| @@ -1,5 +1,8 @@ | ||
| 1 | 1 | <?php |
| 2 | +// Exit if accessed directly | |
| 3 | +if ( ! defined( 'ABSPATH' ) ) exit; | |
| 4 | + | |
| 2 | 5 | /* handle field output */ |
| 3 | 6 | function wppb_select_handler( $output, $form_location, $field, $user_id, $field_check_errors, $request_data ){ |
| 4 | 7 | if ( $field['field'] == 'Select' ){ |
| 5 | 8 | $item_title = apply_filters( 'wppb_'.$form_location.'_select_custom_field_'.$field['id'].'_item_title', wppb_icl_t( 'plugin profile-builder-pro', 'custom_field_'.$field['id'].'_title_translation', $field['field-title'], true ) ); |
| @@ -16,10 +19,11 @@ | ||
| 16 | 19 | else |
| 17 | 20 | $input_value = ( isset( $field['default-option'] ) ? trim( $field['default-option'] ) : '' ); |
| 18 | 21 | |
| 19 | 22 | $input_value = ( isset( $request_data[wppb_handle_meta_name( $field['meta-name'] )] ) ? stripslashes( trim( $request_data[wppb_handle_meta_name( $field['meta-name'] )] ) ) : $input_value ); |
| 23 | + $input_value = apply_filters( 'wppb_form_select_field_value', $input_value, $field, $form_location ); | |
| 20 | 24 | |
| 21 | - if ( $form_location != 'back_end' ){ | |
| 25 | + if ( $form_location != 'back_end' ){ | |
| 22 | 26 | $error_mark = ( ( $field['required'] == 'Yes' ) ? '<span class="wppb-required" title="'.wppb_required_field_error($field["field-title"]).'">*</span>' : '' ); |
| 23 | 27 | |
| 24 | 28 | if ( array_key_exists( $field['id'], $field_check_errors ) ) |
| 25 | 29 | $error_mark = '<img src="'.WPPB_PLUGIN_URL.'assets/images/pencil_delete.png" title="'.wppb_required_field_error($field["field-title"]).'"/>'; |
| @@ -82,9 +86,9 @@ | ||
| 82 | 86 | /* handle field save */ |
| 83 | 87 | function wppb_save_select_value( $field, $user_id, $request_data, $form_location ){ |
| 84 | 88 | if( $field['field'] == 'Select' ){ |
| 85 | 89 | if ( isset( $request_data[wppb_handle_meta_name( $field['meta-name'] )] ) ) |
| 86 | - update_user_meta( $user_id, $field['meta-name'], $request_data[wppb_handle_meta_name( $field['meta-name'] )] ); | |
| 90 | + update_user_meta( $user_id, $field['meta-name'], sanitize_text_field( $request_data[wppb_handle_meta_name( $field['meta-name'] )] ) ); | |
| 87 | 91 | } |
| 88 | 92 | } |
| 89 | 93 | add_action( 'wppb_save_form_field', 'wppb_save_select_value', 10, 4 ); |
| 90 | 94 | add_action( 'wppb_backend_save_form_field', 'wppb_save_select_value', 10, 4 ); |