switch($step) {
case 0:
- $goback = wp_specialchars($_SERVER['HTTP_REFERER'], 1);
+ $goback = clean_url(stripslashes(wp_get_referer()));
?>
<p><?php _e('This file upgrades you from any previous version of WordPress to the latest. It may take a while though, so be patient.'); ?></p>
<h2 class="step"><a href="upgrade.php?step=1&backto=<?php echo $goback; ?>"><?php _e('Upgrade WordPress »'); ?></a></h2>
break;
case 1:
- wp_cache_flush();
- make_db_current_silent();
- upgrade_all();
- wp_cache_flush();
+ $wp_current_db_version = __get_option('db_version');
+ if ( $wp_db_version != $wp_current_db_version ) {
+ wp_cache_flush();
+ make_db_current_silent();
+ upgrade_all();
+ wp_cache_flush();
+ }
if ( empty( $_GET['backto'] ) )
$backto = __get_option('home');
else
- $backto = wp_specialchars( $_GET['backto'] , 1 );
+ $backto = clean_url(stripslashes($_GET['backto']));
?>
<h2><?php _e('Step 1'); ?></h2>
<p><?php printf(__("There's actually only one step. So if you see this, you're done. <a href='%s'>Have fun</a>!"), $backto); ?></p>