| @@ -1,11 +1,14 @@ | ||
| 1 | 1 | <?php |
| 2 | 2 | /** |
| 3 | 3 | * Enqueue Easy Invoice form styles |
| 4 | 4 | */ |
| 5 | +if ( ! defined( 'ABSPATH' ) ) { | |
| 6 | + exit; | |
| 7 | +} | |
| 5 | 8 | function easy_invoice_enqueue_form_styles() { |
| 6 | 9 | // Only on Easy Invoice admin pages |
| 7 | - $page = $_GET['page'] ?? ''; | |
| 10 | + $page = isset($_GET['page']) ? sanitize_key(wp_unslash($_GET['page'])) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended | |
| 8 | 11 | if (!empty($page) && ( |
| 9 | 12 | strpos($page, 'easy-invoice') === 0 || |
| 10 | 13 | strpos($page, 'easy-quote') === 0 || |
| 11 | 14 | strpos($page, 'easy-invoice-builder') === 0 || |
| @@ -21,9 +24,9 @@ | ||
| 21 | 24 | * Dequeue WordPress default form CSS for Easy Invoice plugin |
| 22 | 25 | */ |
| 23 | 26 | function easy_invoice_dequeue_form_styles() { |
| 24 | 27 | // Only on Easy Invoice admin pages |
| 25 | - $page = $_GET['page'] ?? ''; | |
| 28 | + $page = isset($_GET['page']) ? sanitize_key(wp_unslash($_GET['page'])) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended | |
| 26 | 29 | if (!empty($page) && ( |
| 27 | 30 | strpos($page, 'easy-invoice') === 0 || |
| 28 | 31 | strpos($page, 'easy-quote') === 0 || |
| 29 | 32 | strpos($page, 'easy-invoice-builder') === 0 || |
