Attr escaping

git-svn-id: https://develop.svn.wordpress.org/trunk@11173 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ryan Boren
2009-05-04 17:54:08 +00:00
parent 0289460644
commit cfd320446f
32 changed files with 128 additions and 125 deletions

View File

@@ -233,7 +233,7 @@ class WP_Import {
}
echo '<p class="submit">';
echo '<input type="submit" class="button" value="'.attr( __('Submit') ).'" />'.'<br />';
echo '<input type="submit" class="button" value="'. _a('Submit') .'" />'.'<br />';
echo '</p>';
echo '</form>';
@@ -242,14 +242,14 @@ class WP_Import {
function users_form($n, $author) {
if ( $this->allow_create_users() ) {
printf('<label>'.__('Create user %1$s or map to existing'), ' <input type="text" value="'.$author.'" name="'.'user_create['.intval($n).']'.'" maxlength="30" /></label> <br />');
printf('<label>'.__('Create user %1$s or map to existing'), ' <input type="text" value="'. attr($author) .'" name="'.'user_create['.intval($n).']'.'" maxlength="30" /></label> <br />');
}
else {
echo __('Map to existing').'<br />';
}
// keep track of $n => $author name
echo '<input type="hidden" name="author_in['.intval($n).']" value="'.htmlspecialchars($author).'" />';
echo '<input type="hidden" name="author_in['.intval($n).']" value="'.attr($author).'" />';
$users = get_users_of_blog();
?><select name="user_select[<?php echo $n; ?>]">