| @@ -4,21 +4,24 @@ | ||
| 4 | 4 | * |
| 5 | 5 | * Override this template by copying it to yourtheme/charitable/widgets/donors.php |
| 6 | 6 | * |
| 7 | 7 | * @package Charitable/Templates/Widgets |
| 8 | - * @author Studio 164a | |
| 8 | + * @author WP Charitable LLC | |
| 9 | 9 | * @since 1.0.0 |
| 10 | 10 | * @version 1.5.0 |
| 11 | + * @version 1.8.8.6 | |
| 11 | 12 | */ |
| 12 | 13 | |
| 13 | 14 | // Exit if accessed directly. |
| 14 | -if ( ! defined( 'ABSPATH' ) ) { exit; } | |
| 15 | +if ( ! defined( 'ABSPATH' ) ) { | |
| 16 | + exit; | |
| 17 | +} | |
| 15 | 18 | |
| 16 | 19 | if ( ! charitable_is_campaign_page() && 'current' == $view_args['campaign_id'] ) { |
| 17 | 20 | return; |
| 18 | 21 | } |
| 19 | 22 | |
| 20 | -$widget_title = apply_filters( 'widget_title', $view_args['title'] ); | |
| 23 | +$charitable_widget_title = apply_filters( 'widget_title', $view_args['title'] ); | |
| 21 | 24 | |
| 22 | 25 | /* If there are no donors and the widget is configured to hide when empty, return now. */ |
| 23 | 26 | if ( ! $view_args['donors']->count() && $view_args['hide_if_no_donors'] ) { |
| 24 | 27 | return; |
| @@ -23,13 +26,13 @@ | ||
| 23 | 26 | if ( ! $view_args['donors']->count() && $view_args['hide_if_no_donors'] ) { |
| 24 | 27 | return; |
| 25 | 28 | } |
| 26 | 29 | |
| 27 | -echo $view_args['before_widget']; | |
| 30 | +echo $view_args['before_widget']; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped | |
| 28 | 31 | |
| 29 | -if ( ! empty( $widget_title ) ) : | |
| 30 | - echo $view_args['before_title'] . $widget_title . $view_args['after_title']; | |
| 32 | +if ( ! empty( $charitable_widget_title ) ) : | |
| 33 | + echo $view_args['before_title'] . esc_html( $charitable_widget_title ) . $view_args['after_title']; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped | |
| 31 | 34 | endif; |
| 32 | 35 | |
| 33 | 36 | charitable_template( 'donor-loop.php', $view_args ); |
| 34 | 37 | |
| 35 | -echo $view_args['after_widget']; | |
| 38 | +echo $view_args['after_widget']; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped | |