| @@ -630,14 +630,14 @@ | ||
| 630 | 630 | $return['msg'] = sprintf(__('Row - %s Error: '. 'Skipped due to invalid/no data.','userswp'), $this->imp_step); |
| 631 | 631 | continue; |
| 632 | 632 | } |
| 633 | 633 | |
| 634 | - $username = isset($row['username']) ? $row['username'] : ''; | |
| 635 | - $email = isset($row['email']) ? $row['email'] : ''; | |
| 636 | - $first_name = isset($row['first_name']) ? $row['first_name'] : ''; | |
| 637 | - $last_name = isset($row['last_name']) ? $row['last_name'] : ''; | |
| 638 | - $bio = isset($row['bio']) ? $row['bio'] : ''; | |
| 639 | - $display_name = isset($row['display_name']) ? $row['display_name'] : ''; | |
| 634 | + $username = isset($row['username']) ? sanitize_user($row['username']) : ''; | |
| 635 | + $email = isset($row['email']) ? sanitize_email($row['email']) : ''; | |
| 636 | + $first_name = isset($row['first_name']) ? sanitize_text_field($row['first_name']) : ''; | |
| 637 | + $last_name = isset($row['last_name']) ? sanitize_text_field($row['last_name']) : ''; | |
| 638 | + $bio = isset($row['bio']) ? sanitize_textarea_field($row['bio']) : ''; | |
| 639 | + $display_name = isset($row['display_name']) ? sanitize_text_field($row['display_name']) : ''; | |
| 640 | 640 | $password = wp_generate_password(); |
| 641 | 641 | $exclude = array('user_id'); |
| 642 | 642 | $exclude = apply_filters('uwp_import_exclude_columns', $exclude, $row); |
| 643 | 643 | |
| @@ -643,9 +643,8 @@ | ||
| 643 | 643 | |
| 644 | 644 | if(isset($row['username']) && username_exists($row['username'])){ |
| 645 | 645 | $user = get_user_by('login', $row['username']); |
| 646 | 646 | $user_id = $user->ID; |
| 647 | - $email = $row['email']; | |
| 648 | 647 | if( !empty( $email ) && $update_existing = apply_filters('uwp_import_update_users', false, $row, $user_id) ) { |
| 649 | 648 | $args = array( |
| 650 | 649 | 'ID' => $user_id, |
| 651 | 650 | 'user_email' => $email, |
| @@ -662,9 +661,9 @@ | ||
| 662 | 661 | } elseif((int)$row['user_id'] > 0){ |
| 663 | 662 | $user = get_user_by('ID', $row['user_id']); |
| 664 | 663 | if(false === $user){ |
| 665 | 664 | $userdata = array( |
| 666 | - 'user_login' => $row['username'], | |
| 665 | + 'user_login' => $username, | |
| 667 | 666 | 'user_email' => $email, |
| 668 | 667 | 'user_pass' => $password, |
| 669 | 668 | 'first_name' => $first_name, |
| 670 | 669 | 'last_name' => $last_name, |
