| @@ -6,12 +6,12 @@ | ||
| 6 | 6 | */ |
| 7 | 7 | |
| 8 | 8 | $wpdbbkp_email_enabled = get_option( 'wp_db_backup_destination_Email',null ); |
| 9 | 9 | $wpdbbkp_email_id = get_option( 'wp_db_backup_email_id',null ); |
| 10 | -$wpdbbkp_email_status = '<label><b>Status</b>: Not Configured </label> '; | |
| 10 | +$wpdbbkp_email_status = '<label><b>'.esc_html__('Status','wpdbbkp').'</b>: '.esc_html__('Not Configured ','wpdbbkp').'</label> '; | |
| 11 | 11 | if($wpdbbkp_email_enabled==1 && !empty($wpdbbkp_email_id)) |
| 12 | 12 | { |
| 13 | - $wpdbbkp_email_status='<label><b>Status</b>: <span class="dashicons dashicons-yes-alt" style="color:green;font-size:16px" title="Destination enabled"></span><span class="configured">Configured </span> </label> '; | |
| 13 | + $wpdbbkp_email_status='<label><b>'.esc_html__('Status','wpdbbkp').'</b>: <span class="dashicons dashicons-yes-alt" style="color:green;font-size:16px" title="'.esc_attr__('Destination enabled','wpdbbkp').' "></span><span class="configured">'.esc_html__('Configured','wpdbbkp').' </span> </label> '; | |
| 14 | 14 | } |
| 15 | 15 | |
| 16 | 16 | |
| 17 | 17 | // If user pressed this button, this hidden field will be set to 'Y'. |
| @@ -16,8 +16,12 @@ | ||
| 16 | 16 | |
| 17 | 17 | // If user pressed this button, this hidden field will be set to 'Y'. |
| 18 | 18 | if ( isset( $_POST[ 'email_notification_submit' ] ) && 'Save Settings' === $_POST[ 'email_notification_submit' ] ) { |
| 19 | 19 | |
| 20 | + // This is a hidden field used to validate the form. | |
| 21 | + if ( ! isset( $_POST['_wpnonce'] ) || ! wp_verify_nonce( wp_unslash( $_POST['_wpnonce'] ), 'wp-database-backup' ) ) { //phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- using as nonce | |
| 22 | + return; | |
| 23 | + } | |
| 20 | 24 | if ( isset( $_POST['wp_db_backup_destination_Email'] ) ) { |
| 21 | 25 | update_option( 'wp_db_backup_destination_Email', 1 , false); |
| 22 | 26 | } else { |
| 23 | 27 | update_option( 'wp_db_backup_destination_Email', 0 , false); |
| @@ -23,13 +27,13 @@ | ||
| 23 | 27 | update_option( 'wp_db_backup_destination_Email', 0 , false); |
| 24 | 28 | } |
| 25 | 29 | |
| 26 | 30 | if ( isset( $_POST['wp_db_backup_email_attachment'] ) ) { |
| 27 | - update_option( 'wp_db_backup_email_attachment', sanitize_text_field($_POST['wp_db_backup_email_attachment']) , false); | |
| 31 | + update_option( 'wp_db_backup_email_attachment', sanitize_text_field(wp_unslash($_POST['wp_db_backup_email_attachment'])) , false); | |
| 28 | 32 | } |
| 29 | 33 | |
| 30 | 34 | if ( isset( $_POST['wp_db_backup_email_id'] ) ) { |
| 31 | - update_option( 'wp_db_backup_email_id', sanitize_email( $_POST['wp_db_backup_email_id'] ) , false); | |
| 35 | + update_option( 'wp_db_backup_email_id', sanitize_email( wp_unslash( $_POST['wp_db_backup_email_id']) ) , false); | |
| 32 | 36 | } |
| 33 | 37 | |
| 34 | 38 | } // end if. |
| 35 | 39 | ?> |
| @@ -36,9 +40,9 @@ | ||
| 36 | 40 | <div class="panel panel-default"> |
| 37 | 41 | <div class="panel-heading"> |
| 38 | 42 | <h4 class="panel-title"> |
| 39 | 43 | <a data-toggle="collapse" data-parent="#accordion" href="#collapseII"> |
| 40 | - <h2><?php echo esc_html__('Email Notification', 'wpdbbkp') ?> <?php echo $wpdbbkp_email_status;?> <span class="dashicons dashicons-admin-generic"></span></h2> | |
| 44 | + <h2><?php echo esc_html__('Email Notification', 'wpdbbkp') ?> <?php echo wp_kses_post($wpdbbkp_email_status);?> <span class="dashicons dashicons-admin-generic"></span></h2> | |
| 41 | 45 | |
| 42 | 46 | </a> |
| 43 | 47 | </h4> |
| 44 | 48 | </div> |
| @@ -54,20 +58,20 @@ | ||
| 54 | 58 | $wp_db_backup_email_attachment = ''; |
| 55 | 59 | $wp_db_backup_email_attachment = get_option( 'wp_db_backup_email_attachment' ); |
| 56 | 60 | $wp_db_backup_destination_email = get_option( 'wp_db_backup_destination_Email' ); |
| 57 | 61 | echo '<p>'; |
| 58 | - echo '<span class="glyphicon glyphicon-envelope"></span> Send Email Notification</br></p>'; | |
