Boone Gorges 2dad79f6c5 Always sanitize user_nicename in wp_insert_user(). ...

Previously, a 'user_nicename' parameter passed into the function was
unsanitized. This could result in a mismatch between the sanitized nicename
generated automatically at user creation, resulting in broken author archive
permalinks.

Props joemcgill.

Fixes #29696.
Built from https://develop.svn.wordpress.org/trunk@29819


git-svn-id: http://core.svn.wordpress.org/trunk@29585 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2014-10-02 18:54:17 +00:00

..

certificates

…

css

Use Tahoma for RTL in general and Arial for Hebrew in editor styles.

2014-09-27 11:10:16 +00:00

fonts

Dashicons: Update to the latest dashicons files.

2014-08-17 15:01:16 +00:00

ID3

Update getID3 library to 1.9.8.

2014-09-11 19:07:17 +00:00

images

…

js

Remember when we added the style attribute to playlists? Fix dark.

2014-10-02 05:28:16 +00:00

pomo

Fix some documentation typos in various core files.

2014-08-13 03:56:17 +00:00

SimplePie

…

Text

…

theme-compat

…

admin-bar.php

Don't display Edit links for posts and terms in toolbar if they are empty.

2014-09-07 08:32:19 +00:00

atomlib.php

…

author-template.php

Convert documentation of default arguments in wp_list_authors() to the hash-notation style.

2014-06-29 22:34:14 +00:00

bookmark-template.php

Add indentation for the hash notation missed in [29108].

2014-07-11 22:59:16 +00:00

bookmark.php

Allow bookmarks to be ordered by link_description in get_bookmarks().

2014-09-29 03:12:17 +00:00

cache.php

Fix some words that aren't words.

2014-08-09 19:30:17 +00:00

canonical.php

Use HTTPS URLs for trac.wordpress.org (and use core.trac.wordpress.org)

2014-09-29 13:37:16 +00:00

capabilities.php

Plugin/Theme Uploads: New capabilities; unify UIs; ensure compatibility with old filters.

2014-08-27 01:32:18 +00:00

category-template.php

Additional @return clarifications for get_the_terms(), get_the_tag_list(), and get_the_term_list().

2014-08-12 23:48:16 +00:00

category.php

Deprecate get_all_category_ids(). Suggest get_terms() as a replacement.

2014-06-05 16:25:14 +00:00

class-feed.php

Add access modifiers to methods/members in WP_Feed_Cache, WP_SimplePie_File, and WP_Feed_Cache_Transient.

2014-05-19 05:27:15 +00:00

class-http.php

Use HTTPS URLs for trac.wordpress.org (and use core.trac.wordpress.org)

2014-09-29 13:37:16 +00:00

class-IXR.php

Fix some documentation typos in various core files.

2014-08-13 03:56:17 +00:00

class-json.php

…

class-oembed.php

WP_oEmbed::_strip_newlines is called as a filter callback for oembed_dataparse, must be public. It was marked as private for fun in [14109] and then made private officially in [28507].

2014-09-12 22:54:16 +00:00

class-phpass.php

…

class-phpmailer.php

…

class-pop3.php

…

class-simplepie.php

Fix some documentation typos in various core files.

2014-08-13 03:56:17 +00:00

class-smtp.php

PHPMailer: Merge upstream commit (PR274).

2014-09-29 10:28:17 +00:00

class-snoopy.php

…

class-wp-admin-bar.php

…

class-wp-ajax-response.php

Fix some words that aren't words.

2014-08-09 19:30:17 +00:00

class-wp-customize-control.php

Use https for apps.wordpress.org links.

2014-09-09 06:29:15 +00:00

class-wp-customize-manager.php

Use HTTPS URLs for core.trac.wordpress.org

2014-09-29 13:28:16 +00:00

class-wp-customize-panel.php

Customizer panels: use a single back button for all panels.

2014-08-25 23:05:15 +00:00

class-wp-customize-section.php

Customizer: Increase default priority for a section to 160.

2014-08-15 19:36:16 +00:00

class-wp-customize-setting.php

Correct the documentation for the customize_save_* action.

2014-08-15 19:49:15 +00:00

class-wp-customize-widgets.php

Customizer: Mixed priority sorting for panels and top-level sections.

2014-08-14 04:43:16 +00:00

class-wp-editor.php

Use Tahoma for RTL in general and Arial for Hebrew in editor styles.

2014-09-27 11:10:16 +00:00

class-wp-embed.php

Use HTTPS URLs for core.trac.wordpress.org

2014-09-29 13:28:16 +00:00

class-wp-error.php

Fix some words that aren't words.

