| @@ -1,11 +1,22 @@ | ||
| 1 | -<div> | |
| 2 | - <label for="<?php echo $this->META_ATTENDANCE_MODE; ?>"> | |
| 3 | - <?php _e('Attendance Mode:', 'event-post') ?> | |
| 4 | - <select name="<?php echo $this->META_ATTENDANCE_MODE; ?>" id="<?php echo $this->META_ATTENDANCE_MODE; ?>"> | |
| 1 | +<?php | |
| 2 | +/** | |
| 3 | + * Location custombox | |
| 4 | + * | |
| 5 | + * @package event-post | |
| 6 | + * @version 6.1.2 | |
| 7 | + * @since 5.3.1 | |
| 8 | + */ | |
| 9 | + | |
| 10 | +if ( ! defined( 'ABSPATH' ) ) exit; | |
| 11 | +?> | |
| 12 | + <div> | |
| 13 | + <label for="<?php echo esc_attr($this->META_ATTENDANCE_MODE); ?>"> | |
| 14 | + <?php esc_html_e('Attendance Mode:', 'event-post') ?> | |
| 15 | + <select name="<?php echo esc_attr($this->META_ATTENDANCE_MODE); ?>" id="<?php echo esc_attr($this->META_ATTENDANCE_MODE); ?>"> | |
| 5 | 16 | <option value=""></option> |
| 6 | 17 | <?php foreach ($this->attendance_modes as $mode_name => $mode_label): ?> |
| 7 | - <option value="<?php echo $mode_name; ?>" <?php selected($mode_name, $event->attendance_mode, true); ?>><?php echo $mode_label; ?></option> | |
| 18 | + <option value="<?php echo esc_attr($mode_name); ?>" <?php selected($mode_name, $event->attendance_mode, true); ?>><?php echo esc_html($mode_label); ?></option> | |
| 8 | 19 | <?php endforeach; ?> |
| 9 | 20 | </select> |
| 10 | 21 | </label> |
| 11 | 22 | </div> |
| @@ -10,27 +21,27 @@ | ||
| 10 | 21 | </label> |
| 11 | 22 | </div> |
| 12 | 23 | <div class="eventpost-misc-pub-section eventpost-location-type-online"> |
| 13 | 24 | <p> |
| 14 | - <label for="<?php echo $this->META_VIRTUAL_LOCATION; ?>"> | |
| 15 | - <?php _e('Virtual Location:', 'event-post') ?> | |
| 16 | - <input type="url" value ="<?php echo $event->virtual_location; ?>" name="<?php echo $this->META_VIRTUAL_LOCATION; ?>" id="<?php echo $this->META_VIRTUAL_LOCATION; ?>" class="widefat"/> | |
| 25 | + <label for="<?php echo esc_attr($this->META_VIRTUAL_LOCATION); ?>"> | |
| 26 | + <?php esc_html_e('Virtual Location:', 'event-post') ?> | |
| 27 | + <input type="url" value ="<?php echo esc_attr($event->virtual_location); ?>" name="<?php echo esc_attr($this->META_VIRTUAL_LOCATION); ?>" id="<?php echo esc_attr($this->META_VIRTUAL_LOCATION); ?>" class="widefat"/> | |
| 17 | 28 | </label> |
| 18 | 29 | </p> |
| 19 | 30 | </div> |
| 20 | 31 | |
| 21 | 32 | <div class="eventpost-misc-pub-section eventpost-location-type-offline"> |
| 22 | - <label for="<?php echo $this->META_ADD; ?>"> | |
| 23 | -<?php _e('Address, as it will be displayed:', 'event-post') ?> | |
| 24 | - <textarea name="<?php echo $this->META_ADD; ?>" id="<?php echo $this->META_ADD; ?>" class="widefat"><?php echo $event->address; ?></textarea> | |
| 33 | + <label for="<?php echo esc_attr($this->META_ADD); ?>"> | |
| 34 | +<?php esc_html_e('Address, as it will be displayed:', 'event-post') ?> | |
| 35 | + <textarea name="<?php echo esc_attr($this->META_ADD); ?>" id="<?php echo esc_attr($this->META_ADD); ?>" class="widefat"><?php echo esc_html($event->address); ?></textarea> | |
