diff --git a/wp-admin/import/wordpress.php b/wp-admin/import/wordpress.php index 55fbcea2e9..7b4a8c0c30 100644 --- a/wp-admin/import/wordpress.php +++ b/wp-admin/import/wordpress.php @@ -35,8 +35,9 @@ class WP_Import { } function get_tag( $string, $tag ) { + global $wpdb; preg_match("|<$tag.*?>(.*?)|is", $string, $return); - $return = addslashes( trim( $return[1] ) ); + $return = $wpdb->escape( trim( $return[1] ) ); return $return; } @@ -336,6 +337,7 @@ class WP_Import { if ( $postmeta) { foreach ($postmeta as $p) { $key = $this->get_tag( $p, 'wp:meta_key' ); $value = $this->get_tag( $p, 'wp:meta_value' ); + $value = stripslashes($value); // add_post_meta() will escape. add_post_meta( $post_id, $key, $value ); } } }