Files
WordPress/wp-includes
Scott Taylor 5d17d2bd28 The gallery shortcode used to accept a SQL chunk for the value of the orderby attribute. The reason? get_posts() used to be called in the shortcode handler with a query-string blob of arguments passed to it. To mitigate breakage, sanitize_sql_orderby() was created in [7592].
`sanitize_sql_orderby()` expects a comma to be present when multiple `orderby` values were passed. The correct syntax for multiple fields is space-delimited. Since [29027], comma-separated values would never be parsed correctly when passed to `WP_Query->parse_orderby()`.

`sanitize_sql_orderby()` is used nowhere else in core, save for the `playlist` shortcode - I only added it there because I was mimic'ing the `gallery` logic. The function call can be removed from both shortcode handlers.
 
See #6476.
Fixes #23873.

Built from https://develop.svn.wordpress.org/trunk@30068


git-svn-id: http://core.svn.wordpress.org/trunk@30068 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2014-10-28 20:43:22 +00:00
..
2014-09-11 19:07:17 +00:00
2014-03-27 22:41:14 +00:00
2014-08-09 19:30:17 +00:00
2014-08-09 19:30:17 +00:00
2014-10-18 19:04:20 +00:00
2014-06-10 00:30:15 +00:00
2014-03-26 18:43:14 +00:00
2014-09-29 04:07:15 +00:00
2013-10-30 14:39:10 +00:00
2014-07-09 18:07:16 +00:00