| @@ -312,9 +312,9 @@ | ||
| 312 | 312 | get_date_from_gmt( $created, 'Y/m/d' ) |
| 313 | 313 | ); |
| 314 | 314 | $out = $this->column_link( $date_string, 'date', get_date_from_gmt( $created, 'Y/m/d' ) ); |
| 315 | 315 | $out .= '<br />'; |
| 316 | - $out .= get_date_from_gmt( $created, 'h:i:s A T' ); | |
| 316 | + $out .= get_date_from_gmt( $created, 'h:i:s A' ); | |
| 317 | 317 | break; |
| 318 | 318 | |
| 319 | 319 | case 'summary': |
| 320 | 320 | $out = $record->summary; |
| @@ -775,10 +775,9 @@ | ||
| 775 | 775 | // Parse all query vars into an array. |
| 776 | 776 | $query_vars = array(); |
| 777 | 777 | |
| 778 | 778 | if ( isset( $_SERVER['QUERY_STRING'] ) ) { |
| 779 | - parse_str( wp_unslash( $_SERVER['QUERY_STRING'] ), $query_vars ); | |
| 780 | - $query_vars = map_deep( $query_vars, 'sanitize_text_field' ); | |
| 779 | + parse_str( urldecode( $_SERVER['QUERY_STRING'] ), $query_vars ); | |
| 781 | 780 | } |
| 782 | 781 | |
| 783 | 782 | // Ignore certain query vars and query vars that are empty. |
| 784 | 783 | foreach ( $query_vars as $query_var => $value ) { |
| @@ -911,9 +910,9 @@ | ||
| 911 | 910 | <input type="search" id="record-search-input" name="search" value="%2$s" /> |
| 912 | 911 | <input type="submit" name="" id="search-submit" class="button" value="%3$s" /> |
| 913 | 912 | </p>', |
| 914 | 913 | esc_html__( 'Search Records', 'stream' ), |
| 915 | - esc_attr( ! empty( $_GET['search'] ) ? sanitize_text_field( wp_unslash( $_GET['search'] ) ) : '' ), // phpcs:ignore WordPress.Security.NonceVerification.Recommended | |
| 914 | + esc_attr( ! empty( $_GET['search'] ) ? $_GET['search'] : '' ), // phpcs:ignore WordPress.Security.NonceVerification.Recommended | |
| 916 | 915 | esc_attr__( 'Search Records', 'stream' ) |
| 917 | 916 | ); |
| 918 | 917 | } |
| 919 | 918 | |
| @@ -1154,8 +1153,11 @@ | ||
| 1154 | 1153 | <h5><?php esc_html_e( 'Live updates', 'stream' ); ?></h5> |
| 1155 | 1154 | |
| 1156 | 1155 | <div> |
| 1157 | 1156 | <input type="hidden" name="stream_live_update_nonce" id="stream_live_update_nonce" value="<?php echo esc_attr( $nonce ); ?>"/> |
| 1157 | + </div> | |
| 1158 | + <div> | |
| 1159 | + <input type="hidden" name="enable_live_update_user" id="enable_live_update_user" value="<?php echo absint( $user_id ); ?>"/> | |
| 1158 | 1160 | </div> |
| 1159 | 1161 | <div class="metabox-prefs stream-live-update-checkbox"> |
| 1160 | 1162 | <label for="enable_live_update"> |
| 1161 | 1163 | <input type="checkbox" value="on" name="enable_live_update" id="enable_live_update" data-heartbeat="<?php echo esc_attr( $heartbeat ); ?>" <?php checked( $option, 'on' ); ?> /> |