| 62 | + echo '<span class="glyphicon glyphicon-envelope"></span> '.esc_html__('Send Email Notification', 'wpdbbkp').'</br></p>'; | |
| 59 | 63 | $ischecked = ( true === isset( $wp_db_backup_destination_email ) && 1 === (int) $wp_db_backup_destination_email ) ? 'checked' : ''; |
| 60 | 64 | echo '<div class="row form-group"> |
| 61 | - <label class="col-sm-2" for="wp_db_backup_destination_Email">Enable Email Notification:</label> | |
| 65 | + <label class="col-sm-2" for="wp_db_backup_destination_Email">'.esc_html__('Enable Email Notification:', 'wpdbbkp').'</label> | |
| 62 | 66 | <div class="col-sm-6"> |
| 63 | 67 | <input type="checkbox" ' . esc_attr( $ischecked ) . ' id="wp_db_backup_destination_Email" name="wp_db_backup_destination_Email"> |
| 64 | 68 | </div> |
| 65 | 69 | </div>'; |
| 66 | - echo '<div class="row form-group"><label class="col-sm-2" for="wp_db_backup_email_id">Email Id</label>'; | |
| 67 | - echo '<div class="col-sm-6"><input type="text" id="wp_db_backup_email_id" class="form-control" name="wp_db_backup_email_id" value="' . esc_attr( $wp_db_backup_email_id ) . '" placeholder="Your Email Id"></div>'; | |
| 68 | - echo '<div class="col-sm-4">Leave blank if you don\'t want use this feature or Disable Email Notification</div></div>'; | |
| 69 | - echo '<div class="row form-group"><label class="col-sm-2" for="lead-theme">Attach backup file </label> '; | |
| 70 | + echo '<div class="row form-group"><label class="col-sm-2" for="wp_db_backup_email_id">'.esc_html__('Email Id', 'wpdbbkp').'</label>'; | |
| 71 | + echo '<div class="col-sm-6"><input type="text" id="wp_db_backup_email_id" class="form-control" name="wp_db_backup_email_id" value="' . esc_attr( $wp_db_backup_email_id ) . '" placeholder="'.esc_attr__('Your Email Id', 'wpdbbkp').'"></div>'; | |
| 72 | + echo '<div class="col-sm-4">'.esc_html__('Leave blank if you don\'t want use this feature or Disable Email Notification', 'wpdbbkp').'</div></div>'; | |
| 73 | + echo '<div class="row form-group"><label class="col-sm-2" for="lead-theme">'.esc_html__('Attach backup file', 'wpdbbkp').' </label> '; | |
| 70 | 74 | $selected_option = get_option( 'wp_db_backup_email_attachment' ); |
| 71 | 75 | |
| 72 | 76 | if ( 'yes' === $selected_option ) { |
| 73 | 77 | $selected_yes = 'selected="selected"'; |
| @@ -79,20 +83,20 @@ | ||
| 79 | 83 | } else { |
| 80 | 84 | $selected_no = ''; |
| 81 | 85 | } |
| 82 | 86 | echo '<div class="col-sm-2"><select id="lead-theme" class="form-control" name="wp_db_backup_email_attachment">'; |
| 83 | - echo '<option value="none">Select</option>'; | |
| 87 | + echo '<option value="none">'.esc_html__('Select', 'wpdbbkp').'</option>'; | |
| 84 | 88 | |
| 85 | - echo '<option value="yes"' . esc_attr( $selected_yes ) . '>Yes</option>'; | |
| 86 | - echo '<option value="no" ' . esc_attr( $selected_no ) . '>No</option>'; | |
| 89 | + echo '<option value="yes"' . esc_attr( $selected_yes ) . '>'.esc_html__('Yes', 'wpdbbkp').'</option>'; | |
| 90 | + echo '<option value="no" ' . esc_attr( $selected_no ) . '>'.esc_html__('No', 'wpdbbkp').'</option>'; | |
| 87 | 91 | |
| 88 | 92 | echo '</select></div>'; |
| 89 | 93 | |
| 90 | - echo '<div class="col-sm-8">If you want attache backup file to email then select "yes" (File attached only when backup file size <=25MB)</div>'; | |
| 94 | + echo '<div class="col-sm-8">'.esc_html__('If you want attache backup file to email then select "yes" (File attached only when backup file size <=25MB)', 'wpdbbkp').'</div>'; | |
| 91 | 95 | |
| 92 | 96 | echo '</div>'; |
| 93 | 97 | echo '<p class="submit">'; |
| 94 | - echo '<input type="submit" name="email_notification_submit" class="btn btn-primary" value="Save Settings" />'; | |
| 98 | + echo '<input type="submit" name="email_notification_submit" class="btn btn-primary" value="'.esc_attr__('Save Settings', 'wpdbbkp').'" />'; | |
| 95 | 99 | echo '</p>'; |
| 96 | 100 | echo '</form>'; |
| 97 | 101 | ?> |
| 98 | 102 | </div> |
