| @@ -1,5 +1,5 @@ | ||
| 1 | -<?php if (!defined('WPO_PLUGIN_MAIN_PATH')) die('No direct access allowed'); ?> | |
| 1 | +<?php if (!defined('ABSPATH')) die('No direct access allowed'); ?> | |
| 2 | 2 | |
| 3 | 3 | <?php if (!empty($button_meta) && 'review' == $button_meta) : ?> |
| 4 | 4 | |
| 5 | 5 | <div class="updraft-ad-container updated below-h2"> |
| @@ -4,26 +4,26 @@ | ||
| 4 | 4 | |
| 5 | 5 | <div class="updraft-ad-container updated below-h2"> |
| 6 | 6 | <div class="updraft_notice_container updraft_review_notice_container"> |
| 7 | 7 | <div class="updraft_advert_content_left_extra"> |
| 8 | - <img src="<?php echo WPO_PLUGIN_URL.'/images/'.$image;?>" width="85" alt="<?php _e('notice image', 'wp-optimize');?>" /> | |
| 8 | + <img src="<?php echo esc_url(WPO_PLUGIN_URL.'images/'.$image); // phpcs:ignore PluginCheck.CodeAnalysis.ImageFunctions.NonEnqueuedImage -- N/A ?>" width="85" alt="<?php esc_attr_e('notice image', 'wp-optimize');?>"> | |
| 9 | 9 | </div> |
| 10 | 10 | <div class="updraft_advert_content_right"> |
| 11 | 11 | <p> |
| 12 | - <?php echo $text; ?> | |
| 12 | + <?php echo wp_kses_post($text); ?> | |
| 13 | 13 | </p> |
| 14 | 14 | |
| 15 | 15 | <?php if (!empty($button_link)) { ?> |
| 16 | 16 | <div class="updraft_advert_button_container"> |
| 17 | - <a class="button button-primary" href="<?php esc_attr_e($button_link);?>" target="_blank" onclick="jQuery('.updraft-ad-container').slideUp(); jQuery.post(ajaxurl, {action: 'wp_optimize_ajax', subaction: '<?php echo $dismiss_time;?>', nonce: '<?php echo wp_create_nonce('wp-optimize-ajax-nonce');?>', dismiss_forever: '1' });"> | |
| 18 | - <?php _e('Ok, you deserve it', 'wp-optimize'); ?> | |
| 17 | + <a class="button button-primary" href="<?php echo esc_url($button_link);?>" target="_blank" onclick="jQuery('.updraft-ad-container').slideUp(); jQuery.post(ajaxurl, {action: 'wp_optimize_ajax', subaction: '<?php echo esc_js($dismiss_time);?>', nonce: '<?php echo esc_js(wp_create_nonce('wp-optimize-ajax-nonce'));?>', dismiss_forever: '1' });"> | |
| 18 | + <?php esc_html_e('Ok, you deserve it', 'wp-optimize'); ?> | |
| 19 | 19 | </a> |
| 20 | 20 | <div class="dashicons dashicons-calendar"></div> |
| 21 | - <a class="updraft_notice_link" href="#" onclick="jQuery('.updraft-ad-container').slideUp(); jQuery.post(ajaxurl, {action: 'wp_optimize_ajax', subaction: '<?php echo $dismiss_time;?>', nonce: '<?php echo wp_create_nonce('wp-optimize-ajax-nonce');?>', dismiss_forever: '0' });"> | |
| 22 | - <?php _e('Maybe later', 'wp-optimize'); ?> | |
| 21 | + <a class="updraft_notice_link" href="#" onclick="jQuery('.updraft-ad-container').slideUp(); jQuery.post(ajaxurl, {action: 'wp_optimize_ajax', subaction: '<?php echo esc_js($dismiss_time);?>', nonce: '<?php echo esc_js(wp_create_nonce('wp-optimize-ajax-nonce'));?>', dismiss_forever: '0' });"> | |
| 22 | + <?php esc_html_e('Maybe later', 'wp-optimize'); ?> | |
| 23 | 23 | </a> |
| 24 | 24 | <div class="dashicons dashicons-no-alt"></div> |
| 25 | - <a class="updraft_notice_link" href="#" onclick="jQuery('.updraft-ad-container').slideUp(); jQuery.post(ajaxurl, {action: 'wp_optimize_ajax', subaction: '<?php echo $dismiss_time;?>', nonce: '<?php echo wp_create_nonce('wp-optimize-ajax-nonce');?>', dismiss_forever: '1' });"><?php _e('Never', 'wp-optimize'); ?></a> | |
| 25 | + <a class="updraft_notice_link" href="#" onclick="jQuery('.updraft-ad-container').slideUp(); jQuery.post(ajaxurl, {action: 'wp_optimize_ajax', subaction: '<?php echo esc_js($dismiss_time);?>', nonce: '<?php echo esc_js(wp_create_nonce('wp-optimize-ajax-nonce'));?>', dismiss_forever: '1' });"><?php esc_html_e('Never', 'wp-optimize'); ?></a> | |
| 26 | 26 | </div> |
| 27 | 27 | <?php } ?> |
| 28 | 28 | </div> |
| 29 | 29 | </div> |
| @@ -34,49 +34,53 @@ | ||
| 34 | 34 | |
| 35 | 35 | <div class="updraft-ad-container updated below-h2"> |
| 36 | 36 | <div class="updraft_notice_container"> |
| 37 | 37 | <div class="updraft_advert_content_left"> |
