| @@ -1,30 +1,38 @@ | ||
| 1 | 1 | <?php |
| 2 | + | |
| 3 | +// Exit if accessed directly. | |
| 4 | +if ( ! defined( 'ABSPATH' ) ) { | |
| 5 | + exit; | |
| 6 | +} | |
| 7 | + | |
| 2 | 8 | /** |
| 3 | 9 | * Display email field. |
| 4 | 10 | * |
| 5 | - * @author Eric Daams | |
| 11 | + * @author David Bisset | |
| 6 | 12 | * @package Charitable/Admin View/Settings |
| 7 | - * @copyright Copyright (c) 2018, Studio 164a | |
| 13 | + * @copyright Copyright (c) 2023, WP Charitable LLC | |
| 8 | 14 | * @license http://opensource.org/licenses/gpl-2.0.php GNU Public License |
| 9 | 15 | * @since 1.0.0 |
| 10 | - * @version 1.0.0 | |
| 16 | + * @version 1.8.8.6 | |
| 11 | 17 | */ |
| 12 | 18 | |
| 13 | -$value = charitable_get_option( $view_args['key'] ); | |
| 19 | +$charitable_value = charitable_get_option( $view_args['key'] ); | |
| 14 | 20 | |
| 15 | -if ( empty( $value ) ) : | |
| 16 | - $value = isset( $view_args['default'] ) ? $view_args['default'] : ''; | |
| 21 | +if ( empty( $charitable_value ) ) : | |
| 22 | + $charitable_value = isset( $view_args['default'] ) ? $view_args['default'] : ''; | |
| 17 | 23 | endif; |
| 18 | 24 | |
| 25 | +$charitable_escaped_key = implode( '_', $view_args['key'] ); | |
| 26 | +$charitable_escaped_name = $view_args['name']; | |
| 27 | + | |
| 19 | 28 | ?> |
| 20 | 29 | <input type="email" |
| 21 | - id="<?php printf( 'charitable_settings_%s', implode( '_', $view_args['key'] ) ); ?>" | |
| 22 | - name="<?php printf( 'charitable_settings[%s]', $view_args['name'] ); ?>" | |
| 23 | - value="<?php echo esc_attr( $value ); ?>" | |
| 30 | + id="charitable_settings_<?php echo esc_attr( $charitable_escaped_key ); ?>" | |
| 31 | + name="charitable_settings[<?php echo esc_attr( $charitable_escaped_name ); ?>]" | |
| 32 | + value="<?php echo esc_attr( $charitable_value ); ?>" | |
| 24 | 33 | class="<?php echo esc_attr( $view_args['classes'] ); ?>" |
| 25 | - <?php echo charitable_get_arbitrary_attributes( $view_args ); ?> | |
| 34 | + <?php echo charitable_get_arbitrary_attributes( $view_args ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?> | |
| 26 | 35 | /> |
| 27 | 36 | <?php if ( isset( $view_args['help'] ) ) : ?> |
| 28 | - <div class="charitable-help"><?php echo $view_args['help']; ?></div> | |
| 29 | -<?php | |
| 30 | -endif; | |
| 37 | + <div class="charitable-help"><?php echo wp_kses_post( $view_args['help'] ); ?></div> | |
| 38 | +<?php endif; ?> | |