| @@ -1,29 +1,29 @@ | ||
| 1 | -<?php if (!defined('WPO_VERSION')) die('No direct access allowed'); ?> | |
| 2 | -<a id="wp-optimize-nav-page-menu" href="#" role="toggle-menu"> | |
| 1 | +<?php if (!defined('ABSPATH')) die('No direct access allowed'); ?> | |
| 2 | +<button id="wp-optimize-nav-page-menu" aria-expanded="false" aria-controls="wpo-menu"> | |
| 3 | 3 | <span class="dashicons dashicons-no-alt"></span> |
| 4 | 4 | <span class="dashicons dashicons-menu"></span> |
| 5 | - <span><?php _e('Menu', 'wp-optimize'); ?></span> | |
| 6 | -</a> | |
| 7 | -<div class="wpo-pages-menu"> | |
| 5 | + <span><?php esc_html_e('Menu', 'wp-optimize'); ?></span> | |
| 6 | +</button> | |
| 7 | +<div id="wpo-menu" class="wpo-pages-menu"> | |
| 8 | 8 | <?php |
| 9 | - $active_page = !empty($_REQUEST['page']) ? $_REQUEST['page'] : ''; | |
| 9 | + $active_page = !empty($_REQUEST['page']) ? sanitize_text_field(wp_unslash($_REQUEST['page'])) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Only used to compare with a string literal. | |
| 10 | 10 | foreach ($menu_items as $menu) : |
| 11 | 11 | ?> |
| 12 | 12 | |
| 13 | - <?php if (isset($menu['icon']) && 'separator' == $menu['icon']) : ?> | |
| 13 | + <?php if (isset($menu['icon']) && 'separator' === $menu['icon']) : ?> | |
| 14 | 14 | <span class="separator"></span> |
| 15 | 15 | <?php else : ?> |
| 16 | - <a class="<?php echo ($active_page === $menu['menu_slug']) ? 'active' : ''; ?>" href="<?php esc_attr_e(menu_page_url($menu['menu_slug'], false)); ?>" data-menuslug="<?php echo $menu['menu_slug']; ?>"> | |
| 17 | - <span class="dashicons dashicons-<?php echo $menu['icon']; ?>"></span> | |
| 18 | - <span class="title"><?php esc_html_e($menu['menu_title']); ?></span> | |
| 16 | + <a class="<?php echo ($active_page === $menu['menu_slug']) ? 'active' : ''; ?>" href="<?php echo esc_url(menu_page_url($menu['menu_slug'], false)); ?>" data-menuslug="<?php echo esc_attr($menu['menu_slug']); ?>"> | |
| 17 | + <span class="dashicons dashicons-<?php echo esc_attr($menu['icon']); ?>"></span> | |
| 18 | + <span class="title"><?php echo esc_html($menu['menu_title']); ?></span> | |
| 19 | 19 | </a> |
| 20 | 20 | <?php endif; ?> |
| 21 | 21 | |
| 22 | 22 | <?php endforeach; ?> |
| 23 | 23 | <p class="wpo-header-links__mobile"> |
| 24 | - <span class="wpo-header-links__label"><?php _e('Useful links', 'wp-optimize'); ?></span> | |
| 25 | - <?php $wp_optimize->wp_optimize_url('https://getwpo.com/', __('Home', 'wp-optimize')); ?> | | |
| 24 | + <span class="wpo-header-links__label"><?php esc_html_e('Useful links', 'wp-optimize'); ?></span> | |
| 25 | + <?php $wp_optimize->wp_optimize_url('https://teamupdraft.com/wp-optimize/', __('Home', 'wp-optimize')); ?> | | |
| 26 | 26 | |
| 27 | 27 | <?php $wp_optimize->wp_optimize_url('https://updraftplus.com/', 'UpdraftPlus'); ?> | |
| 28 | 28 | |
| 29 | 29 | <?php $wp_optimize->wp_optimize_url('https://updraftplus.com/news/', __('News', 'wp-optimize')); ?> | |
| @@ -35,10 +35,10 @@ | ||
| 35 | 35 | <?php $wp_optimize->wp_optimize_url('https://updraftplus.com/newsletter-signup', __('Newsletter', 'wp-optimize')); ?> | |
| 36 | 36 | |
| 37 | 37 | <?php $wp_optimize->wp_optimize_url('https://david.dw-perspective.org.uk', __("Team lead", 'wp-optimize')); ?> | |
| 38 | 38 | |
| 39 | - <?php $wp_optimize->wp_optimize_url('https://getwpo.com/faqs/', __("FAQs", 'wp-optimize')); ?> | | |
| 39 | + <?php $wp_optimize->wp_optimize_url('https://teamupdraft.com/documentation/wp-optimize/faqs/', __("FAQs", 'wp-optimize')); ?> | | |
| 40 | 40 | |
| 41 | - <?php $wp_optimize->wp_optimize_url('https://www.simbahosting.co.uk/s3/shop/', __("More plugins", 'wp-optimize')); ?> | |
| 41 | + <?php $wp_optimize->wp_optimize_url('https://www.simbahosting.co.uk/s3/shop/', __("More plugins", 'wp-optimize')); ?> | |
| 42 | 42 | </p> |
| 43 | 43 | |
| 44 | 44 | </div> |
