Wordpress 2.0.11

[autoinstalls/wordpress.git] / wp-admin / options-misc.php

diff --git a/wp-admin/options-misc.php b/wp-admin/options-misc.php
index 711a4ccdc7529ba9b3f4f1caf243594d322eb923..2b6e33a5dffc74d7b179c5f0e0af326e79d612a1 100644 (file)
--- a/wp-admin/options-misc.php
+++ b/wp-admin/options-misc.php
@@ -11,13 +11,13 @@ include('admin-header.php');
 <div class="wrap"> 
 <h2><?php _e('Miscellaneous Options') ?></h2> 
 <form method="post" action="options.php">
-
+<?php wp_nonce_field('update-options') ?>
 <fieldset class="options">
 <legend><?php _e('Uploading'); ?></legend>
 <table class="editform optiontable">
 <tr valign="top">
 <th scope="row"><?php _e('Store uploads in this folder'); ?>:</th>
-<td><input name="upload_path" type="text" id="upload_path" class="code" value="<?php echo str_replace(ABSPATH, '', get_settings('upload_path')); ?>" size="40" />
+<td><input name="upload_path" type="text" id="upload_path" class="code" value="<?php echo attribute_escape(str_replace(ABSPATH, '', get_settings('upload_path'))); ?>" size="40" />
 <br />
 <?php _e('Default is <code>wp-content/uploads</code>'); ?>
 </td>