mirror of
https://github.com/gosticks/wordpress-develop.git
synced 2026-05-29 15:44:27 +00:00
Changed to superglobals, and eliminated $use_cache (since we always do).
git-svn-id: https://develop.svn.wordpress.org/trunk@1108 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
@@ -15,9 +15,9 @@ function add_magic_quotes($array) {
|
||||
}
|
||||
|
||||
if (!get_magic_quotes_gpc()) {
|
||||
$HTTP_GET_VARS = add_magic_quotes($HTTP_GET_VARS);
|
||||
$HTTP_POST_VARS = add_magic_quotes($HTTP_POST_VARS);
|
||||
$HTTP_COOKIE_VARS = add_magic_quotes($HTTP_COOKIE_VARS);
|
||||
$_GET = add_magic_quotes($_GET);
|
||||
$_POST = add_magic_quotes($_POST);
|
||||
$_COOKIE = add_magic_quotes($_COOKIE);
|
||||
}
|
||||
|
||||
$wpvarstoreset = array('action', 'safe_mode', 'withcomments', 'posts', 'poststart', 'postend', 'content', 'edited_post_title', 'comment_error', 'profile', 'trackback_url', 'excerpt', 'showcomments', 'commentstart', 'commentend', 'commentorder');
|
||||
@@ -25,14 +25,14 @@ $wpvarstoreset = array('action', 'safe_mode', 'withcomments', 'posts', 'poststar
|
||||
for ($i=0; $i<count($wpvarstoreset); $i += 1) {
|
||||
$wpvar = $wpvarstoreset[$i];
|
||||
if (!isset($$wpvar)) {
|
||||
if (empty($HTTP_POST_VARS["$wpvar"])) {
|
||||
if (empty($HTTP_GET_VARS["$wpvar"])) {
|
||||
if (empty($_POST["$wpvar"])) {
|
||||
if (empty($_GET["$wpvar"])) {
|
||||
$$wpvar = '';
|
||||
} else {
|
||||
$$wpvar = $HTTP_GET_VARS["$wpvar"];
|
||||
$$wpvar = $_GET["$wpvar"];
|
||||
}
|
||||
} else {
|
||||
$$wpvar = $HTTP_POST_VARS["$wpvar"];
|
||||
$$wpvar = $_POST["$wpvar"];
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -58,43 +58,43 @@ switch($action) {
|
||||
$standalone = 1;
|
||||
require_once('admin-header.php');
|
||||
|
||||
$post_pingback = intval($HTTP_POST_VARS['post_pingback']);
|
||||
$content = balanceTags($HTTP_POST_VARS['content']);
|
||||
$post_pingback = intval($_POST['post_pingback']);
|
||||
$content = balanceTags($_POST['content']);
|
||||
$content = format_to_post($content);
|
||||
$excerpt = balanceTags($HTTP_POST_VARS['excerpt']);
|
||||
$excerpt = balanceTags($_POST['excerpt']);
|
||||
$excerpt = format_to_post($excerpt);
|
||||
$post_title = addslashes($HTTP_POST_VARS['post_title']);
|
||||
$post_categories = $HTTP_POST_VARS['post_category'];
|
||||
$post_title = addslashes($_POST['post_title']);
|
||||
$post_categories = $_POST['post_category'];
|
||||
if(get_settings('use_geo_positions')) {
|
||||
$latstr = $HTTP_POST_VARS['post_latf'];
|
||||
$lonstr = $HTTP_POST_VARS['post_lonf'];
|
||||
$latstr = $_POST['post_latf'];
|
||||
$lonstr = $_POST['post_lonf'];
|
||||
if((strlen($latstr) > 2) && (strlen($lonstr) > 2 ) ) {
|
||||
$post_latf = floatval($HTTP_POST_VARS['post_latf']);
|
||||
$post_lonf = floatval($HTTP_POST_VARS['post_lonf']);
|
||||
$post_latf = floatval($_POST['post_latf']);
|
||||
$post_lonf = floatval($_POST['post_lonf']);
|
||||
}
|
||||
}
|
||||
