| 1 |
<?php |
| 2 |
define( 'ABSPATH', __DIR__ . '/' );//added this because we actually need to access this page directly, sorry about this :) |
| 3 |
/* |
| 4 |
//load WP if needed |
| 5 |
$path_to_wp_install_dir = ''; |
| 6 |
include_once ( $path_to_wp_install_dir.'wp-load.php' ); |
| 7 |
*/ |
| 8 |
|
| 9 |
if ( ! defined( 'ABSPATH' ) ) exit; // Exit if accessed directly |
| 10 |
|
| 11 |
$site_name = ( isset( $_GET['site_name'] ) ? filter_var ( urldecode( $_GET['site_name'] ), FILTER_SANITIZE_STRING ) : '' ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized |
| 12 |
$message = ( isset( $_GET['message'] ) ? filter_var ( urldecode( $_GET['message'] ), FILTER_SANITIZE_STRING ) : '' ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized |
| 13 |
?> |
| 14 |
|
| 15 |
<html> |
| 16 |
<head> |
| 17 |
<style type="text/css"> |
| 18 |
body {font-family:Arial; padding: 5px; margin-top:100px; text-align: center;} |
| 19 |
</style> |
| 20 |
|
| 21 |
<title><?php echo htmlspecialchars( $site_name, ENT_QUOTES ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?></title> |
| 22 |
</head> |
| 23 |
|
| 24 |
<body id="wppb_content"> |
| 25 |
<h1><?php echo htmlspecialchars( $site_name, ENT_QUOTES ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?></h1> |
| 26 |
|
| 27 |
<?php echo '<p>'. htmlspecialchars( strip_tags( $message ) ). '</p>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?> |
| 28 |
|
| 29 |
<?php echo 'Click <a href="/">here</a> to return to the main site'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?> |
| 30 |
</body> |
| 31 |
</html> |