From cd740755cc7d6aafeca86e939ace17a20497765e Mon Sep 17 00:00:00 2001 From: Ryan Boren Date: Sat, 29 Dec 2007 19:20:15 +0000 Subject: [PATCH] Don't echo posted content. Specialchars all other displayed info. git-svn-id: https://develop.svn.wordpress.org/trunk@6524 602fd350-edb4-49c9-b593-d223f7449a82 --- wp-mail.php | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/wp-mail.php b/wp-mail.php index 7994babdee..6ec13abef0 100644 --- a/wp-mail.php +++ b/wp-mail.php @@ -182,8 +182,7 @@ for ($i=1; $i <= $count; $i++) : do_action('publish_phone', $post_ID); echo "\n

Author: " . wp_specialchars($post_author) . "

"; - echo "\n

Posted title: " . sanitize_post_field('post_title', $post_title, $post_ID, 'display') . "
"; - echo "\nPosted content:

". sanitize_post_field('post_content', $post_content, $post_ID, 'display') . '

'; + echo "\n

Posted title: " . wp_specialchars($post_title) . "
"; if(!$pop3->delete($i)) { echo '

Oops '.wp_specialchars($pop3->ERROR).'

';