Scott Taylor 74ed2089b4 The gallery shortcode used to accept a SQL chunk for the value of the orderby attribute. The reason? get_posts() used to be called in the shortcode handler with a query-string blob of arguments passed to it. To mitigate breakage, sanitize_sql_orderby() was created in [7592]. ...

`sanitize_sql_orderby()` expects a comma to be present when multiple `orderby` values were passed. The correct syntax for multiple fields is space-delimited. Since [29027], comma-separated values would never be parsed correctly when passed to `WP_Query->parse_orderby()`.

`sanitize_sql_orderby()` is used nowhere else in core, save for the `playlist` shortcode - I only added it there because I was mimic'ing the `gallery` logic. The function call can be removed from both shortcode handlers.
 
See #6476.
Fixes #23873.


git-svn-id: https://develop.svn.wordpress.org/trunk@30068 602fd350-edb4-49c9-b593-d223f7449a82

2014-10-28 20:42:20 +00:00

..

certificates

WP_HTTP: Update the Root Certificate bundle used for SSL communication by WP_HTTP.

2014-02-27 02:32:57 +00:00

css

Editor: use <button> instead of <a> for the Visual/Text buttons, make them focusable. Props afercia, fixes #27553

2014-10-24 01:20:42 +00:00

fonts

Dashicons: Update to the latest dashicons files.

2014-08-17 15:00:40 +00:00

ID3

Update getID3 library to 1.9.8.

2014-09-11 19:06:33 +00:00

images

Edit Image modal:

2014-03-27 22:40:06 +00:00

js

TinyMCE: update to 4.1.6+. Adds support for cache-busting when auto-loading JS and CSS. Change the tests to run in /build. Changelog: https://github.com/tinymce/tinymce/blob/master/changelog.txt.

2014-10-23 02:07:15 +00:00

pomo

Fix some documentation typos in various core files.

2014-08-13 03:55:10 +00:00

SimplePie

…

Text

…

theme-compat

Eliminate use of extract() in wp-includes/theme-compat/comments-popup.php.

2014-05-13 04:39:17 +00:00

admin-bar.php

Don't display Edit links for posts and terms in toolbar if they are empty.

2014-09-07 08:31:57 +00:00

atomlib.php

First there were two, and now there are three -- in the @since versions that came before and that shall be. And so it will be, says nacin.

2013-12-24 18:56:05 +00:00

author-template.php

Convert documentation of default arguments in wp_list_authors() to the hash-notation style.

2014-06-29 22:33:46 +00:00

bookmark-template.php

Add indentation for the hash notation missed in [29108].

2014-07-11 22:58:08 +00:00

bookmark.php

Allow bookmarks to be ordered by link_description in get_bookmarks().

2014-09-29 03:11:55 +00:00

cache.php

Fix some words that aren't words.

2014-08-09 19:29:37 +00:00

canonical.php

Support nested tax query syntax in redirect_canonical().

2014-10-15 15:42:45 +00:00

capabilities.php

Plugin/Theme Uploads: New capabilities; unify UIs; ensure compatibility with old filters.

2014-08-27 01:31:05 +00:00

category-template.php

Additional @return clarifications for get_the_terms(), get_the_tag_list(), and get_the_term_list().

2014-08-12 23:47:23 +00:00

category.php

Deprecate get_all_category_ids(). Suggest get_terms() as a replacement.

2014-06-05 16:25:01 +00:00

class-feed.php

Add access modifiers to methods/members in WP_Feed_Cache, WP_SimplePie_File, and WP_Feed_Cache_Transient.

2014-05-19 05:26:48 +00:00

class-http.php

HTTP API: Support both the 'limit_response_size' and 'stream' parameters at the same time, allowing a partial file download.

2014-10-20 07:31:45 +00:00

class-IXR.php

Fix some documentation typos in various core files.

2014-08-13 03:55:10 +00:00

class-json.php

…

class-oembed.php

WP_oEmbed::_strip_newlines is called as a filter callback for oembed_dataparse, must be public. It was marked as private for fun in [14109] and then made private officially in [28507].

2014-09-12 22:53:04 +00:00

class-phpass.php

First there were two, and now there are three -- in the @since versions that came before and that shall be. And so it will be, says nacin.

