attr escaping. see #9650

git-svn-id: https://develop.svn.wordpress.org/trunk@11110 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ryan Boren
2009-04-28 06:37:51 +00:00
parent fe7c34b6fd
commit 3b7130bbae
30 changed files with 139 additions and 139 deletions

View File

@@ -40,15 +40,15 @@ function list_core_update( $update ) {
echo '<form method="post" action="' . $form_action . '" name="upgrade" class="upgrade">';
wp_nonce_field('upgrade-core');
echo '<p>';
echo '<input id="upgrade" class="button" type="submit" value="' . $submit . '" name="upgrade" />&nbsp;';
echo '<input name="version" value="'.$update->current.'" type="hidden"/>';
echo '<input name="locale" value="'.$update->locale.'" type="hidden"/>';
echo '<a href="' . $update->package . '" class="button">' . $download . '</a>&nbsp;';
echo '<input id="upgrade" class="button" type="submit" value="' . attr($submit) . '" name="upgrade" />&nbsp;';
echo '<input name="version" value="'. attr($update->current) .'" type="hidden"/>';
echo '<input name="locale" value="'. attr($update->locale) .'" type="hidden"/>';
echo '<a href="' . clean_url($update->package) . '" class="button">' . $download . '</a>&nbsp;';
if ( 'en_US' != $update->locale )
if ( !isset( $update->dismissed ) || !$update->dismissed )
echo '<input id="dismiss" class="button" type="submit" value="' . attr(__('Hide this update')) . '" name="dismiss" />';
echo '<input id="dismiss" class="button" type="submit" value="' . _a('Hide this update') . '" name="dismiss" />';
else
echo '<input id="undismiss" class="button" type="submit" value="' . attr(__('Bring back this update')) . '" name="undismiss" />';
echo '<input id="undismiss" class="button" type="submit" value="' . _a('Bring back this update') . '" name="undismiss" />';
echo '</p>';
echo '</form>';