← All changes | includes/shortcodes/class-charitable-donors-shortcode.php +9 -0 1.8.12 → 1.8.13 View file →

		@@ -50,8 +50,17 @@
50	50	);
51	51
52	52	$args = shortcode_atts( $default, $atts, 'charitable_donors' );
53	53
	54	+ /**
	55	+ * The order attribute is interpolated into the ORDER BY clause of the
	56	+ * donor query, so restrict it to a valid sort direction before it is
	57	+ * passed any further.
	58	+ *
	59	+ * @since 1.8.12.2
	60	+ */
	61	+ $args['order'] = charitable_validate_sort_direction( $args['order'] );
	62	+
54	63	if ( '' !== $args['campaign_categories'] ) {
55	64	$campaign_categories = str_replace( ', ', ',', $args['campaign_categories'] );
56	65	$campaign_categories = explode( ',', $args['campaign_categories'] );
57	66	$cat_args = [