Changeset 5684 for trunk/src/includes/forums/functions.php

Timestamp:

04/15/2015 03:06:31 PM (11 years ago)

Author:

johnjamesjacoby

Message:

General: Use sanitize_text_field() in lieu of old-bbPress style pre-escaping technique.

File:

• trunk/src/includes/forums/functions.php (modified) (5 diffs)

trunk/src/includes/forums/functions.php

@@ -87 +87 @@
  * @uses bbp_set_current_anonymous_user_data() To set the anonymous user cookies
  * @uses is_wp_error() To check if the value retrieved is a {@link WP_Error}
- * @uses esc_attr() For sanitization
  * @uses bbp_is_forum_category() To check if the forum is a category
  * @uses bbp_is_forum_closed() To check if the forum is closed
@@ -147 +146 @@
 
     if ( !empty( $_POST['bbp_forum_title'] ) ) {
-        $forum_title = esc_attr( strip_tags( $_POST['bbp_forum_title'] ) );
+        $forum_title = sanitize_text_field( $_POST['bbp_forum_title'] );
     }
 
@@ -352 +351 @@
  * @uses bbp_filter_anonymous_post_data() To filter anonymous data
  * @uses is_wp_error() To check if the value retrieved is a {@link WP_Error}
- * @uses esc_attr() For sanitization
  * @uses bbp_is_forum_category() To check if the forum is a category
  * @uses bbp_is_forum_closed() To check if the forum is closed
@@ -454 +452 @@
 
     if ( !empty( $_POST['bbp_forum_title'] ) ) {
-        $forum_title = esc_attr( strip_tags( $_POST['bbp_forum_title'] ) );
+        $forum_title = sanitize_text_field( $_POST['bbp_forum_title'] );
     }
 
@@ -522 +520 @@
     // Revision Reason
     if ( !empty( $_POST['bbp_forum_edit_reason'] ) )
-        $forum_edit_reason = esc_attr( strip_tags( $_POST['bbp_forum_edit_reason'] ) );
+        $forum_edit_reason = sanitize_text_field( $_POST['bbp_forum_edit_reason'] );
 
     // Update revision log