X-Git-Url: https://scripts.mit.edu/gitweb/autoinstalls/wordpress.git/blobdiff_plain/5aa86a9053fb0fa15846bb60aac2fb8fdfff524a..9e77185fafaf4e60e2b73821e0e4b9b1a11fb85f:/wp-admin/network/site-info.php diff --git a/wp-admin/network/site-info.php b/wp-admin/network/site-info.php index 8cf9a5ee..2fb9fefe 100644 --- a/wp-admin/network/site-info.php +++ b/wp-admin/network/site-info.php @@ -8,7 +8,7 @@ */ /** Load WordPress Administration Bootstrap */ -require_once( './admin.php' ); +require_once( dirname( __FILE__ ) . '/admin.php' ); if ( ! is_multisite() ) wp_die( __( 'Multisite support is not enabled.' ) ); @@ -29,8 +29,8 @@ if ( ! current_user_can( 'manage_sites' ) ) get_current_screen()->set_help_sidebar( '

' . __('For more information:') . '

' . - '

' . __('Documentation on Site Management') . '

' . - '

' . __('Support Forums') . '

' + '

' . __('Documentation on Site Management') . '

' . + '

' . __('Support Forums') . '

' ); $id = isset( $_REQUEST['id'] ) ? intval( $_REQUEST['id'] ) : 0; @@ -42,6 +42,7 @@ $details = get_blog_details( $id ); if ( !can_edit_network( $details->site_id ) ) wp_die( __( 'You do not have permission to access this page.' ) ); +$parsed = parse_url( $details->siteurl ); $is_main_site = is_main_site( $id ); if ( isset($_REQUEST['action']) && 'update-site' == $_REQUEST['action'] ) { @@ -50,7 +51,7 @@ if ( isset($_REQUEST['action']) && 'update-site' == $_REQUEST['action'] ) { switch_to_blog( $id ); if ( isset( $_POST['update_home_url'] ) && $_POST['update_home_url'] == 'update' ) { - $blog_address = get_blogaddress_by_domain( $_POST['blog']['domain'], $_POST['blog']['path'] ); + $blog_address = esc_url_raw( $_POST['blog']['domain'] . $_POST['blog']['path'] ); if ( get_option( 'siteurl' ) != $blog_address ) update_option( 'siteurl', $blog_address ); @@ -58,11 +59,11 @@ if ( isset($_REQUEST['action']) && 'update-site' == $_REQUEST['action'] ) { update_option( 'home', $blog_address ); } - // rewrite rules can't be flushed during switch to blog + // Rewrite rules can't be flushed during switch to blog. delete_option( 'rewrite_rules' ); - // update blogs table - $blog_data = stripslashes_deep( $_POST['blog'] ); + // Update blogs table. + $blog_data = wp_unslash( $_POST['blog'] ); $existing_details = get_blog_details( $id, false ); $blog_data_checkboxes = array( 'public', 'archived', 'spam', 'mature', 'deleted' ); foreach ( $blog_data_checkboxes as $c ) { @@ -91,12 +92,11 @@ $title = sprintf( __('Edit Site: %s'), $site_url_no_http ); $parent_file = 'sites.php'; $submenu_file = 'sites.php'; -require('../admin-header.php'); +require( ABSPATH . 'wp-admin/admin-header.php' ); ?>
-

@@ -123,22 +123,25 @@ if ( ! empty( $messages ) ) { - - + + - + - - - + + + @@ -172,4 +175,4 @@ if ( ! empty( $messages ) ) {
domain ) ?>domain ) ?>
path ) ?> -
/> siteurl and home as well.' ); ?>
+
/> siteurl and home as well.' ); ?>