2013-12-24 18:56:05 +00:00

class-phpmailer.php

Update PHPMailer to 5.2.7 from 5.2.4.

2014-03-03 20:24:31 +00:00

class-pop3.php

…

class-simplepie.php

Fix some documentation typos in various core files.

2014-08-13 03:55:10 +00:00

class-smtp.php

PHPMailer: Merge upstream commit (PR274).

2014-09-29 10:27:58 +00:00

class-snoopy.php

…

class-wp-admin-bar.php

In wp-includes/class-wp-admin-bar.php, break is unreachabled after return.

2014-05-06 18:28:46 +00:00

class-wp-ajax-response.php

Fix some words that aren't words.

2014-08-09 19:29:37 +00:00

class-wp-customize-control.php

Add the ability for a customizer control to render its controls via a JavaScript template. Switches the default color picker control to a JavaScript template. See #29572. Props celloexpressions

2014-10-24 16:31:54 +00:00

class-wp-customize-manager.php

Add wp_json_encode(), a wrapper for json_encode() that ensures everything is converted to UTF-8.

2014-10-28 18:34:16 +00:00

class-wp-customize-panel.php

Customizer: Extract content markup for panels to its own method, WP_Customize_Panel::render_content().

2014-10-17 21:24:32 +00:00

class-wp-customize-section.php

Customizer: Increase default priority for a section to 160.

2014-08-15 19:35:52 +00:00

class-wp-customize-setting.php

Customizer: Introduce customize_preview_$setting->type action to handle multiple settings of the same type.

2014-10-17 21:20:42 +00:00

class-wp-customize-widgets.php

Add wp_json_encode(), a wrapper for json_encode() that ensures everything is converted to UTF-8.

2014-10-28 18:34:16 +00:00

class-wp-editor.php

Add wp_json_encode(), a wrapper for json_encode() that ensures everything is converted to UTF-8.

2014-10-28 18:34:16 +00:00

class-wp-embed.php

Use HTTPS URLs for core.trac.wordpress.org

2014-09-29 13:27:55 +00:00

class-wp-error.php

New remove() method and some unit tests for the WP_Error class.

2014-10-08 07:11:09 +00:00

class-wp-http-ixr-client.php

Add access modifiers to methods/members in WP_HTTP_IXR_Client.

2014-05-19 05:50:19 +00:00

class-wp-image-editor-gd.php

Fix setting default quality in WP_Image_Editor.

2014-10-04 13:11:38 +00:00

class-wp-image-editor-imagick.php

Fix setting default quality in WP_Image_Editor.

2014-10-04 13:11:38 +00:00

class-wp-image-editor.php

Fix setting default quality in WP_Image_Editor.

2014-10-04 13:11:38 +00:00

class-wp-theme.php

Set Twenty Fifteen as the new default theme. see #29799.

2014-10-14 19:57:13 +00:00

class-wp-walker.php

Fix some documentation typos in various core files.

2014-08-13 03:55:10 +00:00

class-wp-xmlrpc-server.php

XML-RPC: Check if category support was added for pages before calling wp_get_post_categories() to avoid unnecessary query in wp.getPage.

2014-09-11 13:55:56 +00:00

class-wp.php

Fix some words that aren't words.

2014-08-09 19:29:37 +00:00

class.wp-dependencies.php

WP_Dependencies->recurse_deps(): tuck the recursion into elseif so the foreach doesn't break on the first item.

2014-07-20 00:33:51 +00:00

class.wp-scripts.php

Add wp_json_encode(), a wrapper for json_encode() that ensures everything is converted to UTF-8.

2014-10-28 18:34:16 +00:00

class.wp-styles.php

wp_add_inline_style():

2014-10-18 19:03:11 +00:00

comment-template.php

Add 'comment_reply_link_args' filter for get_comment_reply_link() arguments.

2014-10-27 11:44:40 +00:00

comment.php

Fix 'count' in WP_Comment_Query when using 'meta_query'.

2014-10-26 16:45:37 +00:00

compat.php

Constant time for wp_verify_nonce().

2014-08-06 05:25:03 +00:00

cron.php

wp_schedule_single_event() should not prevent scheduling a future duplicate event. It should only reject an event as a duplicate if there is already a similar event scheduled within 10 minutes of the given timestamp.

2014-10-17 19:16:26 +00:00

date.php

Add @since annotation for 'user_registered' support in 'date_query_valid_columns' documentation.

2014-10-17 03:50:29 +00:00

default-constants.php

Set Twenty Fifteen as the new default theme. see #29799.

2014-10-14 19:57:13 +00:00

default-filters.php

Add a default filter to title_save_pre: trim, because extra whitespace.

2014-10-01 18:57:08 +00:00

default-widgets.php

Use proper functions for escaped translations.

2014-10-18 20:10:47 +00:00

deprecated.php

LIKE escape sanity:

2014-06-10 00:29:35 +00:00

feed-atom-comments.php

Introduce 'rss_tag_pre' action, which fires between the xml and rss tags in a feed.

2014-07-07 10:17:44 +00:00

feed-atom.php

Introduce 'rss_tag_pre' action, which fires between the xml and rss tags in a feed.

2014-07-07 10:17:44 +00:00

feed-rdf.php

Introduce 'rss_tag_pre' action, which fires between the xml and rss tags in a feed.

2014-07-07 10:17:44 +00:00

feed-rss2-comments.php

Introduce 'rss_tag_pre' action, which fires between the xml and rss tags in a feed.

2014-07-07 10:17:44 +00:00

feed-rss2.php

Introduce 'rss_tag_pre' action, which fires between the xml and rss tags in a feed.

2014-07-07 10:17:44 +00:00

feed-rss.php

…

feed.php

Correct references to post-template.php in the inline docs.

2014-08-12 01:08:19 +00:00

formatting.php

Fix whitespace issues in [29781]. Remove a redundant comment.

2014-10-11 02:32:15 +00:00

functions.php

Fix a PHPDoc typo for wp_json_encode().

2014-10-28 18:53:10 +00:00

functions.wp-scripts.php

Use HTTPS URLs for core.trac.wordpress.org

2014-09-29 13:27:55 +00:00

functions.wp-styles.php

Translate some previously untranslated _doing_it_wrong() messages.

2014-10-05 21:05:54 +00:00

general-template.php

Use HTTPS URLs for trac.wordpress.org (and use core.trac.wordpress.org)

2014-09-29 13:36:38 +00:00

http.php

Update the docs for wp_remote_retrieve_response_code(). See #28887.

2014-10-21 21:12:30 +00:00

kses.php

Add audio, video, and track to $allowedposttags (KSES).

2014-10-28 19:35:17 +00:00

l10n.php

Avoid double path separators in load_theme_textdomain(). Fixes #29122. Props bradyvercher

2014-10-21 17:57:41 +00:00

link-template.php

Introduce some new template functions for navigation:

2014-10-28 19:38:41 +00:00

load.php

Send nocache_headers() on installation screens and when redirecting to them.

2014-08-25 17:39:46 +00:00

locale.php

…

media-template.php

Add size to the UI for Gallery Settings in the media modal. Ensure that the TinyMCE view is refreshed when size changes.

2014-09-29 03:44:25 +00:00

media.php

The gallery shortcode used to accept a SQL chunk for the value of the orderby attribute. The reason? get_posts() used to be called in the shortcode handler with a query-string blob of arguments passed to it. To mitigate breakage, sanitize_sql_orderby() was created in [7592].

2014-10-28 20:42:20 +00:00

meta.php

Make orderby=meta_value compatible with meta_query when relation=OR.

2014-10-19 18:53:55 +00:00

ms-blogs.php

Simplify the code for calling refresh_blog_details() whenever 'blogname', 'siteurl', or 'post_count' option is updated.

2014-09-02 07:29:47 +00:00

ms-default-constants.php

After [29200], switch back to using static vars instead of adding 2 globals, as per Sergey.

2014-07-19 23:13:19 +00:00

ms-default-filters.php

Simplify the code for calling refresh_blog_details() whenever 'blogname', 'siteurl', or 'post_count' option is updated.

2014-09-02 07:29:47 +00:00

ms-deprecated.php

Deprecate admin_created_user_subject()

2014-10-24 04:48:31 +00:00

ms-files.php

…

ms-functions.php

In the wp_new_blog_notification() email template, include the login url.

2014-10-02 01:27:57 +00:00

ms-load.php

Replace all uses of like_escape() with $wpdb->esc_like().

