| @@ -123,9 +123,9 @@ | ||
| 123 | 123 | */ |
| 124 | 124 | public function __construct( array $args = array() ) { |
| 125 | 125 | if ( isset( $args['project_id'] ) ) { |
| 126 | 126 | $this->project_id = sanitize_text_field( wp_unslash( $args['project_id'] ) ); |
| 127 | - } elseif ( isset( $_REQUEST['tab'] ) && 'tables' === $_REQUEST['tab'] ) { | |
| 127 | + } elseif ( isset( $_REQUEST['tab'] ) && 'tables' === $_REQUEST['tab'] ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- verified in parent class | |
| 128 | 128 | $this->project_id = 'wpda_sys_tables'; |
| 129 | 129 | } |
| 130 | 130 | if ( isset( $args['page_id'] ) ) { |
| 131 | 131 | $this->page_id = sanitize_text_field( wp_unslash( $args['page_id'] ) ); |
| @@ -132,9 +132,9 @@ | ||
| 132 | 132 | } |
| 133 | 133 | |
| 134 | 134 | $this->project = new WPDP_Project( $this->project_id, $this->page_id ); |
| 135 | 135 | if ( null === $this->project->get_project() ) { |
| 136 | - wp_die( __( 'Data Project page not found [need a valid project_id and page_id]', 'wp-data-access' ) ); | |
| 136 | + wp_die( esc_attr__( 'Data Project page not found [need a valid project_id and page_id]', 'wp-data-access' ) ); | |
| 137 | 137 | } |
| 138 | 138 | $this->title = $this->project->get_title(); |
| 139 | 139 | $this->subtitle = $this->project->get_subtitle(); |
| 140 | 140 | $this->mode = $this->project->get_mode(); |
| @@ -210,9 +210,9 @@ | ||
| 210 | 210 | $wpda_repository = new WPDA_Repository(); |
| 211 | 211 | $wpda_repository->inform_user(); |
| 212 | 212 | |
| 213 | 213 | if ( 'only' === $this->allow_insert && 'new' !== $this->action ) { |
| 214 | - wp_die( __( 'ERROR: Action not allowed', 'wp-data-access' ) ); | |
| 214 | + wp_die( esc_attr__( 'ERROR: Action not allowed', 'wp-data-access' ) ); | |
| 215 | 215 | } |
| 216 | 216 | |
| 217 | 217 | if ( |
| 218 | 218 | 'view' === $this->mode && |
| @@ -222,9 +222,9 @@ | ||
| 222 | 222 | ) { |
| 223 | 223 | if ( ( 'only' === $this->allow_insert || null === $this->allow_insert ) && 'new' === $this->action ) { |
| 224 | 224 | // Allow these actions (exceptions) |
| 225 | 225 | } else { |
| 226 | - wp_die( __( 'ERROR: Action not allowed', 'wp-data-access' ) ); | |
| 226 | + wp_die( esc_attr__( 'ERROR: Action not allowed', 'wp-data-access' ) ); | |
| 227 | 227 | } |
| 228 | 228 | } |
| 229 | 229 | |
| 230 | 230 | switch ( $this->action ) { |
| @@ -271,9 +271,9 @@ | ||
| 271 | 271 | ); |
| 272 | 272 | |
| 273 | 273 | $form->prepare_form(); |
| 274 | 274 | |
| 275 | - if ( isset( $_POST['postaction'] ) && 'list' === $_POST['postaction'] ) { | |
| 275 | + if ( isset( $_POST['postaction'] ) && 'list' === $_POST['postaction'] ) { // phpcs:ignore WordPress.Security.NonceVerification.Missing -- verified in parent class | |
| 276 | 276 | // Jump back to list after pressing SUBMIT > LIST |
| 277 | 277 | // Change column list from edit to list mode |
| 278 | 278 | $this->wpda_list_columns = |
| 279 | 279 | WPDP_List_Columns_Cache::get_list_columns( $this->schema_name, $this->table_name, 'listtable', $this->setname ); |