| 38 | - <img src="<?php echo WPO_PLUGIN_URL.'/images/'.$image; ?>" width="60" height="60" alt="<?php _e('notice image', 'wp-optimize'); ?>" /> | |
| 38 | + <img src="<?php echo esc_url(WPO_PLUGIN_URL.'images/'.$image); // phpcs:ignore PluginCheck.CodeAnalysis.ImageFunctions.NonEnqueuedImage -- N/A ?>" width="60" height="60" alt="<?php esc_attr_e('notice image', 'wp-optimize'); ?>"> | |
| 39 | 39 | </div> |
| 40 | 40 | <div class="updraft_advert_content_right"> |
| 41 | 41 | <h3 class="updraft_advert_heading"> |
| 42 | 42 | <?php |
| 43 | - if (!empty($prefix)) echo $prefix.' '; | |
| 44 | - echo $title; | |
| 43 | + if (!empty($prefix)) echo esc_html($prefix).' '; | |
| 44 | + echo esc_html($title); | |
| 45 | 45 | ?> |
| 46 | 46 | <div class="updraft-advert-dismiss"> |
| 47 | 47 | <?php if (!empty($dismiss_time)) { ?> |
| 48 | - <a href="#" onclick="jQuery('.updraft-ad-container').slideUp(); jQuery.post(ajaxurl, {action: 'wp_optimize_ajax', subaction: '<?php echo $dismiss_time; ?>', nonce: '<?php echo wp_create_nonce('wp-optimize-ajax-nonce'); ?>' });"><?php _e('Dismiss', 'wp-optimize'); ?></a> | |
| 48 | + <a href="#" onclick="jQuery('.updraft-ad-container').slideUp(); jQuery.post(ajaxurl, {action: 'wp_optimize_ajax', subaction: '<?php echo esc_js($dismiss_time); ?>', nonce: '<?php echo esc_js(wp_create_nonce('wp-optimize-ajax-nonce')); ?>' });"><?php esc_html_e('Dismiss', 'wp-optimize'); ?></a> | |
| 49 | 49 | <?php } else { ?> |
| 50 | - <a href="#" onclick="jQuery('.updraft-ad-container').slideUp();"><?php _e('Dismiss', 'wp-optimize'); ?></a> | |
| 50 | + <a href="#" onclick="jQuery('.updraft-ad-container').slideUp();"><?php esc_html_e('Dismiss', 'wp-optimize'); ?></a> | |
| 51 | 51 | <?php } ?> |
| 52 | 52 | </div> |
| 53 | 53 | </h3> |
| 54 | 54 | <p> |
| 55 | 55 | <?php |
| 56 | - echo $text; | |
| 56 | + echo wp_kses_post($text); | |
| 57 | 57 | $button_text = ''; |
| 58 | - if (isset($discount_code)) echo ' <b>' . $discount_code . '</b>'; | |
| 58 | + if (isset($discount_code)) echo ' <b>' . esc_html($discount_code) . '</b>'; | |
| 59 | 59 | |
| 60 | - if (!empty($button_link) && !empty($button_meta)) { | |
| 60 | + if (!empty($button_link) && !empty($button_meta) && 'no-button' !== $button_meta) { | |
| 61 | 61 | // Check which Message is going to be used. |
| 62 | - if ('updraftcentral' == $button_meta) { | |
| 62 | + if ('updraftcentral' === $button_meta) { | |
| 63 | 63 | $button_text = __('Get UpdraftCentral', 'wp-optimize'); |
| 64 | - } elseif ('updraftplus' == $button_meta) { | |
| 64 | + } elseif ('updraftplus' === $button_meta) { | |
| 65 | 65 | $button_text = __('Get UpdraftPlus', 'wp-optimize'); |
| 66 | - } elseif ('signup' == $button_meta) { | |
| 66 | + } elseif ('aios' === $button_meta) { | |
| 67 | + $button_text = __('Get AIOS', 'wp-optimize'); | |
| 68 | + } elseif ('signup' === $button_meta) { | |
| 67 | 69 | $button_text = __('Sign up', 'wp-optimize'); |
| 68 | - } elseif ('go_there' == $button_meta) { | |
| 70 | + } elseif ('go_there' === $button_meta) { | |
| 69 | 71 | $button_text = __('Go there', 'wp-optimize'); |
| 70 | - } elseif ('wpo-premium' == $button_meta) { | |
| 72 | + } elseif ('wpo-premium' === $button_meta) { | |
| 71 | 73 | $button_text = __('Find out more.', 'wp-optimize'); |
| 72 | - } elseif ('wp-optimize' == $button_meta) { | |
| 74 | + } elseif ('wp-optimize' === $button_meta) { | |
| 73 | 75 | $button_text = __('Find out more.', 'wp-optimize'); |
| 74 | - } elseif ('collection' == $button_meta) { | |
| 76 | + } elseif ('collection' === $button_meta) { | |
| 75 | 77 | $button_text = __('Read more.', 'wp-optimize'); |
| 78 | + } elseif ('translate' === $button_meta) { | |
| 79 | + $button_text = __('Translate', 'wp-optimize'); | |
| 76 | 80 | } |
| 77 | 81 | $wp_optimize->wp_optimize_url($button_link, $button_text, null, 'class="updraft_notice_link"'); |
| 78 | - } | |
| 82 | + } | |
| 79 | 83 | ?> |
| 80 | 84 | </p> |
| 81 | 85 | </div> |
| 82 | 86 | </div> |
