| @@ -27,9 +27,9 @@ | ||
| 27 | 27 | |
| 28 | 28 | if ( isset( $input_value ) && ( $input_value == 'agree' ) ) |
| 29 | 29 | $output .= ' checked="yes"'; |
| 30 | 30 | |
| 31 | - $output .= ' />'.trim( html_entity_decode ( $item_description ) ).$error_mark.'</label>'; | |
| 31 | + $output .= ' /><span>'.trim( html_entity_decode ( $item_description ) ).$error_mark.'</span></label>'; | |
| 32 | 32 | |
| 33 | 33 | } |
| 34 | 34 | else |
| 35 | 35 | if($form_location == 'back_end') |
| @@ -73,9 +73,9 @@ | ||
| 73 | 73 | function wppb_save_gdpr_value( $field, $user_id, $request_data, $form_location ){ |
| 74 | 74 | if( $field['field'] == 'GDPR Checkbox' ){ |
| 75 | 75 | if ( $form_location == 'register' || $form_location == 'edit_profile' ){ |
| 76 | 76 | if ( isset( $request_data[wppb_handle_meta_name( $field['meta-name'] )] ) ) |
| 77 | - update_user_meta( $user_id, $field['meta-name'], $request_data[wppb_handle_meta_name( $field['meta-name'] )] ); | |
| 77 | + update_user_meta( $user_id, $field['meta-name'], sanitize_text_field( $request_data[wppb_handle_meta_name( $field['meta-name'] )] ) ); | |
| 78 | 78 | //save the time when the user agreed |
| 79 | 79 | update_user_meta( $user_id, 'gdpr_agreement_time', time() ); |
| 80 | 80 | } |
| 81 | 81 | } |
