Wordpress 2.0.11

[autoinstalls/wordpress.git] / wp-admin / categories.php

diff --git a/wp-admin/categories.php b/wp-admin/categories.php
index 30d37c8b4b58dd0bc2ce821297b787ceb80a270f..d26a847bbbc38b8ab61dd5107fe5354cb4af7653 100644 (file)
--- a/wp-admin/categories.php
+++ b/wp-admin/categories.php
@@ -33,6 +33,7 @@ case 'addcat':
        wp_insert_category($_POST);
 
        wp_redirect('categories.php?message=1#addcat');
        wp_insert_category($_POST);
 
        wp_redirect('categories.php?message=1#addcat');

+       exit;

 break;
 
 case 'delete':
 break;
 
 case 'delete':


@@ -51,7 +52,7 @@ case 'delete':
        wp_delete_category($cat_ID);
 
        wp_redirect('categories.php?message=2');
        wp_delete_category($cat_ID);
 
        wp_redirect('categories.php?message=2');

-
+       exit;

 break;
 
 case 'edit':
 break;
 
 case 'edit':


@@ -68,12 +69,12 @@ case 'edit':
          <table class="editform" width="100%" cellspacing="2" cellpadding="5">
                <tr>
                  <th width="33%" scope="row"><?php _e('Category name:') ?></th>
          <table class="editform" width="100%" cellspacing="2" cellpadding="5">
                <tr>
                  <th width="33%" scope="row"><?php _e('Category name:') ?></th>

-                 <td width="67%"><input name="cat_name" type="text" value="<?php echo wp_specialchars($category->cat_name); ?>" size="40" /> <input type="hidden" name="action" value="editedcat" />
+                 <td width="67%"><input name="cat_name" type="text" value="<?php echo attribute_escape($category->cat_name); ?>" size="40" /> <input type="hidden" name="action" value="editedcat" />

 <input type="hidden" name="cat_ID" value="<?php echo $category->cat_ID ?>" /></td>
                </tr>
                <tr>
                        <th scope="row"><?php _e('Category slug:') ?></th>
 <input type="hidden" name="cat_ID" value="<?php echo $category->cat_ID ?>" /></td>
                </tr>
                <tr>
                        <th scope="row"><?php _e('Category slug:') ?></th>

-                       <td><input name="category_nicename" type="text" value="<?php echo wp_specialchars($category->category_nicename); ?>" size="40" /></td>
+                       <td><input name="category_nicename" type="text" value="<?php echo attribute_escape($category->category_nicename); ?>" size="40" /></td>

                </tr>
                <tr>
                        <th scope="row"><?php _e('Category parent:') ?></th>
                </tr>
                <tr>
                        <th scope="row"><?php _e('Category parent:') ?></th>


@@ -85,7 +86,7 @@ case 'edit':
                </tr>
                <tr>
                        <th scope="row"><?php _e('Description:') ?></th>
                </tr>
                <tr>
                        <th scope="row"><?php _e('Description:') ?></th>

-                       <td><textarea name="category_description" rows="5" cols="50" style="width: 97%;"><?php echo wp_specialchars($category->category_description, 1); ?></textarea></td>
+                       <td><textarea name="category_description" rows="5" cols="50" style="width: 97%;"><?php echo wp_specialchars($category->category_description); ?></textarea></td>

                </tr>
                </table>
          <p class="submit"><input type="submit" name="submit" value="<?php _e('Edit category') ?> &raquo;" /></p>
                </tr>
                </table>
          <p class="submit"><input type="submit" name="submit" value="<?php _e('Edit category') ?> &raquo;" /></p>


@@ -106,6 +107,7 @@ case 'editedcat':
        wp_update_category($_POST);
 
        wp_redirect('categories.php?message=3');
        wp_update_category($_POST);
 
        wp_redirect('categories.php?message=3');

+       exit;

 break;
 
 default:
 break;
 
 default: