Wordpress 2.0.11-scripts

[autoinstalls/wordpress.git] / wp-admin / templates.php

diff --git a/wp-admin/templates.php b/wp-admin/templates.php
index 4631ac42dc113dbafbc7240a39bc17fe489098e1..5f678046aba5b412643638a9a4559018aadcbdbd 100644 (file)
--- a/wp-admin/templates.php
+++ b/wp-admin/templates.php
@@ -71,14 +71,17 @@ default:
 
        update_recently_edited($file);
 
-       if (!is_file($real_file))
+       if ( !is_file($real_file) ) {
                $error = true;
-       
-       if (!$error) {
+       } else {
                $f = @ fopen($real_file, 'r');
                if ( $f ) {
-                       $content = fread($f, filesize($real_file));
-                       $content = htmlspecialchars($content);
+                       if ( filesize($real_file ) > 0 ) {
+                               $content = fread($f, filesize($real_file));
+                               $content = htmlspecialchars($content);
+                       } else {
+                               $content = '';
+                       }
                } else {
                        $error = true;
                }
@@ -108,7 +111,7 @@ if ( $recents ) :
 <?php
 echo '<ol>';
 foreach ($recents as $recent) :
-       echo "<li><a href='templates.php?file=$recent'>" . get_file_description(basename($recent)) . "</a></li>";
+       echo "<li><a href='templates.php?file=" . attribute_escape($recent) . "'>" . wp_specialchars(get_file_description(basename($recent))) . "</a></li>";
 endforeach;
 echo '</ol>';
 endif;