← All changes | inc/class-settings.php +31 -29 5.10.0 → 6.1.2 View file →

		@@ -2,14 +2,16 @@
2	2	/**
3	3	* Settings
4	4	*
5	5	* @package event-post
6		- * @version 5.10.0
	6	+ * @version 6.1.2
7	7	* @since 5.4.0
8	8	*/
9	9
10	10	namespace EventPost;
11	11
	12	+if ( ! defined( 'ABSPATH' ) ) exit;
	13	+
12	14	class Settings{
13	15	private $dashicons;
14	16	public function __construct($dashicons) {
15	17	$this->dashicons = $dashicons;
		@@ -488,42 +490,42 @@
488	490	}
489	491
490	492	function settings_field_default_callback($args){
491	493	?>
492		- <input name="ep_settings[<?php echo $args['name']; ?>]"
493		- style="<?php echo isset($args['input-style']) ? $args['input-style'] : null ?>"
494		- id="<?php echo $args['name']; ?>"
495		- value="<?php echo EventPost()->settings[$args['name']]; ?>"
496		- class="regular-text <?php echo isset($args['input-class']) ? $args['input-class'] : null ?>"/>
	494	+ <input name="ep_settings[<?php echo esc_attr($args['name']); ?>]"
	495	+ style="<?php echo esc_attr(isset($args['input-style']) ? $args['input-style'] : ''); ?>"
	496	+ id="<?php echo esc_attr($args['name']); ?>"
	497	+ value="<?php echo esc_attr(EventPost()->settings[$args['name']]); ?>"
	498	+ class="regular-text <?php echo esc_attr(isset($args['input-class']) ? $args['input-class'] : ''); ?>"/>
497	499	<?php if(isset($args['description']) && $args['description']): ?>
498		- <p class="description"><?php echo $args['description']; ?></p>
	500	+ <p class="description"><?php echo esc_html($args['description']); ?></p>
499	501	<?php endif; ?>
500	502	<?php
501	503	}
502	504	function settings_field_textarea_callback($args){
503	505	?>
504		- <textarea name="ep_settings[<?php echo $args['name']; ?>]"
505		- style="<?php echo isset($args['input-style']) ? $args['input-style'] : null ?>"
506		- id="<?php echo $args['name']; ?>"
507		- class="regular-text <?php echo isset($args['input-class']) ? $args['input-class'] : null ?>"
508		- ><?php echo EventPost()->settings[$args['name']]; ?></textarea>
	506	+ <textarea name="ep_settings[<?php echo esc_attr($args['name']); ?>]"
	507	+ style="<?php echo esc_attr(isset($args['input-style']) ? $args['input-style'] : ''); ?>"
	508	+ id="<?php echo esc_attr($args['name']); ?>"
	509	+ class="regular-text <?php echo esc_attr(isset($args['input-class']) ? $args['input-class'] : ''); ?>"
	510	+ ><?php echo esc_textarea(EventPost()->settings[$args['name']]); ?></textarea>
509	511	<?php if(isset($args['description']) && $args['description']): ?>
510		- <p class="description"><?php echo $args['description']; ?></p>
	512	+ <p class="description"><?php echo esc_html($args['description']); ?></p>
511	513	<?php endif; ?>
512	514	<?php
513	515	}
514	516	function settings_field_select_callback($args){
515	517	?>
516		- <select name="ep_settings[<?php echo $args['name']; ?>]"
517		- style="<?php echo isset($args['input-style']) ? $args['input-style'] : null ?>"
518		- id="<?php echo $args['name']; ?>"
519		- class="<?php echo isset($args['input-class']) ? $args['input-class'] : null ?>">
	518	+ <select name="ep_settings[<?php echo esc_attr($args['name']); ?>]"
	519	+ style="<?php echo esc_attr(isset($args['input-style']) ? $args['input-style'] : ''); ?>"
	520	+ id="<?php echo esc_attr($args['name']); ?>"
	521	+ class="<?php echo esc_attr(isset($args['input-class']) ? $args['input-class'] : ''); ?>">
520	522	<?php foreach($args['options'] as $value=>$label) : ?>
521		- <option value="<?php echo $value; ?>" <?php selected($value, EventPost()->settings[$args['name']], true);?>><?php echo $label; ?></option>