2014-08-09 19:30:17 +00:00

class-wp-http-ixr-client.php

Add access modifiers to methods/members in WP_HTTP_IXR_Client.

2014-05-19 05:51:15 +00:00

class-wp-image-editor-gd.php

Revert [28640] as per @DH-Shredder.

2014-08-01 18:43:16 +00:00

class-wp-image-editor-imagick.php

Add ->get_quality() method to WP_Image_Editor class.

2014-06-28 03:50:15 +00:00

class-wp-image-editor.php

Add ->get_quality() method to WP_Image_Editor class.

2014-06-28 03:50:15 +00:00

class-wp-theme.php

Remove redundant 'Visit author homepage' title attributes for plugins and themes.

2014-06-05 04:52:16 +00:00

class-wp-walker.php

Fix some documentation typos in various core files.

2014-08-13 03:56:17 +00:00

class-wp-xmlrpc-server.php

XML-RPC: Check if category support was added for pages before calling wp_get_post_categories() to avoid unnecessary query in wp.getPage.

2014-09-11 13:56:15 +00:00

class-wp.php

Fix some words that aren't words.

2014-08-09 19:30:17 +00:00

class.wp-dependencies.php

WP_Dependencies->recurse_deps(): tuck the recursion into elseif so the foreach doesn't break on the first item.

2014-07-20 00:34:15 +00:00

class.wp-scripts.php

WP_Scripts->in_default_dir() should use the WPINC constant

2014-06-29 22:23:15 +00:00

class.wp-styles.php

Add missing access modifiers to methods in WP_Scripts and WP_Styles.

2014-05-19 06:17:14 +00:00

comment-template.php

Add a class attribute for submit button in comment form.

2014-10-02 01:44:15 +00:00

comment.php

WP_Comment_Query: comment__in, comment__not_in, post__in, post__not_in.

2014-10-02 01:41:16 +00:00

compat.php

Constant time for wp_verify_nonce().

2014-08-06 05:26:16 +00:00

cron.php

Skip ALTERNATE_WP_CRON redirect when performing XML-RPC requests.

2014-09-11 14:02:15 +00:00

date.php

Improve parameter sanitization in WP_Date_Query::build_query().

2014-09-30 14:04:18 +00:00

default-constants.php

Revert [28563]. See #18298.

2014-07-09 18:07:16 +00:00

default-filters.php

Add a default filter to title_save_pre: trim, because extra whitespace.

2014-10-01 18:58:16 +00:00

default-widgets.php

Change the default orderby value in wp_get_nav_menus() to 'name'.

2014-09-29 15:45:16 +00:00

deprecated.php

LIKE escape sanity:

2014-06-10 00:30:15 +00:00

feed-atom-comments.php

Introduce 'rss_tag_pre' action, which fires between the xml and rss tags in a feed.

2014-07-07 10:18:15 +00:00

feed-atom.php

Introduce 'rss_tag_pre' action, which fires between the xml and rss tags in a feed.

2014-07-07 10:18:15 +00:00

feed-rdf.php

Introduce 'rss_tag_pre' action, which fires between the xml and rss tags in a feed.

2014-07-07 10:18:15 +00:00

feed-rss2-comments.php

Introduce 'rss_tag_pre' action, which fires between the xml and rss tags in a feed.

2014-07-07 10:18:15 +00:00

feed-rss2.php

Introduce 'rss_tag_pre' action, which fires between the xml and rss tags in a feed.

2014-07-07 10:18:15 +00:00

feed-rss.php

…

feed.php

Correct references to post-template.php in the inline docs.

2014-08-12 01:09:17 +00:00

formatting.php

The joys of wptexturize():

2014-09-29 04:07:15 +00:00

functions.php

Use HTTPS URLs for core.trac.wordpress.org

2014-09-29 13:28:16 +00:00

functions.wp-scripts.php

Use HTTPS URLs for core.trac.wordpress.org

2014-09-29 13:28:16 +00:00

functions.wp-styles.php

…

general-template.php

Use HTTPS URLs for trac.wordpress.org (and use core.trac.wordpress.org)

2014-09-29 13:37:16 +00:00

http.php

Use HTTPS URLs for trac.wordpress.org (and use core.trac.wordpress.org)

2014-09-29 13:37:16 +00:00

kses.php

kses: Add colgroup.

2014-09-12 05:51:17 +00:00

l10n.php

Language packs: No WPLANG anymore.

2014-08-26 19:59:16 +00:00

link-template.php

Create correct permalinks for child posts of hierarchical post types when default permalinks are used.

2014-09-24 21:30:19 +00:00

load.php

Send nocache_headers() on installation screens and when redirecting to them.

2014-08-25 17:40:16 +00:00

locale.php

…

media-template.php

Add size to the UI for Gallery Settings in the media modal. Ensure that the TinyMCE view is refreshed when size changes.

