From 08a55fd2232f9d08cef71f441da6c1475c7aa7e2 Mon Sep 17 00:00:00 2001 From: Ryan Boren Date: Fri, 15 May 2009 20:05:52 +0000 Subject: [PATCH] Add escaping for quick edit saves. Props hailin. fixes #9822 git-svn-id: https://develop.svn.wordpress.org/trunk@11343 602fd350-edb4-49c9-b593-d223f7449a82 --- wp-admin/admin-ajax.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/wp-admin/admin-ajax.php b/wp-admin/admin-ajax.php index 237ae09ab6..2486f5999e 100644 --- a/wp-admin/admin-ajax.php +++ b/wp-admin/admin-ajax.php @@ -1062,7 +1062,10 @@ case 'inline-save': } $data = &$_POST; + $post = get_post( $post_ID, ARRAY_A ); + $post = add_magic_quotes($post); //since it is from db + $data['content'] = $post['post_content']; $data['excerpt'] = $post['post_excerpt']; @@ -1084,7 +1087,6 @@ case 'inline-save': $data['ping_status'] = 'closed'; // update the post - $_POST = $data; edit_post(); $post = array();