$post_status = $HTTP_POST_VARS['post_status'];
|
||||
$post_status = $_POST['post_status'];
|
||||
if (empty($post_status)) $post_status = get_settings('default_post_status');
|
||||
$comment_status = $HTTP_POST_VARS['comment_status'];
|
||||
$comment_status = $_POST['comment_status'];
|
||||
if (empty($comment_status)) $comment_status = get_settings('default_comment_status');
|
||||
$ping_status = $HTTP_POST_VARS['ping_status'];
|
||||
$ping_status = $_POST['ping_status'];
|
||||
if (empty($ping_status)) $ping_status = get_settings('default_ping_status');
|
||||
$post_password = addslashes(stripslashes($HTTP_POST_VARS['post_password']));
|
||||
$post_password = addslashes(stripslashes($_POST['post_password']));
|
||||
$post_name = sanitize_title($post_title);
|
||||
$trackback = $HTTP_POST_VARS['trackback_url'];
|
||||
$trackback = $_POST['trackback_url'];
|
||||
// Format trackbacks
|
||||
$trackback = preg_replace('|\s+|', '\n', $trackback);
|
||||
|
||||
if ($user_level == 0)
|
||||
die (__('Cheatin’ uh?'));
|
||||
|
||||
if (($user_level > 4) && (!empty($HTTP_POST_VARS['edit_date']))) {
|
||||
$aa = $HTTP_POST_VARS['aa'];
|
||||
$mm = $HTTP_POST_VARS['mm'];
|
||||
$jj = $HTTP_POST_VARS['jj'];
|
||||
$hh = $HTTP_POST_VARS['hh'];
|
||||
$mn = $HTTP_POST_VARS['mn'];
|
||||
$ss = $HTTP_POST_VARS['ss'];
|
||||
if (($user_level > 4) && (!empty($_POST['edit_date']))) {
|
||||
$aa = $_POST['aa'];
|
||||
$mm = $_POST['mm'];
|
||||
$jj = $_POST['jj'];
|
||||
$hh = $_POST['hh'];
|
||||
$mn = $_POST['mn'];
|
||||
$ss = $_POST['ss'];
|
||||
$jj = ($jj > 31) ? 31 : $jj;
|
||||
$hh = ($hh > 23) ? $hh - 24 : $hh;
|
||||
$mn = ($mn > 59) ? $mn - 60 : $mn;
|
||||
@@ -106,8 +106,8 @@ switch($action) {
|
||||
$now_gmt = current_time('mysql', 1);
|
||||
}
|
||||
|
||||
if (!empty($HTTP_POST_VARS['mode'])) {
|
||||
switch($HTTP_POST_VARS['mode']) {
|
||||
if (!empty($_POST['mode'])) {
|
||||
switch($_POST['mode']) {
|
||||
case 'bookmarklet':
|
||||
$location = 'bookmarklet.php?a=b';
|
||||
break;
|
||||
@@ -123,10 +123,10 @@ switch($action) {
|
||||
}
|
||||
|
||||
// What to do based on which button they pressed
|
||||
if ('' != $HTTP_POST_VARS['saveasdraft']) $post_status = 'draft';
|
||||
if ('' != $HTTP_POST_VARS['saveasprivate']) $post_status = 'private';
|
||||
if ('' != $HTTP_POST_VARS['publish']) $post_status = 'publish';
|
||||
if ('' != $HTTP_POST_VARS['advanced']) $post_status = 'draft';
|
||||
if ('' != $_POST['saveasdraft']) $post_status = 'draft';
|
||||
if ('' != $_POST['saveasprivate']) $post_status = 'private';
|
||||
if ('' != $_POST['publish']) $post_status = 'publish';
|
||||
if ('' != $_POST['advanced']) $post_status = 'draft';
|
||||
|
||||
|
||||
if((get_settings('use_geo_positions')) && (strlen($latstr) > 2) && (strlen($lonstr) > 2) ) {
|
||||
@@ -147,7 +147,7 @@ switch($action) {
|
||||
|
||||
$post_ID = $wpdb->get_var("SELECT ID FROM $tableposts ORDER BY ID DESC LIMIT 1");
