PluginProbe
Property Hive / 2.3.0
Property Hive v2.3.0
2.3.1 2.3.0 2.2.6 2.2.5 2.2.4 2.2.3 2.2.2 1.4.46 1.4.47 1.4.48 1.4.49 1.4.5 1.4.50 1.4.51 1.4.52 1.4.53 1.4.54 1.4.55 1.4.56 1.4.57 1.4.58 1.4.59 1.4.6 1.4.60 1.4.61 All 261 releases
← All changes | includes/admin/settings/class-ph-settings-add-ons.php +7 -7 1.4.552.3.0 View file →
@@ -123,16 +123,16 @@
123 123 <div class="padding">
124 124 <div class="thumbnail">';
125 125 if (isset($add_on->image) && $add_on->image != '')
126 126 {
127 - echo '<a href="' . $add_on->url . '" target="_blank"><img src="' . $add_on->image . '" alt="' . $add_on->name . '"></a>';
127 + echo '<a href="' . esc_url($add_on->url) . '" target="_blank"><img src="' . esc_url($add_on->image) . '" alt="' . esc_attr($add_on->name) . '"></a>';
128 128 }
129 129 echo '</div>
130 130 <div class="details">
131 - <h3><a href="' . $add_on->url . '" target="_blank">' . $add_on->name . '</a></h3>
132 - <p>' . $add_on->description . '</p>
131 + <h3><a href="' . esc_url($add_on->url) . '" target="_blank">' . esc_html($add_on->name) . '</a></h3>
132 + <p>' . esc_html($add_on->description) . '</p>
133 133 <br>
134 - <a href="' . $add_on->url . '" target="_blank" class="button">'. __('View Add On', 'propertyhive') .'</a>
134 + <a href="' . esc_url($add_on->url) . '" target="_blank" class="button">'. esc_html(__('View Add On', 'propertyhive')) .'</a>
135 135 </div>
136 136 </div>
137 137 </li>';
138 138
@@ -142,16 +142,16 @@
142 142 echo '</ul>';
143 143 }
144 144 else
145 145 {
146 - echo '<p>'. __('No add ons are currently available for Property Hive. As add ons become available they will appear here. Please check back soon.', 'propertyhive') . '</p>';
146 + echo '<p>'. esc_html(__('No add ons are currently available for Property Hive. As add ons become available they will appear here. Please check back soon.', 'propertyhive')) . '</p>';
147 147 }
148 148 }
149 149 else
150 150 {
151 - echo '<p>'. __('Unable to retrieve list of add-ons. Please visit the Property Hive add ons page to view a full list of add ons available.', 'propertyhive') . '</p>';
151 + echo '<p>'. esc_html(__('Unable to retrieve list of add-ons. Please visit the Property Hive add ons page to view a full list of add ons available.', 'propertyhive')) . '</p>';
152 152
153 - echo '<br><p><a href="https://wp-property-hive.com/add-ons/" class="button button-primary">'. __('Browse All Add Ons', 'propertyhive') . '</a></p>';
153 + echo '<br><p><a href="https://wp-property-hive.com/add-ons/" class="button button-primary">'. esc_html(__('Browse All Add Ons', 'propertyhive')) . '</a></p>';
154 154 }
155 155 ?>
156 156
157 157 </td>