X-Git-Url: https://scripts.mit.edu/gitweb/autoinstalls/wordpress.git/blobdiff_plain/8f374b7233bc2815ccc387e448d208c5434eb961..1132430022383fdf47fa6cb9377300fd885297aa:/wp-admin/network/site-info.php diff --git a/wp-admin/network/site-info.php b/wp-admin/network/site-info.php index ff78e83b..0e18020c 100644 --- a/wp-admin/network/site-info.php +++ b/wp-admin/network/site-info.php @@ -8,7 +8,7 @@ */ /** Load WordPress Administration Bootstrap */ -require_once( './admin.php' ); +require_once( dirname( __FILE__ ) . '/admin.php' ); if ( ! is_multisite() ) wp_die( __( 'Multisite support is not enabled.' ) ); @@ -30,7 +30,7 @@ if ( ! current_user_can( 'manage_sites' ) ) get_current_screen()->set_help_sidebar( '

' . __('For more information:') . '

' . '

' . __('Documentation on Site Management') . '

' . - '

' . __('Support Forums') . '

' + '

' . __('Support Forums') . '

' ); $id = isset( $_REQUEST['id'] ) ? intval( $_REQUEST['id'] ) : 0; @@ -42,6 +42,7 @@ $details = get_blog_details( $id ); if ( !can_edit_network( $details->site_id ) ) wp_die( __( 'You do not have permission to access this page.' ) ); +$parsed = parse_url( $details->siteurl ); $is_main_site = is_main_site( $id ); if ( isset($_REQUEST['action']) && 'update-site' == $_REQUEST['action'] ) { @@ -50,7 +51,7 @@ if ( isset($_REQUEST['action']) && 'update-site' == $_REQUEST['action'] ) { switch_to_blog( $id ); if ( isset( $_POST['update_home_url'] ) && $_POST['update_home_url'] == 'update' ) { - $blog_address = get_blogaddress_by_domain( $_POST['blog']['domain'], $_POST['blog']['path'] ); + $blog_address = esc_url_raw( $_POST['blog']['domain'] . $_POST['blog']['path'] ); if ( get_option( 'siteurl' ) != $blog_address ) update_option( 'siteurl', $blog_address ); @@ -58,11 +59,11 @@ if ( isset($_REQUEST['action']) && 'update-site' == $_REQUEST['action'] ) { update_option( 'home', $blog_address ); } - // rewrite rules can't be flushed during switch to blog + // Rewrite rules can't be flushed during switch to blog. delete_option( 'rewrite_rules' ); - // update blogs table - $blog_data = stripslashes_deep( $_POST['blog'] ); + // Update blogs table. + $blog_data = wp_unslash( $_POST['blog'] ); $existing_details = get_blog_details( $id, false ); $blog_data_checkboxes = array( 'public', 'archived', 'spam', 'mature', 'deleted' ); foreach ( $blog_data_checkboxes as $c ) { @@ -91,12 +92,11 @@ $title = sprintf( __('Edit Site: %s'), $site_url_no_http ); $parent_file = 'sites.php'; $submenu_file = 'sites.php'; -require('../admin-header.php'); +require( ABSPATH . 'wp-admin/admin-header.php' ); ?>
-