Wordpress 3.0.5

[autoinstalls/wordpress.git] / wp-admin / includes / template.php

diff --git a/wp-admin/includes/template.php b/wp-admin/includes/template.php
index ea1c80565f32e4c20f3a422067c94711a77b88a1..fd7e76f9eaf4d7c768903166e587fe6af81fe2dd 100644 (file)
--- a/wp-admin/includes/template.php
+++ b/wp-admin/includes/template.php
@@ -1185,16 +1185,16 @@ function get_inline_data($post) {
        if ( ! current_user_can($post_type_object->cap->edit_post, $post->ID) )
                return;
 
        if ( ! current_user_can($post_type_object->cap->edit_post, $post->ID) )
                return;
 

-       $title = esc_attr( get_the_title( $post->ID ) );
+       $title = htmlspecialchars( trim( $post->post_title ), ENT_QUOTES );

 
        echo '
 <div class="hidden" id="inline_' . $post->ID . '">
        <div class="post_title">' . $title . '</div>
        <div class="post_name">' . apply_filters('editable_slug', $post->post_name) . '</div>
        <div class="post_author">' . $post->post_author . '</div>
 
        echo '
 <div class="hidden" id="inline_' . $post->ID . '">
        <div class="post_title">' . $title . '</div>
        <div class="post_name">' . apply_filters('editable_slug', $post->post_name) . '</div>
        <div class="post_author">' . $post->post_author . '</div>

-       <div class="comment_status">' . $post->comment_status . '</div>
-       <div class="ping_status">' . $post->ping_status . '</div>
-       <div class="_status">' . $post->post_status . '</div>
+       <div class="comment_status">' . esc_html( $post->comment_status ) . '</div>
+       <div class="ping_status">' . esc_html( $post->ping_status ) . '</div>
+       <div class="_status">' . esc_html( $post->post_status ) . '</div>

        <div class="jj">' . mysql2date( 'd', $post->post_date, false ) . '</div>
        <div class="mm">' . mysql2date( 'm', $post->post_date, false ) . '</div>
        <div class="aa">' . mysql2date( 'Y', $post->post_date, false ) . '</div>
        <div class="jj">' . mysql2date( 'd', $post->post_date, false ) . '</div>
        <div class="mm">' . mysql2date( 'm', $post->post_date, false ) . '</div>
        <div class="aa">' . mysql2date( 'Y', $post->post_date, false ) . '</div>