isset ($ taxonomy ->label ) ? attr ($ taxonomy ->label ) : $ tax_name ;
297297
298298 add_meta_box ('tagsdiv- ' . $ tax_name , $ label , 'post_tags_meta_box ' , 'post ' , 'side ' , 'core ' );
299299 }
@@ -384,7 +384,7 @@ function post_excerpt_meta_box($post) {
384384 * @param object $post
385385 */
386386function post_trackback_meta_box ($ post ) {
387- $ form_trackback = '<input type="text" name="trackback_url" id="trackback_url" class="code" tabindex="7" value=" ' . attribute_escape ( str_replace ("\n" , ' ' , $ post ->to_ping ) ) .'" /> ' ;
387+ $ form_trackback = '<input type="text" name="trackback_url" id="trackback_url" class="code" tabindex="7" value=" ' . attr ( str_replace ("\n" , ' ' , $ post ->to_ping ) ) .'" /> ' ;
388388 if ('' != $ post ->pinged ) {
389389 $ pings = '<p> ' . __ ('Already pinged: ' ) . '</p><ul> ' ;
390390 $ already_pinged = explode ("\n" , trim ($ post ->pinged ));
@@ -497,7 +497,7 @@ function post_comment_meta_box($post) {
497497 */
498498function post_slug_meta_box ($ post ) {
499499?>
500- <label class="hidden" for="post_name"><?php _e ('Post Slug ' ) ?> </label><input name="post_name" type="text" size="13" id="post_name" value="<?php echo attribute_escape ( $ post ->post_name ); ?> " />
500+ <label class="hidden" for="post_name"><?php _e ('Post Slug ' ) ?> </label><input name="post_name" type="text" size="13" id="post_name" value="<?php echo attr ( $ post ->post_name ); ?> " />
501501<?php
502502}
503503if ( !( 'pending ' == $ post ->post_status && !current_user_can ( 'publish_posts ' ) ) )
@@ -574,7 +574,7 @@ function post_revisions_meta_box($post) {
574574<input type="hidden" id="user-id" name="user_ID" value="<?php echo (int ) $ user_ID ?> " />
575575<input type="hidden" id="hiddenaction" name="action" value="<?php echo attr ($ form_action ) ?> " />
576576<input type="hidden" id="originalaction" name="originalaction" value="<?php echo attr ($ form_action ) ?> " />
577- <input type="hidden" id="post_author" name="post_author" value="<?php echo attribute_escape ( $ post ->post_author ); ?> " />
577+ <input type="hidden" id="post_author" name="post_author" value="<?php echo attr ( $ post ->post_author ); ?> " />
578578<input type="hidden" id="post_type" name="post_type" value="<?php echo attr ($ post ->post_type ) ?> " />
579579<input type="hidden" id="original_post_status" name="original_post_status" value="<?php echo attr ($ post ->post_status ) ?> " />
580580<input name="referredby" type="hidden" id="referredby" value="<?php echo clean_url (stripslashes (wp_get_referer ())); ?> " />
@@ -595,7 +595,7 @@ function post_revisions_meta_box($post) {
595595<div id="post-body-content">
596596<div id="titlediv">
597597<div id="titlewrap">
598- <input type="text" name="post_title" size="30" tabindex="1" value="<?php echo attribute_escape ( htmlspecialchars ( $ post ->post_title ) ); ?> " id="title" autocomplete="off" />
598+ <input type="text" name="post_title" size="30" tabindex="1" value="<?php echo attr ( htmlspecialchars ( $ post ->post_title ) ); ?> " id="title" autocomplete="off" />
599599</div>
600600<div class="inside">
601601<?php $ sample_permalink_html = get_sample_permalink_html ($ post ->ID ); ?>
0 commit comments