| @@ -1233,9 +1233,9 @@ | ||
| 1233 | 1233 | foreach ( (array) $items as $item ) { |
| 1234 | 1234 | $product = wel_get_product( $item->ID ); |
| 1235 | 1235 | $item_name = $product['itemName']; |
| 1236 | 1236 | $item_code = $product['itemCode']; |
| 1237 | - $option .= '<option value="' . urlencode( $item_code ) . '">' . $item_name . '(' . $item_code . ')</option>' . "\n"; | |
| 1237 | + $option .= '<option value="' . urlencode( $item_code ) . '">' . esc_html( $item_name ) . '(' . esc_html( $item_code ) . ')</option>' . "\n"; | |
| 1238 | 1238 | } |
| 1239 | 1239 | return $option; |
| 1240 | 1240 | } |
| 1241 | 1241 | |
| @@ -2177,9 +2177,9 @@ | ||
| 2177 | 2177 | $meta = array(); |
| 2178 | 2178 | } elseif ( is_array( $fields ) ) { |
| 2179 | 2179 | $meta = $fields; |
| 2180 | 2180 | } else { |
| 2181 | - $meta = unserialize( $fields ); | |
| 2181 | + $meta = wel_safe_unserialize( $fields ); | |
| 2182 | 2182 | } |
| 2183 | 2183 | return $meta; |
| 2184 | 2184 | } |
| 2185 | 2185 | |
| @@ -2610,9 +2610,9 @@ | ||
| 2610 | 2610 | function get_usces_states( $country ) { |
| 2611 | 2611 | global $usces, $usces_states; |
| 2612 | 2612 | |
| 2613 | 2613 | $states = array(); |
| 2614 | - $prefs = maybe_unserialize( $usces->options['province'] ); | |
| 2614 | + $prefs = wel_safe_maybe_unserialize( $usces->options['province'] ); | |
| 2615 | 2615 | if ( ! isset( $prefs[ $country ] ) || empty( $prefs[ $country ] ) ) { |
| 2616 | 2616 | if ( $country == $usces->options['system']['base_country'] ) { |
| 2617 | 2617 | foreach ( (array) $prefs as $state ) { |
| 2618 | 2618 | if ( ! is_array( $state ) ) { |
