| @@ -120,13 +120,13 @@ | ||
| 120 | 120 | } |
| 121 | 121 | else{ |
| 122 | 122 | if( !empty( $input_value_multiple ) ){ |
| 123 | 123 | foreach( $input_value_multiple as $input_value_multi ){ |
| 124 | - $output .= '<input type="hidden" disabled="disabled" readonly="readonly" value="'.$input_value_multi.'">'; | |
| 124 | + $output .= '<input type="hidden" disabled="disabled" readonly="readonly" value="' . esc_attr( $input_value_multi ) . '">'; | |
| 125 | 125 | } |
| 126 | 126 | } |
| 127 | 127 | else { |
| 128 | - $output .= '<input type="hidden" disabled="disabled" readonly="readonly" value="' . $input_value . '">'; | |
| 128 | + $output .= '<input type="hidden" disabled="disabled" readonly="readonly" value="' . esc_attr( $input_value ) . '">'; | |
| 129 | 129 | } |
| 130 | 130 | } |
| 131 | 131 | |
| 132 | 132 | return apply_filters( 'wppb_'.$form_location.'_user_role_custom_field_'.$field['id'], $output, $form_location, $field, $user_id, $field_check_errors, $request_data, $input_value, $input_value_multiple ); |