← All changes
|
includes/admin/views/html-admin-matching-properties-email.php
+5
-3
2.2.5
→
2.3.1
View file →
| @@ -1,11 +1,13 @@ | ||
| 1 | 1 | <?php |
| 2 | 2 | if ( ! defined( 'ABSPATH' ) ) { |
| 3 | 3 | exit; |
| 4 | 4 | } |
| 5 | +// phpcs:ignore WordPress.Security.NonceVerification.Missing -- Read-only email composition count; the matching controller verifies propertyhive-matching-properties before including this view. | |
| 6 | +$propertyhive_email_property_ids = isset( $_POST['email_property_id'] ) && is_array( $_POST['email_property_id'] ) ? array_filter( array_map( 'sanitize_text_field', wp_unslash( $_POST['email_property_id'] ) ), 'ctype_digit' ) : array(); | |
| 5 | 7 | ?> |
| 6 | 8 | |
| 7 | -<h1>Emailing <?php echo count($_POST['email_property_id']); ?> Suitable Properties To <?php echo esc_html(get_the_title($contact_id)); ?></h1> | |
| 9 | +<h1>Emailing <?php echo count( $propertyhive_email_property_ids ); ?> Suitable Properties To <?php echo esc_html(get_the_title($contact_id)); ?></h1> | |
| 8 | 10 | |
| 9 | 11 | <table class="form-table"> |
| 10 | 12 | |
| 11 | 13 | <tr valign="top"> |
| @@ -10,9 +12,9 @@ | ||
| 10 | 12 | |
| 11 | 13 | <tr valign="top"> |
| 12 | 14 | <th scope="row" class="titledesc"><?php echo esc_html(__( 'To', 'propertyhive' )); ?></th> |
| 13 | 15 | <td class="forminp"> |
| 14 | - <input type="text" name="to_email_address" value="<?php echo get_post_meta( $contact_id, '_email_address', TRUE ); ?>" style="width:100%; margin-bottom:5px;"> | |
| 16 | + <input type="text" name="to_email_address" value="<?php echo esc_attr( get_post_meta( $contact_id, '_email_address', TRUE ) ); ?>" style="width:100%; margin-bottom:5px;"> | |
| 15 | 17 | <a href="" class="show-cc">Show Cc</a> | <a href="" class="show-bcc">Show Bcc</a> |
| 16 | 18 | </td> |
| 17 | 19 | </tr> |
| 18 | 20 | |
| @@ -53,9 +55,9 @@ | ||
| 53 | 55 | |
| 54 | 56 | <tr valign="top"> |
| 55 | 57 | <th scope="row" class="titledesc"><?php echo esc_html(__( 'Email Body', 'propertyhive' )); ?></th> |
| 56 | 58 | <td class="forminp"> |
| 57 | - <textarea name="body" style="width:100%; height:300px;"><?php echo $body; ?></textarea> | |
| 59 | + <textarea name="body" style="width:100%; height:300px;"><?php echo esc_textarea( $body ); ?></textarea> | |
| 58 | 60 | </td> |
| 59 | 61 | </tr> |
| 60 | 62 | |
| 61 | 63 | </table> |