|
||||
|
||||
if ('' != $HTTP_POST_VARS['advanced'])
|
||||
if ('' != $_POST['advanced'])
|
||||
$location = "post.php?action=edit&post=$post_ID";
|
||||
|
||||
|
||||
@@ -219,7 +219,7 @@ switch($action) {
|
||||
$standalone = 0;
|
||||
require_once('admin-header.php');
|
||||
|
||||
$post = $HTTP_GET_VARS['post'];
|
||||
$post = $_GET['post'];
|
||||
if ($user_level > 0) {
|
||||
$postdata = get_postdata($post);
|
||||
$authordata = get_userdata($postdata['Author_ID']);
|
||||
@@ -277,18 +277,18 @@ When you’re promoted, just reload this page and you’ll be able to bl
|
||||
if (!isset($blog_ID)) {
|
||||
$blog_ID = 1;
|
||||
}
|
||||
$post_ID = $HTTP_POST_VARS['post_ID'];
|
||||
$post_categories = $HTTP_POST_VARS['post_category'];
|
||||
$post_ID = $_POST['post_ID'];
|
||||
$post_categories = $_POST['post_category'];
|
||||
if (!$post_categories) $post_categories[] = 1;
|
||||
$post_autobr = intval($HTTP_POST_VARS['post_autobr']);
|
||||
$content = balanceTags($HTTP_POST_VARS['content']);
|
||||
$post_autobr = intval($_POST['post_autobr']);
|
||||
$content = balanceTags($_POST['content']);
|
||||
$content = format_to_post($content);
|
||||
$excerpt = balanceTags($HTTP_POST_VARS['excerpt']);
|
||||
$excerpt = balanceTags($_POST['excerpt']);
|
||||
$excerpt = format_to_post($excerpt);
|
||||
$post_title = addslashes($HTTP_POST_VARS['post_title']);
|
||||
$post_title = addslashes($_POST['post_title']);
|
||||
if(get_settings('use_geo_positions')) {
|
||||
$latf = floatval($HTTP_POST_VARS["post_latf"]);
|
||||
$lonf = floatval($HTTP_POST_VARS["post_lonf"]);
|
||||
$latf = floatval($_POST["post_latf"]);
|
||||
$lonf = floatval($_POST["post_lonf"]);
|
||||
$latlonaddition = "";
|
||||
if( ($latf != null) && ($latf <= 90 ) && ($latf >= -90) && ($lonf != null) && ($lonf <= 360) && ($lonf >= -360) ) {
|
||||
pingGeoUrl($post_ID);
|
||||
@@ -297,28 +297,28 @@ When you’re promoted, just reload this page and you’ll be able to bl
|
||||
$latlonaddition = " post_lat=null, post_lon=null, ";
|
||||
}
|
||||
}
|
||||
$prev_status = $HTTP_POST_VARS['prev_status'];
|
||||
$post_status = $HTTP_POST_VARS['post_status'];
|
||||
$comment_status = $HTTP_POST_VARS['comment_status'];
|
||||
$prev_status = $_POST['prev_status'];
|
||||
$post_status = $_POST['post_status'];
|
||||
$comment_status = $_POST['comment_status'];
|
||||
if (empty($comment_status)) $comment_status = get_settings('default_comment_status');
|
||||
$ping_status = $HTTP_POST_VARS['ping_status'];
|
||||
$ping_status = $_POST['ping_status'];
|
||||
if (empty($ping_status)) $ping_status = get_settings('default_ping_status');
|
||||
$post_password = addslashes($HTTP_POST_VARS['post_password']);
|
||||
$post_password = addslashes($_POST['post_password']);
|
||||
$post_name = sanitize_title($_POST['post_name']);
|
||||
if (empty($post_name)) $post_name = sanitize_title($post_title);
|
||||
$trackback = $HTTP_POST_VARS['trackback_url'];
