[wp-cvs] wordpress/wp-admin options.php, 1.33, 1.34 post.php, 1.87, 1.88

[Matthew Mullenweg]

Update of /cvsroot/cafelog/wordpress/wp-admin
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv9545/wp-admin

Modified Files:
	options.php post.php 
Log Message:
Better redirect cleaning.

Index: options.php
===================================================================
RCS file: /cvsroot/cafelog/wordpress/wp-admin/options.php,v
retrieving revision 1.33
retrieving revision 1.34
diff -C2 -d -r1.33 -r1.34
*** options.php	5 Oct 2004 08:35:21 -0000	1.33
--- options.php	5 Oct 2004 16:22:30 -0000	1.34
***************
*** 87,91 ****
  	$referred = str_replace('?updated=true' , '', $_SERVER['HTTP_REFERER']);
  	$goback = str_replace('?updated=true', '', $_SERVER['HTTP_REFERER']) . '?updated=true';
! 	$goback = preg_replace('|[^a-z?=&/~.:_-]|i', '', $goback);
      header('Location: ' . $goback);
      break;
--- 87,91 ----
  	$referred = str_replace('?updated=true' , '', $_SERVER['HTTP_REFERER']);
  	$goback = str_replace('?updated=true', '', $_SERVER['HTTP_REFERER']) . '?updated=true';
! 	$goback = preg_replace('|[^a-z0-9-~+_.?#=&;,/:]|i', '', $goback);
      header('Location: ' . $goback);
      break;

Index: post.php
===================================================================
RCS file: /cvsroot/cafelog/wordpress/wp-admin/post.php,v
retrieving revision 1.87
retrieving revision 1.88
diff -C2 -d -r1.87 -r1.88
*** post.php	5 Oct 2004 08:35:21 -0000	1.87
--- post.php	5 Oct 2004 16:22:30 -0000	1.88
***************
*** 459,463 ****
  	$sendback = $_SERVER['HTTP_REFERER'];
  	if (strstr($sendback, 'post.php')) $sendback = get_settings('siteurl') .'/wp-admin/post.php';
! 	$sendback = preg_replace('|[^a-z?=&/~.:_-]|i', '', $sendback);
  	header ('Location: ' . $sendback);
  	do_action('delete_post', $post_id);
--- 459,463 ----
  	$sendback = $_SERVER['HTTP_REFERER'];
  	if (strstr($sendback, 'post.php')) $sendback = get_settings('siteurl') .'/wp-admin/post.php';
! 	$sendback = preg_replace('|[^a-z0-9-~+_.?#=&;,/:]|i', '', $sendback);
  	header ('Location: ' . $sendback);
  	do_action('delete_post', $post_id);