| @@ -1,8 +1,12 @@ | ||
| 1 | 1 | <?php |
| 2 | +namespace WPDeveloper\BetterDocs\Shortcodes; | |
| 2 | 3 | |
| 3 | -namespace WPDeveloper\BetterDocs\Shortcodes; | |
| 4 | +if ( ! defined( 'ABSPATH' ) ) { | |
| 5 | + exit; | |
| 6 | +} | |
| 4 | 7 | |
| 8 | + | |
| 5 | 9 | use WPDeveloper\BetterDocs\Core\Query; |
| 6 | 10 | use WPDeveloper\BetterDocs\Utils\Helper; |
| 7 | 11 | use WPDeveloper\BetterDocs\Core\Settings; |
| 8 | 12 | use WPDeveloper\BetterDocs\Core\Shortcode; |
| @@ -32,13 +36,13 @@ | ||
| 32 | 36 | } |
| 33 | 37 | |
| 34 | 38 | check_ajax_referer( 'betterdocs_submit_data', 'security' ); |
| 35 | 39 | |
| 36 | - $postID = isset( $_POST['postID'] ) ? $_POST['postID'] : null; | |
| 40 | + $postID = isset( $_POST['postID'] ) ? absint( wp_unslash( $_POST['postID'] ) ) : 0; | |
| 37 | 41 | $article = get_the_title( $postID ); |
| 38 | - $name = isset( $_POST['message_name'] ) ? sanitize_text_field( stripslashes( $_POST['message_name'] ) ) : ''; | |
| 39 | - $email = isset( $_POST['message_email'] ) ? sanitize_email( stripslashes( $_POST['message_email'] ) ) : ''; | |
| 40 | - $message_text = isset( $_POST['message_text'] ) ? sanitize_textarea_field( stripslashes( $_POST['message_text'] ) ) : ''; | |
| 42 | + $name = isset( $_POST['message_name'] ) ? sanitize_text_field( wp_unslash( $_POST['message_name'] ) ) : ''; | |
| 43 | + $email = isset( $_POST['message_email'] ) ? sanitize_email( wp_unslash( $_POST['message_email'] ) ) : ''; | |
| 44 | + $message_text = isset( $_POST['message_text'] ) ? sanitize_textarea_field( wp_unslash( $_POST['message_text'] ) ) : ''; | |
| 41 | 45 | |
| 42 | 46 | $_errors = []; |
| 43 | 47 | |
| 44 | 48 | //validate presence of name |