2014-09-29 03:45:16 +00:00

media.php

Media: disable multi-file uploading in iOS 7.x Safari as it prevents uploading of videos. Fixes #29602 for trunk.

2014-09-29 00:14:18 +00:00

meta.php

Meta Query: Revert [28659] (and [28665]) due to regressions.

2014-08-27 20:23:16 +00:00

ms-blogs.php

Simplify the code for calling refresh_blog_details() whenever 'blogname', 'siteurl', or 'post_count' option is updated.

2014-09-02 07:30:16 +00:00

ms-default-constants.php

After [29200], switch back to using static vars instead of adding 2 globals, as per Sergey.

2014-07-19 23:14:15 +00:00

ms-default-filters.php

Simplify the code for calling refresh_blog_details() whenever 'blogname', 'siteurl', or 'post_count' option is updated.

2014-09-02 07:30:16 +00:00

ms-deprecated.php

…

ms-files.php

…

ms-functions.php

In the wp_new_blog_notification() email template, include the login url.

2014-10-02 01:28:16 +00:00

ms-load.php

Replace all uses of like_escape() with $wpdb->esc_like().

2014-06-10 00:44:15 +00:00

ms-settings.php

Move ms-load.php and ms-default-constants.php inclusion back to ms-settings.php to avoid breaking WP-CLI.

2014-06-30 23:50:15 +00:00

nav-menu-template.php

Change the default orderby value in wp_get_nav_menus() to 'name'.

2014-09-29 15:45:16 +00:00

nav-menu.php

Update documentation for wp_get_nav_menus() to reflect that the default value for the the 'orderby' argument was changed from 'none' to 'name' in 4.1.

2014-09-29 23:35:17 +00:00

option.php

Fix the wp-settings-* cookies used in getUserSetting()/setUserSetting(). They should be set without COOKIE_DOMAIN to work properly for sub-domains. Fixes #29095.

2014-08-13 02:47:16 +00:00

pluggable-deprecated.php

…

pluggable.php

Use HTTPS URLs for trac.wordpress.org (and use core.trac.wordpress.org)

2014-09-29 13:37:16 +00:00

plugin.php

Use HTTPS URLs for trac.wordpress.org (and use core.trac.wordpress.org)

2014-09-29 13:37:16 +00:00

post-formats.php

…

post-template.php

MediaElement upgrade: cleanup for generated markup for videos.

2014-08-07 05:53:15 +00:00

post-thumbnail-template.php

…

post.php

In wp_delete_attachment(): account for orphan sizes by looping over the sizes stored in metadata, instead of relying on the current sizes stored in $_wp_additional_image_sizes.

2014-10-02 15:32:16 +00:00

query.php

Ordering by RAND():

2014-09-23 03:52:15 +00:00

registration-functions.php

…

registration.php

…

revision.php

Remove backticks on $post variables in some short parameter descriptions.

2014-07-03 19:28:14 +00:00

rewrite.php

Use HTTPS URLs for core.trac.wordpress.org

2014-09-29 13:28:16 +00:00

rss-functions.php

…

rss.php

Fix some documentation typos in various core files.

2014-08-13 03:56:17 +00:00

script-loader.php

Use correct i18n function after [29768].

2014-09-26 20:54:18 +00:00

session.php

Add safeguards for when ext/hash is not compiled with PHP.

2014-09-20 17:28:18 +00:00

shortcodes.php

The joys of wptexturize():

2014-09-29 04:07:15 +00:00

taxonomy.php

wp_update_term() should mimic wp_insert_term() and set a value for $term_group before the alias_of logic runs. This ensures that $term_group exists when compact() is called.

2014-08-20 17:04:18 +00:00

template-loader.php

…

template.php

Revert [28563]. See #18298.

2014-07-09 18:07:16 +00:00

theme.php

Fix a typo in the PHPDoc for get_stylesheet().

2014-07-23 05:11:16 +00:00

update.php

Add 'Details' links to installed plugins.

2014-07-18 20:49:17 +00:00

user.php

Always sanitize user_nicename in wp_insert_user().

2014-10-02 18:54:17 +00:00

vars.php

…

version.php

Add classes to form containers on taxonomy screens.

2014-10-02 00:29:16 +00:00

widgets.php

Fix a typo in the PHPDoc for wp_register_sidebar_widget().

2014-07-23 17:21:18 +00:00

wlwmanifest.xml

…

wp-db.php

Use HTTPS URLs for core.trac.wordpress.org

2014-09-29 13:28:16 +00:00

wp-diff.php

Fix some documentation typos in various core files.

2014-08-13 03:56:17 +00:00