Changeset 5559 for trunk/src/includes/topics/template.php

Timestamp:

11/10/2014 06:09:14 PM (10 years ago)

Author:

johnjamesjacoby

Message:

Update to newer slashing functions, as our minimum requirement is WordPress 3.6.

Also add filters to topic-title & topic-tags form fields. See #2719.

File:

• trunk/src/includes/topics/template.php (modified) (6 diffs)

trunk/src/includes/topics/template.php

@@ -3850 +3850 @@
         // Get _POST data
         if ( bbp_is_topic_form_post_request() && isset( $_POST['bbp_topic_title'] ) ) {
-            $topic_title = stripslashes( $_POST['bbp_topic_title'] );
+            $topic_title = wp_unslash( $_POST['bbp_topic_title'] );
 
         // Get edit data
@@ -3861 +3861 @@
         }
 
-        return apply_filters( 'bbp_get_form_topic_title', esc_attr( $topic_title ) );
+        return apply_filters( 'bbp_get_form_topic_title', $topic_title );
     }
 
@@ -3887 +3887 @@
         // Get _POST data
         if ( bbp_is_topic_form_post_request() && isset( $_POST['bbp_topic_content'] ) ) {
-            $topic_content = stripslashes( $_POST['bbp_topic_content'] );
+            $topic_content = wp_unslash( $_POST['bbp_topic_content'] );
 
         // Get edit data
@@ -3934 +3934 @@
         // Get _POST data
         if ( ( bbp_is_topic_form_post_request() || bbp_is_reply_form_post_request() ) && isset( $_POST['bbp_topic_tags'] ) ) {
-            $topic_tags = stripslashes( $_POST['bbp_topic_tags'] );
+            $topic_tags = wp_unslash( $_POST['bbp_topic_tags'] );
 
         // Get edit data
@@ -3990 +3990 @@
         }
 
-        return apply_filters( 'bbp_get_form_topic_tags', esc_attr( $topic_tags ) );
+        return apply_filters( 'bbp_get_form_topic_tags', $topic_tags );
     }
 
@@ -4148 +4148 @@
         // Get _POST data
         if ( bbp_is_topic_form_post_request() && isset( $_POST['bbp_topic_edit_reason'] ) ) {
-            $topic_edit_reason = stripslashes( $_POST['bbp_topic_edit_reason'] );
+            $topic_edit_reason = wp_unslash( $_POST['bbp_topic_edit_reason'] );
 
         // No data