Index: wp-includes/formatting.php --- wp-includes/formatting.php.orig 2007-04-13 01:19:16 +0200 +++ wp-includes/formatting.php 2007-05-17 09:47:52 +0200 @@ -78,7 +78,7 @@ $pee = preg_replace('!(]*>)\s*
!', "$1", $pee); $pee = preg_replace('!
(\s*]*>)!', '$1', $pee); if (strpos($pee, ')(.*?)!ise', " stripslashes('$1') . stripslashes(clean_pre('$2')) . '' ", $pee); + $pee = preg_replace('!()(.*?)!ise', " wp_kses_stripslashes('$1') . wp_kses_stripslashes(clean_pre('$2')) . '' ", $pee); $pee = preg_replace( "|\n

$|", '

', $pee ); return $pee; Index: wp-login.php --- wp-login.php.orig 2007-04-19 04:53:19 +0200 +++ wp-login.php 2007-05-17 09:20:19 +0200 @@ -114,7 +114,7 @@ // Now insert the new pass md5'd into the db $wpdb->query("UPDATE $wpdb->users SET user_activation_key = '$key' WHERE user_login = '$user_login'"); $message = __('Someone has asked to reset the password for the following site and username.') . "\r\n\r\n"; - $message .= get_option('siteurl') . "\r\n\r\n"; + $message .= sprintf(__('Website: %s'), get_option('siteurl')) . "\r\n"; $message .= sprintf(__('Username: %s'), $user_login) . "\r\n\r\n"; $message .= __('To reset your password visit the following address, otherwise just ignore this email and nothing will happen.') . "\r\n\r\n"; $message .= get_option('siteurl') . "/wp-login.php?action=rp&key=$key\r\n"; @@ -188,7 +188,7 @@ wp_cache_delete($user->user_login, 'userlogins'); $message = sprintf(__('Username: %s'), $user->user_login) . "\r\n"; $message .= sprintf(__('Password: %s'), $new_pass) . "\r\n"; - $message .= get_option('siteurl') . "/wp-login.php\r\n"; + $message .= sprintf(__('Login: %s'), get_option('siteurl') . "/wp-login.php") . "\r\n"; if (FALSE == wp_mail($user->user_email, sprintf(__('[%s] Your new password'), get_option('blogname')), $message)) { die('

' . __('The e-mail could not be sent.') . "
\n" . __('Possible reason: your host may have disabled the mail() function...') . '

'); Index: wp-mail.php --- wp-mail.php.orig 2007-05-05 04:51:20 +0200 +++ wp-mail.php 2007-05-17 09:20:19 +0200 @@ -142,7 +142,7 @@ $post_category = $post_categories; // or maybe we should leave the choice to email drafts? propose a way - $post_status = 'publish'; + $post_status = 'draft'; $post_data = compact('post_content','post_title','post_date','post_date_gmt','post_author','post_category', 'post_status'); $post_data = add_magic_quotes($post_data);