| @@ -334,9 +334,15 @@ | ||
| 334 | 334 | $params['country'] = sanitize_text_field( wp_unslash( $data['country'] ) ); |
| 335 | 335 | } |
| 336 | 336 | |
| 337 | 337 | if ( isset( $data['note'] ) ) { |
| 338 | - $params['note'] = sanitize_text_field( wp_unslash( $data['note'] ) ); | |
| 338 | + $posted_note = is_string( $data['note'] ) ? wp_unslash( $data['note'] ) : ''; | |
| 339 | + if ( MainWP_Utility::client_note_exceeds_limit( $posted_note ) ) { | |
| 340 | + return array( | |
| 341 | + 'error' => MainWP_Utility::client_note_length_error(), | |
| 342 | + ); | |
| 343 | + } | |
| 344 | + $params['note'] = is_string( $data['note'] ) ? MainWP_Utility::sanitize_client_note( $posted_note ) : ''; | |
| 339 | 345 | } |
| 340 | 346 | |
| 341 | 347 | if ( isset( $data['client_email'] ) ) { |
| 342 | 348 | $params['client_email'] = sanitize_text_field( wp_unslash( $data['client_email'] ) ); |
| @@ -426,8 +432,15 @@ | ||
| 426 | 432 | 'error' => esc_html__( 'Client name field is required! Please enter a Client name.', 'mainwp' ), |
| 427 | 433 | ); |
| 428 | 434 | } |
| 429 | 435 | |
| 436 | + $posted_note = ( isset( $data['note'] ) && is_string( $data['note'] ) ) ? wp_unslash( $data['note'] ) : ''; | |
| 437 | + if ( MainWP_Utility::client_note_exceeds_limit( $posted_note ) ) { | |
| 438 | + return array( | |
| 439 | + 'error' => MainWP_Utility::client_note_length_error(), | |
| 440 | + ); | |
| 441 | + } | |
| 442 | + | |
| 430 | 443 | $params['address_1'] = isset( $data['address_1'] ) ? sanitize_text_field( wp_unslash( $data['address_1'] ) ) : ''; |
| 431 | 444 | $params['address_2'] = isset( $data['address_2'] ) ? sanitize_text_field( wp_unslash( $data['address_2'] ) ) : ''; |
| 432 | 445 | $params['city'] = isset( $data['city'] ) ? sanitize_text_field( wp_unslash( $data['city'] ) ) : ''; |
| 433 | 446 | $params['zip'] = isset( $data['zip'] ) ? sanitize_text_field( wp_unslash( $data['zip'] ) ) : ''; |
| @@ -432,9 +445,9 @@ | ||
| 432 | 445 | $params['city'] = isset( $data['city'] ) ? sanitize_text_field( wp_unslash( $data['city'] ) ) : ''; |
| 433 | 446 | $params['zip'] = isset( $data['zip'] ) ? sanitize_text_field( wp_unslash( $data['zip'] ) ) : ''; |
| 434 | 447 | $params['state'] = isset( $data['state'] ) ? sanitize_text_field( wp_unslash( $data['state'] ) ) : ''; |
| 435 | 448 | $params['country'] = isset( $data['country'] ) ? sanitize_text_field( wp_unslash( $data['country'] ) ) : ''; |
| 436 | - $params['note'] = isset( $data['note'] ) ? sanitize_text_field( wp_unslash( $data['note'] ) ) : ''; | |
| 449 | + $params['note'] = isset( $data['note'] ) && is_string( $data['note'] ) ? MainWP_Utility::sanitize_client_note( $posted_note ) : ''; | |
| 437 | 450 | $params['client_email'] = isset( $data['client_email'] ) ? sanitize_text_field( wp_unslash( $data['client_email'] ) ) : ''; |
| 438 | 451 | $params['client_phone'] = isset( $data['client_phone'] ) ? sanitize_text_field( wp_unslash( $data['client_phone'] ) ) : ''; |
| 439 | 452 | $params['client_facebook'] = isset( $data['client_facebook'] ) ? sanitize_text_field( wp_unslash( $data['client_facebook'] ) ) : ''; |
| 440 | 453 | $params['client_twitter'] = isset( $data['client_twitter'] ) ? sanitize_text_field( wp_unslash( $data['client_twitter'] ) ) : ''; |
