Only add the autosave notice to the first `<h2>` on the page.

Props azaozz. See #24755.

git-svn-id: http://core.svn.wordpress.org/trunk@24710 1a063a9b-81f0-0310-95a4-ce76da25c4cd
Close an HTML tag inside the add_filter() inline doc. props johnbillion, fixes #24772.



git-svn-id: http://core.svn.wordpress.org/trunk@24711 1a063a9b-81f0-0310-95a4-ce76da25c4cd
Always use mysql_real_escape_string(), even when DB_CHARSET is not properly set. fixes #24773.



git-svn-id: http://core.svn.wordpress.org/trunk@24712 1a063a9b-81f0-0310-95a4-ce76da25c4cd
Use wp_slash() in places where we improperly used the DB API instead. see #21767.



git-svn-id: http://core.svn.wordpress.org/trunk@24713 1a063a9b-81f0-0310-95a4-ce76da25c4cd
Use sanitize_key() instead of esc_sql() when 'escaping' variable DB field names. see #21767.



git-svn-id: http://core.svn.wordpress.org/trunk@24714 1a063a9b-81f0-0310-95a4-ce76da25c4cd
More clear and concise escaping in get_page_by_path(). see #21767.



git-svn-id: http://core.svn.wordpress.org/trunk@24715 1a063a9b-81f0-0310-95a4-ce76da25c4cd
Use wp_slash() instead of the DB layer in XML-RPC. see #21767.



git-svn-id: http://core.svn.wordpress.org/trunk@24716 1a063a9b-81f0-0310-95a4-ce76da25c4cd
Compress scripts/styles: 3.6-RC1-24717.

git-svn-id: http://core.svn.wordpress.org/trunk@24717 1a063a9b-81f0-0310-95a4-ce76da25c4cd
Deprecate wpdb::escape() in favor of wpdb::prepare() and esc_sql(). fixes #24774.



git-svn-id: http://core.svn.wordpress.org/trunk@24718 1a063a9b-81f0-0310-95a4-ce76da25c4cd
Avoid a sanitize_key() call on ID, as this causes it to be lowercased. wp_dropdown_users() requires user_login as a fallback; specify it for get_users(). see #21767.



git-svn-id: http://core.svn.wordpress.org/trunk@24719 1a063a9b-81f0-0310-95a4-ce76da25c4cd
Twenty Thirteen: improve gallery styles to ensure both single and index views are displayed consistently. Closes #24555.

git-svn-id: http://core.svn.wordpress.org/trunk@24720 1a063a9b-81f0-0310-95a4-ce76da25c4cd