From 49273e675bb2297508335c8c9d8a1c34ea37766d Mon Sep 17 00:00:00 2001 From: donncha Date: Thu, 17 Jul 2008 14:43:59 +0000 Subject: Use sanitize_* functions for addblog parameters. fixes 680 git-svn-id: http://svn.automattic.com/wordpress-mu/trunk@1383 7be80a69-a1ef-0310-a953-fb0f7c49ff36 --- wp-admin/wpmu-edit.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'wp-admin/wpmu-edit.php') diff --git a/wp-admin/wpmu-edit.php b/wp-admin/wpmu-edit.php index c2ed714..3728da5 100644 --- a/wp-admin/wpmu-edit.php +++ b/wp-admin/wpmu-edit.php @@ -95,9 +95,9 @@ switch( $_GET['action'] ) { check_admin_referer('add-blog'); $blog = $_POST['blog']; - $domain = ereg_replace("[^A-Za-z0-9]", "", strtolower( wp_specialchars( $blog['domain'] ) ) ); - $email = wp_specialchars( $blog['email'] ); - $title = stripslashes( wp_specialchars( $blog['title'] ) ); + $domain = sanitize_user( str_replace( '/', '', $blog[ 'domain' ] ) ); + $email = sanitize_email( $blog[ 'email' ] ); + $title = sanitize_title( $blog[ 'title' ] ); if ( empty($domain) || empty($email)) wp_die( __('Missing blog address or email address.') ); -- cgit