	523	+ <option value="<?php echo esc_attr($value); ?>" <?php selected($value, EventPost()->settings[$args['name']], true);?>><?php echo esc_html($label); ?></option>
522	524	<?php endforeach; ?>
523	525	</select>
524	526	<?php if(isset($args['description']) && $args['description']): ?>
525		- <p class="description"><?php echo $args['description']; ?></p>
	527	+ <p class="description"><?php echo esc_html($args['description']); ?></p>
526	528	<?php endif; ?>
527	529	<?php
528	530	}
529	531	function settings_field_checkbox_callback($args){
		@@ -530,15 +532,15 @@
530	532	?>
531	533	<?php foreach($args['options'] as $value=>$label) : ?>
532	534	<p>
533	535	<label>
534		- <input type="checkbox" name="ep_settings[<?php echo $args['name']; ?>][<?php echo $value; ?>]" value="<?php echo $value; ?>" <?php checked(in_array($value, EventPost()->settings[$args['name']]),true, true) ?>>
535		- <?php echo $label; ?>
	536	+ <input type="checkbox" name="ep_settings[<?php echo esc_attr($args['name']); ?>][<?php echo esc_attr($value); ?>]" value="<?php echo esc_attr($value); ?>" <?php checked(in_array($value, EventPost()->settings[$args['name']]),true, true) ?>>
	537	+ <?php echo esc_html($label); ?>
536	538	</label>
537	539	</p>
538	540	<?php endforeach; ?>
539	541	<?php if(isset($args['description']) && $args['description']): ?>
540		- <p class="description"><?php echo $args['description']; ?></p>
	542	+ <p class="description"><?php echo esc_html($args['description']); ?></p>
541	543	<?php endif; ?>
542	544	<?php
543	545	}
544	546	function settings_field_datepicker_callback($args){
		@@ -547,27 +549,27 @@
547	549	?>
548	550	<div>
549	551	<label>
550	552	<input type="radio" name="ep_settings[datepicker]" id="ep_datepicker_simple" value="simple" <?php checked(EventPost()->settings['datepicker'],'simple', true) ?>>
551		- <?php _e('Simple', 'event-post'); ?>
	553	+ <?php esc_html_e('Simple', 'event-post'); ?>
552	554	</label>
553	555	<p>
554	556	<span id="eventpost_simple_date_human" class="human_date">
555		- <?php echo $human_date; ?>
	557	+ <?php echo esc_html($human_date); ?>
556	558	</span>
557		- <input type="text" class="eventpost-datepicker-simple" id="eventpost_simple_date" value="<?php echo $now; ?>">
	559	+ <input type="text" class="eventpost-datepicker-simple" id="eventpost_simple_date" value="<?php echo esc_attr($now); ?>">
558	560	</p>
559	561	</div>
560	562	<div>
561	563	<label>
562	564	<input type="radio" name="ep_settings[datepicker]" id="ep_datepicker_native" value="native" <?php checked(EventPost()->settings['datepicker'],'native', true) ?>>
563		- <?php _e('Native WordPress style', 'event-post'); ?>
	565	+ <?php esc_html_e('Native WordPress style', 'event-post'); ?>
564	566	</label>
565	567	<p>
566	568	<span id="eventpost_native_date_human" class="human_date">
567		- <?php echo $human_date; ?>
	569	+ <?php echo esc_html($human_date); ?>
568	570	</span>
569		- <input type="text" class="eventpost-datepicker-native" id="eventpost_native_date" value="<?php echo $now; ?>">
	571	+ <input type="text" class="eventpost-datepicker-native" id="eventpost_native_date" value="<?php echo esc_attr($now); ?>">
570	572	</p>
571	573	</div>
572	574	<?php
573	575	}
		@@ -578,9 +580,9 @@
578	580	public function manage_settings() {
579	581	$ep_settings = EventPost()->settings;
580	582	?>
581	583	<div class="wrap">
582		- <h2><?php _e('Events settings', 'event-post'); ?></h2>
	584	+ <h2><?php esc_html_e('Events settings', 'event-post'); ?></h2>
583	585	<form action="options.php" method="post">
584	586	<?php settings_fields( 'eventpost-settings' ); ?>
585	587	<?php do_settings_sections('eventpost-settings'); ?>
586	588	<?php do_action('eventpost_settings_form', $ep_settings); ?>