|
||||
$trackback = $_POST['trackback_url'];
|
||||
// Format trackbacks
|
||||
$trackback = preg_replace('|\s+|', '\n', $trackback);
|
||||
|
||||
if ('' != $HTTP_POST_VARS['publish']) $post_status = 'publish';
|
||||
if ('' != $_POST['publish']) $post_status = 'publish';
|
||||
|
||||
if (($user_level > 4) && (!empty($HTTP_POST_VARS['edit_date']))) {
|
||||
$aa = $HTTP_POST_VARS['aa'];
|
||||
$mm = $HTTP_POST_VARS['mm'];
|
||||
$jj = $HTTP_POST_VARS['jj'];
|
||||
$hh = $HTTP_POST_VARS['hh'];
|
||||
$mn = $HTTP_POST_VARS['mn'];
|
||||
$ss = $HTTP_POST_VARS['ss'];
|
||||
if (($user_level > 4) && (!empty($_POST['edit_date']))) {
|
||||
$aa = $_POST['aa'];
|
||||
$mm = $_POST['mm'];
|
||||
$jj = $_POST['jj'];
|
||||
$hh = $_POST['hh'];
|
||||
$mn = $_POST['mn'];
|
||||
$ss = $_POST['ss'];
|
||||
$jj = ($jj > 31) ? 31 : $jj;
|
||||
$hh = ($hh > 23) ? $hh - 24 : $hh;
|
||||
$mn = ($mn > 59) ? $mn - 60 : $mn;
|
||||
@@ -399,8 +399,8 @@ When you’re promoted, just reload this page and you’ll be able to bl
|
||||
|
||||
add_meta($post_ID);
|
||||
|
||||
if ($HTTP_POST_VARS['save']) {
|
||||
$location = $HTTP_SERVER_VARS['HTTP_REFERER'];
|
||||
if ($_POST['save']) {
|
||||
$location = $_SERVER['HTTP_REFERER'];
|
||||
} else {
|
||||
$location = 'post.php';
|
||||
}
|
||||
@@ -416,7 +416,7 @@ When you’re promoted, just reload this page and you’ll be able to bl
|
||||
if ($user_level == 0)
|
||||
die ('Cheatin’ uh?');
|
||||
|
||||
$post_id = intval($HTTP_GET_VARS['post']);
|
||||
$post_id = intval($_GET['post']);
|
||||
$postdata = get_postdata($post_id) or die(sprintf(__('Oops, no post with this ID. <a href="%s">Go back</a>!'), 'post.php'));
|
||||
$authordata = get_userdata($postdata['Author_ID']);
|
||||
|
||||
@@ -444,7 +444,7 @@ When you’re promoted, just reload this page and you’ll be able to bl
|
||||
sleep($sleep_after_edit);
|
||||
}
|
||||
|
||||
$sendback = $HTTP_SERVER_VARS['HTTP_REFERER'];
|
||||
$sendback = $_SERVER['HTTP_REFERER'];
|
||||
if (strstr($sendback, 'post.php')) $sendback = get_settings('siteurl') .'/wp-admin/post.php';
|
||||
header ('Location: ' . $sendback);
|
||||
do_action('delete_post', $post_ID);
|
||||
@@ -462,7 +462,7 @@ When you’re promoted, just reload this page and you’ll be able to bl
|
||||
die (__('Cheatin’ uh?'));
|
||||
}
|
||||
|
||||
$comment = $HTTP_GET_VARS['comment'];
|
||||
$comment = $_GET['comment'];
|
||||
$commentdata = get_commentdata($comment, 1, true) or die(sprintf(__('Oops, no comment with this ID. <a href="%s">Go back</a>!'), 'javascript:history.go(-1)'));
|
||||
$content = $commentdata['comment_content'];
|
||||
$content = format_to_edit($content);
|
||||
@@ -479,8 +479,8 @@ When you’re promoted, just reload this page and you’ll be able to bl
|
||||
if ($user_level == 0)
|
||||
die (__('Cheatin’ uh?'));
|
||||
|
||||
$comment = $HTTP_GET_VARS['comment'];
|
||||
$p = $HTTP_GET_VARS['p'];
|
||||
$comment = $_GET['comment'];
