From acd92c27ab444f02f28f41ec16f446045aea7b6b Mon Sep 17 00:00:00 2001 From: ryan Date: Fri, 15 May 2009 20:05:52 +0000 Subject: [PATCH] Add escaping for quick edit saves. Props hailin. fixes #9822 git-svn-id: http://svn.automattic.com/wordpress/trunk@11343 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-admin/admin-ajax.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/wp-admin/admin-ajax.php b/wp-admin/admin-ajax.php index 237ae09ab6..2486f5999e 100644 --- a/wp-admin/admin-ajax.php +++ b/wp-admin/admin-ajax.php @@ -1062,7 +1062,10 @@ case 'inline-save': } $data = &$_POST; + $post = get_post( $post_ID, ARRAY_A ); + $post = add_magic_quotes($post); //since it is from db + $data['content'] = $post['post_content']; $data['excerpt'] = $post['post_excerpt']; @@ -1084,7 +1087,6 @@ case 'inline-save': $data['ping_status'] = 'closed'; // update the post - $_POST = $data; edit_post(); $post = array();