From 34f8f74d36497f6c737efcf9b9a56d54cc002c88 Mon Sep 17 00:00:00 2001
From: Matt Mullenweg <matt@git.wordpress.org>
Date: Wed, 20 Apr 2005 04:06:37 +0000
Subject: [PATCH] More sanitization cleanups

git-svn-id: https://develop.svn.wordpress.org/trunk@2557 602fd350-edb4-49c9-b593-d223f7449a82
---
 wp-admin/edit.php | 2 +-
 wp-admin/post.php | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/wp-admin/edit.php b/wp-admin/edit.php
index aacb05ca91..ca81418800 100644
--- a/wp-admin/edit.php
+++ b/wp-admin/edit.php
@@ -88,7 +88,7 @@ if ( is_month() ) {
 <form name="searchform" action="" method="get" style="float: left; width: 16em; margin-right: 3em;"> 
   <fieldset> 
   <legend><?php _e('Search Posts&hellip;') ?></legend> 
-  <input type="text" name="s" value="<?php if (isset($s)) echo $s; ?>" size="17" /> 
+  <input type="text" name="s" value="<?php if (isset($s)) echo wp_specialchars($s, 1); ?>" size="17" /> 
   <input type="submit" name="submit" value="<?php _e('Search') ?>"  /> 
   </fieldset>
 </form>
diff --git a/wp-admin/post.php b/wp-admin/post.php
index cbd51e185b..20fbd8e39c 100644
--- a/wp-admin/post.php
+++ b/wp-admin/post.php
@@ -487,7 +487,7 @@ case 'confirmdeletecomment':
 	require_once('./admin-header.php');
 
 	$comment = $_GET['comment'];
-	$p = $_GET['p'];
+	$p = (int) $_GET['p'];
 	$commentdata = get_commentdata($comment, 1, true) or die(sprintf(__('Oops, no comment with this ID. <a href="%s">Go back</a>!'), 'edit.php'));
 
 	if (!user_can_delete_post_comments($user_ID, $commentdata['comment_post_ID'])) {