|
||||
$p = $_GET['p'];
|
||||
$commentdata = get_commentdata($comment, 1, true) or die(sprintf(__('Oops, no comment with this ID. <a href="%s">Go back</a>!'), 'edit.php'));
|
||||
|
||||
echo "<div class=\"wrap\">\n";
|
||||
@@ -515,9 +515,9 @@ When you’re promoted, just reload this page and you’ll be able to bl
|
||||
die (__('Cheatin’ uh?'));
|
||||
|
||||
|
||||
$comment = $HTTP_GET_VARS['comment'];
|
||||
$p = $HTTP_GET_VARS['p'];
|
||||
if (isset($HTTP_GET_VARS['noredir'])) {
|
||||
$comment = $_GET['comment'];
|
||||
$p = $_GET['p'];
|
||||
if (isset($_GET['noredir'])) {
|
||||
$noredir = true;
|
||||
} else {
|
||||
$noredir = false;
|
||||
@@ -533,8 +533,8 @@ When you’re promoted, just reload this page and you’ll be able to bl
|
||||
wp_set_comment_status($comment, "delete");
|
||||
do_action('delete_comment', $comment);
|
||||
|
||||
if (($HTTP_SERVER_VARS['HTTP_REFERER'] != "") && (false == $noredir)) {
|
||||
header('Location: ' . $HTTP_SERVER_VARS['HTTP_REFERER']);
|
||||
if (($_SERVER['HTTP_REFERER'] != "") && (false == $noredir)) {
|
||||
header('Location: ' . $_SERVER['HTTP_REFERER']);
|
||||
} else {
|
||||
header('Location: '. get_settings('siteurl') .'/wp-admin/edit.php?p='.$p.'&c=1#comments');
|
||||
}
|
||||
@@ -549,9 +549,9 @@ When you’re promoted, just reload this page and you’ll be able to bl
|
||||
if ($user_level == 0)
|
||||
die (__('Cheatin’ uh?'));
|
||||
|
||||
$comment = $HTTP_GET_VARS['comment'];
|
||||
$p = $HTTP_GET_VARS['p'];
|
||||
if (isset($HTTP_GET_VARS['noredir'])) {
|
||||
$comment = $_GET['comment'];
|
||||
$p = $_GET['p'];
|
||||
if (isset($_GET['noredir'])) {
|
||||
$noredir = true;
|
||||
} else {
|
||||
$noredir = false;
|
||||
@@ -561,8 +561,8 @@ When you’re promoted, just reload this page and you’ll be able to bl
|
||||
|
||||
wp_set_comment_status($comment, "hold");
|
||||
|
||||
if (($HTTP_SERVER_VARS['HTTP_REFERER'] != "") && (false == $noredir)) {
|
||||
header('Location: ' . $HTTP_SERVER_VARS['HTTP_REFERER']);
|
||||
if (($_SERVER['HTTP_REFERER'] != "") && (false == $noredir)) {
|
||||
header('Location: ' . $_SERVER['HTTP_REFERER']);
|
||||
} else {
|
||||
header('Location: '. get_settings('siteurl') .'/wp-admin/edit.php?p='.$p.'&c=1#comments');
|
||||
}
|
||||
@@ -577,8 +577,8 @@ When you’re promoted, just reload this page and you’ll be able to bl
|
||||
if ($user_level == 0)
|
||||
die (__('Cheatin’ uh?'));
|
||||
|
||||
$comment = $HTTP_GET_VARS['comment'];
|
||||
$p = $HTTP_GET_VARS['p'];
|
||||
$comment = $_GET['comment'];
|
||||
$p = $_GET['p'];
|
||||
$commentdata = get_commentdata($comment, 1, true) or die(sprintf(__('Oops, no comment with this ID. <a href="%s">Go back</a>!'), 'edit.php'));
|
||||
|
||||
wp_set_comment_status($comment, "approve");
|
||||
@@ -606,9 +606,9 @@ When you’re promoted, just reload this page and you’ll be able to bl
|
||||
if ($user_level == 0)
|
||||
die (__('Cheatin’ uh?'));