| 25 | 36 | </label> |
| 26 | 37 | </div> |
| 27 | 38 | |
| 28 | 39 | <div id="event_address_searchwrap" class="eventpost-location-type-offline"> |
| 29 | 40 | <span class="dashicons dashicons-location eventpost-edit-icon"></span> |
| 30 | - <?php _e('GPS coordinates:', 'event-post') ?> | |
| 31 | - <a id="event_address_search" title="<?php _e('Search or fill exact coordinates', 'event-post') ?>"> | |
| 32 | - <?php _e('Search / Edit', 'event-post') ?> | |
| 41 | + <?php esc_html_e('GPS coordinates:', 'event-post') ?> | |
| 42 | + <a id="event_address_search" title="<?php esc_attr_e('Search or fill exact coordinates', 'event-post') ?>"> | |
| 43 | + <?php esc_html_e('Search / Edit', 'event-post') ?> | |
| 33 | 44 | </a> |
| 34 | 45 | |
| 35 | 46 | <div class="misc-pub-section" id="event_address_coords"> |
| 36 | 47 | <p> |
| @@ -35,21 +46,21 @@ | ||
| 35 | 46 | <div class="misc-pub-section" id="event_address_coords"> |
| 36 | 47 | <p> |
| 37 | 48 | <span id="eventaddress_result"></span> |
| 38 | 49 | </p> |
| 39 | - <label for="<?php echo $this->META_LAT; ?>"> | |
| 40 | - <?php _e('Latitude:', 'event-post') ?> | |
| 41 | - <input type="text" value ="<?php echo $event->lat; ?>" name="<?php echo $this->META_LAT; ?>" id="<?php echo $this->META_LAT; ?>" class="widefat"/> | |
| 50 | + <label for="<?php echo esc_attr($this->META_LAT); ?>"> | |
| 51 | + <?php esc_html_e('Latitude:', 'event-post') ?> | |
| 52 | + <input type="text" value ="<?php echo esc_attr($event->lat); ?>" name="<?php echo esc_attr($this->META_LAT); ?>" id="<?php echo esc_attr($this->META_LAT); ?>" class="widefat"/> | |
| 42 | 53 | </label> |
| 43 | 54 | |
| 44 | - <label for="<?php echo $this->META_LONG; ?>"> | |
| 45 | - <?php _e('Longitude:', 'event-post') ?> | |
| 46 | - <input type="text" value ="<?php echo $event->long; ?>" name="<?php echo $this->META_LONG; ?>" id="<?php echo $this->META_LONG; ?>" class="widefat"/> | |
| 55 | + <label for="<?php echo esc_attr($this->META_LONG); ?>"> | |
| 56 | + <?php esc_html_e('Longitude:', 'event-post') ?> | |
| 57 | + <input type="text" value ="<?php echo esc_attr($event->long); ?>" name="<?php echo esc_attr($this->META_LONG); ?>" id="<?php echo esc_attr($this->META_LONG); ?>" class="widefat"/> | |
| 47 | 58 | </label> |
| 48 | 59 | <p> |
| 49 | 60 | <a id="event_address_unsearch" class="button button-small"> |
| 50 | 61 | <span class="dashicons dashicons-yes"></span> |
| 51 | - <?php _e('Done', 'event-post') ?> | |
| 62 | + <?php esc_html_e('Done', 'event-post') ?> | |
| 52 | 63 | </a> |
| 53 | 64 | </p> |
| 54 | 65 | </div> |
| 55 | 66 | </div> |
| @@ -54,6 +65,6 @@ | ||
| 54 | 65 | </div> |
| 55 | 66 | </div> |
| 56 | 67 | |
| 57 | 68 | <div class="eventpost-misc-pub-section eventpost-location-type-offline" id="event-post-map-preview-wrapper"> |
| 58 | - <div id="event-post-map-preview" data-marker="<?php echo $this->get_marker($event->color); ?>"></div> | |
| 69 | + <div id="event-post-map-preview" data-marker="<?php echo esc_attr($this->get_marker($event->color)); ?>"></div> | |
| 59 | 70 | </div> |