summaryrefslogtreecommitdiffstats
path: root/wp-admin/users.php
diff options
context:
space:
mode:
authordonncha <donncha@7be80a69-a1ef-0310-a953-fb0f7c49ff36>2006-12-22 12:54:24 +0000
committerdonncha <donncha@7be80a69-a1ef-0310-a953-fb0f7c49ff36>2006-12-22 12:54:24 +0000
commit4fb300c67a3442cd0209a6129d53f0f727b60743 (patch)
treea190684f113f031dbbac1d0bf09a1202251e3524 /wp-admin/users.php
parent866b3a1b844041e6128e7e3c22710b49e72b99ec (diff)
downloadwordpress-mu-4fb300c67a3442cd0209a6129d53f0f727b60743.tar.gz
wordpress-mu-4fb300c67a3442cd0209a6129d53f0f727b60743.tar.xz
wordpress-mu-4fb300c67a3442cd0209a6129d53f0f727b60743.zip
WP Merge to rev 4661
git-svn-id: http://svn.automattic.com/wordpress-mu/trunk@828 7be80a69-a1ef-0310-a953-fb0f7c49ff36
Diffstat (limited to 'wp-admin/users.php')
-rw-r--r--wp-admin/users.php14
1 files changed, 7 insertions, 7 deletions
diff --git a/wp-admin/users.php b/wp-admin/users.php
index ca49c24..0b0ca9b 100644
--- a/wp-admin/users.php
+++ b/wp-admin/users.php
@@ -12,10 +12,10 @@ $action = $_REQUEST['action'];
$update = '';
if ( empty($_POST) ) {
- $referer = '<input type="hidden" name="wp_http_referer" value="'. wp_specialchars(stripslashes($_SERVER['REQUEST_URI'])) . '" />';
+ $referer = '<input type="hidden" name="wp_http_referer" value="'. attribute_escape(stripslashes($_SERVER['REQUEST_URI'])) . '" />';
} elseif ( isset($_POST['wp_http_referer']) ) {
- $redirect = remove_query_arg(array('wp_http_referer', 'updated', 'delete_count'), urlencode(stripslashes($_POST['wp_http_referer'])));
- $referer = '<input type="hidden" name="wp_http_referer" value="' . wp_specialchars($redirect) . '" />';
+ $redirect = remove_query_arg(array('wp_http_referer', 'updated', 'delete_count'), stripslashes($_POST['wp_http_referer']));
+ $referer = '<input type="hidden" name="wp_http_referer" value="' . attribute_escape($redirect) . '" />';
} else {
$redirect = 'users.php';
}
@@ -388,7 +388,7 @@ default:
case 'del_many':
?>
<?php $delete_count = (int) $_GET['delete_count']; ?>
- <div id="message" class="updated fade"><p><?php printf(__('%1$s %2$s deleted.'), $delete_count, __ngettext('user', 'users', $delete_count) ); ?></p></div>
+ <div id="message" class="updated fade"><p><?php printf(__ngettext('%s user deleted', '%s users deleted', $delete_count), $delete_count); ?></p></div>
<?php
break;
case 'remove':
@@ -468,7 +468,7 @@ default:
<?php endif; ?>
<form action="" method="get" name="search" id="search">
- <p><input type="text" name="usersearch" id="usersearch" value="<?php echo wp_specialchars($wp_user_search->search_term, 1); ?>" /> <input type="submit" value="<?php _e('Search users &raquo;'); ?>" class="button" /></p>
+ <p><input type="text" name="usersearch" id="usersearch" value="<?php echo attribute_escape($wp_user_search->search_term); ?>" /> <input type="submit" value="<?php _e('Search users &raquo;'); ?>" class="button" /></p>
</form>
<?php if ( is_wp_error( $wp_user_search->search_errors ) ) : ?>
@@ -541,7 +541,7 @@ foreach ( (array) $roleclass as $user_object ) {
<h3><?php _e('Update Selected'); ?></h3>
<ul style="list-style:none;">
- <li><input type="radio" name="action" id="action0" value="removeuser" /> <label for="action0"><?php _e('Remove checked users.'); ?></label></li>
+ <li><input type="radio" name="action" id="action0" value="delete" /> <label for="action0"><?php _e('Delete checked users.'); ?></label></li>
<li>
<input type="radio" name="action" id="action1" value="promote" /> <label for="action1"><?php _e('Set the Role of checked users to:'); ?></label>
<select name="new_role" onchange="getElementById('action1').checked = 'true'"><?php wp_dropdown_roles(); ?></select>
@@ -559,7 +559,7 @@ foreach ( (array) $roleclass as $user_object ) {
if ( is_wp_error($add_user_errors) ) {
foreach ( array('user_login' => 'user_login', 'first_name' => 'user_firstname', 'last_name' => 'user_lastname', 'email' => 'user_email', 'url' => 'user_uri', 'role' => 'user_role') as $formpost => $var ) {
$var = 'new_' . $var;
- $$var = wp_specialchars(stripslashes($_POST[$formpost]));
+ $$var = attribute_escape(stripslashes($_POST[$formpost]));
}
unset($name);
}