|
||||
|
||||
$comment = $HTTP_GET_VARS['comment'];
|
||||
$p = $HTTP_GET_VARS['p'];
|
||||
if (isset($HTTP_GET_VARS['noredir'])) {
|
||||
$comment = $_GET['comment'];
|
||||
$p = $_GET['p'];
|
||||
if (isset($_GET['noredir'])) {
|
||||
$noredir = true;
|
||||
} else {
|
||||
$noredir = false;
|
||||
@@ -621,8 +621,8 @@ When you’re promoted, just reload this page and you’ll be able to bl
|
||||
}
|
||||
|
||||
|
||||
if (($HTTP_SERVER_VARS['HTTP_REFERER'] != "") && (false == $noredir)) {
|
||||
header('Location: ' . $HTTP_SERVER_VARS['HTTP_REFERER']);
|
||||
if (($_SERVER['HTTP_REFERER'] != "") && (false == $noredir)) {
|
||||
header('Location: ' . $_SERVER['HTTP_REFERER']);
|
||||
} else {
|
||||
header('Location: '. get_settings('siteurl') .'/wp-admin/edit.php?p='.$p.'&c=1#comments');
|
||||
}
|
||||
@@ -637,22 +637,22 @@ When you’re promoted, just reload this page and you’ll be able to bl
|
||||
if ($user_level == 0)
|
||||
die (__('Cheatin’ uh?'));
|
||||
|
||||
$comment_ID = $HTTP_POST_VARS['comment_ID'];
|
||||
$comment_post_ID = $HTTP_POST_VARS['comment_post_ID'];
|
||||
$newcomment_author = $HTTP_POST_VARS['newcomment_author'];
|
||||
$newcomment_author_email = $HTTP_POST_VARS['newcomment_author_email'];
|
||||
$newcomment_author_url = $HTTP_POST_VARS['newcomment_author_url'];
|
||||
$comment_ID = $_POST['comment_ID'];
|
||||
$comment_post_ID = $_POST['comment_post_ID'];
|
||||
$newcomment_author = $_POST['newcomment_author'];
|
||||
$newcomment_author_email = $_POST['newcomment_author_email'];
|
||||
$newcomment_author_url = $_POST['newcomment_author_url'];
|
||||
$newcomment_author = addslashes($newcomment_author);
|
||||
$newcomment_author_email = addslashes($newcomment_author_email);
|
||||
$newcomment_author_url = addslashes($newcomment_author_url);
|
||||
|
||||
if (($user_level > 4) && (!empty($HTTP_POST_VARS['edit_date']))) {
|
||||
$aa = $HTTP_POST_VARS['aa'];
|
||||
$mm = $HTTP_POST_VARS['mm'];
|
||||
$jj = $HTTP_POST_VARS['jj'];
|
||||
$hh = $HTTP_POST_VARS['hh'];
|
||||
$mn = $HTTP_POST_VARS['mn'];
|
||||
$ss = $HTTP_POST_VARS['ss'];
|
||||
if (($user_level > 4) && (!empty($_POST['edit_date']))) {
|
||||
$aa = $_POST['aa'];
|
||||
$mm = $_POST['mm'];
|
||||
$jj = $_POST['jj'];
|
||||
$hh = $_POST['hh'];
|
||||
$mn = $_POST['mn'];
|
||||
$ss = $_POST['ss'];
|
||||
$jj = ($jj > 31) ? 31 : $jj;
|
||||
$hh = ($hh > 23) ? $hh - 24 : $hh;
|
||||
$mn = ($mn > 59) ? $mn - 60 : $mn;
|
||||
@@ -673,7 +673,7 @@ When you’re promoted, just reload this page and you’ll be able to bl
|
||||
WHERE comment_ID = $comment_ID"
|
||||
);
|
||||
|
||||
$referredby = $HTTP_POST_VARS['referredby'];
|
||||
$referredby = $_POST['referredby'];
|
||||
if (!empty($referredby)) header('Location: ' . $referredby);
|
||||
else header ("Location: edit.php?p=$comment_post_ID&c=1#comments");
|
||||
do_action('edit_comment', $comment_ID);
|
||||
|
||||
Reference in New Issue
Block a user