| @@ -78,9 +78,9 @@ | ||
| 78 | 78 | $csmb_meta = usces_has_custom_field_meta( 'member' ); |
| 79 | 79 | if ( is_array( $csmb_meta ) ) { |
| 80 | 80 | $keys = array_keys( $csmb_meta ); |
| 81 | 81 | foreach ( $keys as $key ) { |
| 82 | - $csmb_meta[ $key ]['data'] = maybe_unserialize( $this->get_member_meta_value( 'csmb_' . $key, $member_id ) ); | |
| 82 | + $csmb_meta[ $key ]['data'] = wel_safe_maybe_unserialize( $this->get_member_meta_value( 'csmb_' . $key, $member_id ) ); | |
| 83 | 83 | } |
| 84 | 84 | } |
| 85 | 85 | $admb_meta = usces_has_custom_field_meta( 'admin_member' ); |
| 86 | 86 | if ( is_array( $admb_meta ) ) { |
| @@ -85,9 +85,9 @@ | ||
| 85 | 85 | $admb_meta = usces_has_custom_field_meta( 'admin_member' ); |
| 86 | 86 | if ( is_array( $admb_meta ) ) { |
| 87 | 87 | $keys = array_keys( $admb_meta ); |
| 88 | 88 | foreach ( $keys as $key ) { |
| 89 | - $admb_meta[ $key ]['data'] = maybe_unserialize( $this->get_member_meta_value( 'admb_' . $key, $member_id ) ); | |
| 89 | + $admb_meta[ $key ]['data'] = wel_safe_maybe_unserialize( $this->get_member_meta_value( 'admb_' . $key, $member_id ) ); | |
| 90 | 90 | } |
| 91 | 91 | } |
| 92 | 92 | |
| 93 | 93 | $exopt = get_option( 'usces_ex', array() ); |
| @@ -357,9 +357,9 @@ | ||
| 357 | 357 | $optstr = ''; |
| 358 | 358 | foreach ( (array) $options as $key => $value ) { |
| 359 | 359 | if ( ! empty( $key ) ) { |
| 360 | 360 | $key = urldecode( $key ); |
| 361 | - $value = maybe_unserialize( $value ); | |
| 361 | + $value = wel_safe_maybe_unserialize( $value ); | |
| 362 | 362 | if ( is_array( $value ) ) { |
| 363 | 363 | $c = ''; |
| 364 | 364 | $optstr .= esc_html( $key ) . ' : '; |
| 365 | 365 | foreach ( $value as $v ) { |
| @@ -374,9 +374,9 @@ | ||
| 374 | 374 | } |
| 375 | 375 | $materials = compact( 'i', 'cart_row', 'post_id', 'sku', 'quantity', 'options', 'advance', 'itemCode', 'itemName', 'cartItemName', 'skuPrice', 'pictid', 'order_id' ); |
| 376 | 376 | $optstr = apply_filters( 'usces_filter_member_edit_form_row', $optstr, $cart, $materials ); |
| 377 | 377 | |
| 378 | - $cart_item_name = apply_filters( 'usces_filter_admin_cart_item_name', $cartItemName, $materials ) . '<br />' . $optstr; | |
| 378 | + $cart_item_name = apply_filters( 'usces_filter_admin_cart_item_name', esc_html( $cartItemName ), $materials ) . '<br />' . $optstr; | |
| 379 | 379 | $cart_item_name = apply_filters( 'usces_filter_admin_history_cart_item_name', $cart_item_name, $cartItemName, $optstr, $cart_row, $i ); |
| 380 | 380 | |
| 381 | 381 | $cart_thumbnail = ( ! empty( $pictid ) ) ? wp_get_attachment_image( $pictid, array( 60, 60 ), true ) : usces_get_attachment_noimage( array( 60, 60 ), $itemCode ); |
| 382 | 382 | $cart_thumbnail = apply_filters( 'usces_filter_cart_thumbnail', $cart_thumbnail, $post_id, $pictid, $i, $cart_row ); |