2014-06-10 00:43:32 +00:00

ms-settings.php

Move ms-load.php and ms-default-constants.php inclusion back to ms-settings.php to avoid breaking WP-CLI.

2014-06-30 23:49:34 +00:00

nav-menu-template.php

Cast class names to an array to avoid a potential warning.

2014-10-26 23:18:03 +00:00

nav-menu.php

Fix the $location parameter type in the unregister_nav_menu() DocBlock.

2014-10-25 13:42:57 +00:00

option.php

Fix the wp-settings-* cookies used in getUserSetting()/setUserSetting(). They should be set without COOKIE_DOMAIN to work properly for sub-domains. Fixes #29095.

2014-08-13 02:46:18 +00:00

pluggable-deprecated.php

Reference https://wordpress.org rather than http://wordpress.org in strings, links, comments, etc.

2014-03-03 02:33:24 +00:00

pluggable.php

Remove padding from the comment notification emails which is from a bygone fixed-width font era. Prevents alignment issues in email clients which use vairable width fonts for plain text emails. Fixes #16721. Props DrewAPicture.

2014-10-24 17:07:53 +00:00

plugin.php

Use HTTPS URLs for trac.wordpress.org (and use core.trac.wordpress.org)

2014-09-29 13:36:38 +00:00

post-formats.php

Allow has_post_format() to be used to check for any format.

2013-11-24 13:44:42 +00:00

post-template.php

Don't add 'sticky' class in get_post_class() if 'ignore_sticky_posts' query var is set.

2014-10-27 02:15:35 +00:00

post-thumbnail-template.php

Revert [27166].

2014-03-26 18:42:41 +00:00

post.php

When using 'show_in_menu' as a default value for 'show_in_admin_bar' in register_post_type(), cast to boolean instead of requiring a strict match.

2014-10-27 13:07:38 +00:00

query.php

Check that search value is scalar before parsing.

2014-10-16 03:31:27 +00:00

registration-functions.php

…

registration.php

…

revision.php

Remove backticks on $post variables in some short parameter descriptions.

2014-07-03 19:27:54 +00:00

rewrite.php

Use HTTPS URLs for core.trac.wordpress.org

2014-09-29 13:27:55 +00:00

rss-functions.php

…

rss.php

Fix some documentation typos in various core files.

2014-08-13 03:55:10 +00:00

script-loader.php

Script-loader: remove 'heartbeat' dependency for post.js and inline-edit-post.js, fix dependencies for autosave.js. Fixes #30008

2014-10-22 03:40:13 +00:00

session.php

Add safeguards for when ext/hash is not compiled with PHP.

2014-09-20 17:27:46 +00:00

shortcodes.php

The joys of wptexturize():

2014-09-29 04:06:54 +00:00

taxonomy.php

Introduce orderby=include support for get_terms().

2014-10-28 18:12:30 +00:00

template-loader.php

…

template.php

Revert [28563]. See #18298.

2014-07-09 18:06:54 +00:00

theme.php

Add wp_json_encode(), a wrapper for json_encode() that ensures everything is converted to UTF-8.

2014-10-28 18:34:16 +00:00

update.php

Add wp_json_encode(), a wrapper for json_encode() that ensures everything is converted to UTF-8.

2014-10-28 18:34:16 +00:00

user.php

Rename _wp_password_hint() to _wp_get_password_hint() to bring it inline with core terminology. Fixes #21243.

2014-10-26 23:29:11 +00:00

vars.php

Update the wp-inclues/vars.php file header to include Nginx as a recognized web server.

2014-01-10 18:14:20 +00:00

version.php

4.1-alpha-30000 (!)

2014-10-23 23:31:19 +00:00

widgets.php

Customizer: Change instances of "Theme Customizer" to just "Customizer", as the Customizer isn't necessarily theme-specific.

2014-10-15 17:20:34 +00:00

wlwmanifest.xml

The Pinking Shears stir from their slumber, awakened by what may seem, to those

2013-12-11 19:48:29 +00:00

wp-db.php

Translate some previously untranslated _doing_it_wrong() messages.

2014-10-05 21:05:54 +00:00

wp-diff.php

Fix some documentation typos in various core files.

2014-08-13 03:55:10 +00:00