| @@ -223,9 +223,9 @@ | ||
| 223 | 223 | 'form_id' => 0, |
| 224 | 224 | 'user_id' => get_current_user_id(), |
| 225 | 225 | 'user_ip' => ip2long( weforms_get_client_ip() ), |
| 226 | 226 | 'user_device' => $browser['name'] . '/' . $browser['platform'], |
| 227 | - 'referer' => isset( $_SERVER['HTTP_REFERER'] ) ? sanitize_url( wp_unslash( $_SERVER['HTTP_REFERER'] ) ) : '', | |
| 227 | + 'referer' => isset( $_SERVER['HTTP_REFERER'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_REFERER'] ) ) : '', | |
| 228 | 228 | 'created_at' => current_time( 'mysql' ) |
| 229 | 229 | ]; |
| 230 | 230 | |
| 231 | 231 | $r = wp_parse_args( $args, $defaults ); |
| @@ -1319,7 +1319,7 @@ | ||
| 1319 | 1319 | function weforms_clean( $var ) { |
| 1320 | 1320 | if ( is_array( $var ) ) { |
| 1321 | 1321 | return array_map( 'weforms_clean', $var ); |
| 1322 | 1322 | } else { |
| 1323 | - return is_scalar( $var ) ? sanitize_textarea_field( wp_unslash( $var ) ) : $var; | |
| 1323 | + return is_scalar( $var ) ? sanitize_text_field( wp_unslash( $var ) ) : $var; | |
| 1324 | 1324 | } |
| 1325 | 1325 | } |
