← All changes | admin/class-berqPageRules.php +4 -4 4.0.22 → 4.1.16 View file →

		@@ -87,9 +87,9 @@
87	87	<tbody id="berqwp-rules-body">
88	88	<?php foreach ($rules as $index => $rule): ?>
89	89	<tr>
90	90	<td>
91		- <select name="berqwp_rules[<?php echo $index; ?>][action]">
	91	+ <select name="berqwp_rules[<?php echo esc_attr($index); ?>][action]">
92	92	<option value="">—</option>
93	93	<?php foreach ($actions as $key => $label): ?>
94	94	<option value="<?php echo esc_attr($key); ?>" <?php selected($rule['action'] ?? '', $key); ?>>
95	95	<?php echo esc_html($label); ?>
		@@ -97,9 +97,9 @@
97	97	<?php endforeach; ?>
98	98	</select>
99	99	</td>
100	100	<td>
101		- <select name="berqwp_rules[<?php echo $index; ?>][event]" class="berqwp-event">
	101	+ <select name="berqwp_rules[<?php echo esc_attr($index); ?>][event]" class="berqwp-event">
102	102	<option value="">—</option>
103	103	<?php foreach ($events as $key => $label): ?>
104	104	<option value="<?php echo esc_attr($key); ?>" <?php selected($rule['event'] ?? '', $key); ?>>
105	105	<?php echo esc_html($label); ?>
		@@ -107,9 +107,9 @@
107	107	<?php endforeach; ?>
108	108	</select>
109	109	</td>
110	110	<td>
111		- <select name="berqwp_rules[<?php echo $index; ?>][post_type]" class="berqwp-post-type">
	111	+ <select name="berqwp_rules[<?php echo esc_attr($index); ?>][post_type]" class="berqwp-post-type">
112	112	<option value="">—</option>
113	113	<?php foreach ($post_types as $key => $type): ?>
114	114	<option value="<?php echo esc_attr($key); ?>" <?php selected($rule['post_type'] ?? '', $key); ?>>
115	115	<?php echo esc_html($type->labels->singular_name); ?>
		@@ -168,9 +168,9 @@
168	168	}
169	169
170	170	function save_rules($post_id)
171	171	{
172		- if (!isset($_POST['berqwp_rules_nonce']) || !wp_verify_nonce($_POST['berqwp_rules_nonce'], 'berqwp_rules_save')) return;
	172	+ if (!isset($_POST['berqwp_rules_nonce']) || !wp_verify_nonce(sanitize_text_field(wp_unslash($_POST['berqwp_rules_nonce'])), 'berqwp_rules_save')) return;
173	173
174	174	$rules = get_option('berqwp_cache_rules');
175	175	if (!is_array($rules)) $rules = [];
176	176