| @@ -17,9 +17,10 @@ | ||
| 17 | 17 | |
| 18 | 18 | $placeholder = wmvc_show_data('field_label', $field_data); |
| 19 | 19 | if(!empty(wmvc_show_data('placeholder', $field_data,''))) |
| 20 | 20 | $placeholder = wmvc_show_data('placeholder', $field_data); |
| 21 | - | |
| 21 | +// Dynamic field values are registered in the translation catalog separately. | |
| 22 | +// phpcs:ignore WordPress.WP.I18n.NonSingularStringLiteralText | |
| 22 | 23 | $placeholder = esc_html__($placeholder,'wpdirectorykit'); |
| 23 | 24 | $field_value = ''; |
| 24 | 25 | $query_type = wmvc_show_data('query_type', $field_data, ''); |
| 25 | 26 | |
| @@ -31,9 +32,9 @@ | ||
| 31 | 32 | $field_value = sanitize_text_field($predefinedfields_query[$field_key]); |
| 32 | 33 | } |
| 33 | 34 | |
| 34 | 35 | if(isset($_GET[$field_key])) { |
| 35 | - $field_value = sanitize_text_field($_GET[$field_key]); | |
| 36 | + $field_value = sanitize_text_field(wp_unslash($_GET[$field_key])); | |
| 36 | 37 | } |
| 37 | 38 | |
| 38 | 39 | $suffix = ''; |
| 39 | 40 | $prefix = ''; |
| @@ -57,9 +58,12 @@ | ||
| 57 | 58 | if(!empty(wmvc_show_data('values_list', $field_data)) && strpos(wmvc_show_data('values_list', $field_data), ',') !== FALSE){ |
| 58 | 59 | $values = explode(',', wmvc_show_data('values_list', $field_data)); |
| 59 | 60 | $values = array_combine($values, $values); |
| 60 | 61 | |
| 61 | - array_walk($values, function(&$item) use($clear_prefix, $clear_suffix) {$item = $clear_prefix.$item.$clear_suffix;}); | |
| 62 | + array_walk($values, function(&$item) use($clear_prefix, $clear_suffix, $field_data) { | |
| 63 | + $item = $clear_prefix.((wdk_field_option(wmvc_show_data('idfield',$field_data), 'is_price_format') && wdk_field_option(wmvc_show_data('idfield',$field_data), 'field_type') == 'NUMBER') ? wdk_number_format_i18n($item) : $item).$clear_suffix; | |
| 64 | + } | |
| 65 | + ); | |
| 62 | 66 | } |
| 63 | 67 | wdk_search_fields_toggle(); |
| 64 | 68 | ?> |
| 65 | 69 | |
| @@ -70,20 +74,23 @@ | ||
| 70 | 74 | psudo_<?php echo esc_attr(wmvc_show_data('field_type', $field_data)); ?> |
| 71 | 75 | DROPDOWN |
| 72 | 76 | <?php endif;?> |
| 73 | 77 | <?php echo esc_attr(wmvc_show_data('class', $field_data)); ?> |
| 74 | - wdk_field_id_<?php echo wmvc_show_data('idfield',$field_data);?>" | |
| 78 | + wdk_field_id_<?php echo esc_attr(wmvc_show_data('idfield',$field_data));?>" | |
| 75 | 79 | > |
| 76 | - <label class="wdk-field-label"><?php echo esc_html__(wmvc_show_data('field_label', $field_data),'wpdirectorykit'); ?></label> | |
| 80 | + <label class="wdk-field-label"><?php | |
| 81 | + // Dynamic field values are registered in the translation catalog separately. | |
| 82 | + // phpcs:ignore WordPress.WP.I18n.NonSingularStringLiteralText | |
| 83 | + echo esc_html__(wmvc_show_data('field_label', $field_data),'wpdirectorykit'); ?></label> | |
| 77 | 84 | <div class="wdk-field-group"> |
| 78 | 85 | <?php if(empty($values)):?> |
| 79 | 86 | <?php if($query_type == 'min_max'):?> |
| 80 | 87 | <div class="wdk-row min_max_row"> |
| 81 | 88 | <div class="wdk-col wdk-col-6"> |
| 82 | - <input class="wdk-control" name="<?php echo esc_attr($field_key.'_min'); ?>" type="number" id="<?php echo esc_attr($field_attr_id.'_min'); ?>" value="<?php echo (isset($_GET[$field_key.'_min'])) ? esc_attr(wmvc_xss_clean($_GET[$field_key.'_min'])) : ''; ?>" placeholder="<?php echo esc_html__('Min','wpdirectorykit').' '.esc_attr(trim($placeholder)).' '.esc_attr($prefix.$suffix);?>"> | |
| 89 | + <input class="wdk-control" name="<?php echo esc_attr($field_key.'_min'); ?>" type="number" id="<?php echo esc_attr($field_attr_id.'_min'); ?>" value="<?php echo (isset($_GET[$field_key.'_min'])) ? esc_attr(wmvc_xss_clean($_GET[$field_key.'_min'])) : ''; ?>" placeholder="<?php echo esc_attr__('Min','wpdirectorykit').' '.esc_attr(trim($placeholder)).' '.esc_attr($prefix.$suffix);?>"> | |
| 83 | 90 | </div> |
| 84 | 91 | <div class="wdk-col wdk-col-6"> |
| 85 | - <input class="wdk-control" name="<?php echo esc_attr($field_key.'_max'); ?>" type="number" id="<?php echo esc_attr($field_attr_id.'_max'); ?>" value="<?php echo (isset($_GET[$field_key.'_max'])) ? esc_attr(wmvc_xss_clean($_GET[$field_key.'_max'])) : ''; ?>" placeholder="<?php echo esc_html__('Max','wpdirectorykit').' '.esc_attr(trim($placeholder)).' '.esc_attr($prefix.$suffix);?>"> | |
| 92 | + <input class="wdk-control" name="<?php echo esc_attr($field_key.'_max'); ?>" type="number" id="<?php echo esc_attr($field_attr_id.'_max'); ?>" value="<?php echo (isset($_GET[$field_key.'_max'])) ? esc_attr(wmvc_xss_clean($_GET[$field_key.'_max'])) : ''; ?>" placeholder="<?php echo esc_attr__('Max','wpdirectorykit').' '.esc_attr(trim($placeholder)).' '.esc_attr($prefix.$suffix);?>"> | |
| 86 | 93 | </div> |
| 87 | 94 | </div> |
| 88 | 95 | <?php else:?> |
| 89 | 96 | <input class="wdk-control" name="<?php echo esc_attr($field_key); ?>" type="number" id="<?php echo esc_attr($field_attr_id); ?>" value="<?php echo esc_attr($field_value); ?>" placeholder="<?php echo esc_attr(trim($placeholder));?>"> |
| @@ -91,16 +98,77 @@ | ||
| 91 | 98 | <?php else:?> |
| 92 | 99 | <?php if($query_type == 'min_max'):?> |
| 93 | 100 | <div class="wdk-row min_max_row"> |
| 94 | 101 | <div class="wdk-col wdk-col-6"> |
| 95 | - <?php echo wmvc_select_option($field_key.'_min' , (array(''=> __('Min', 'wpdirectorykit').' '.$placeholder.$prefix.$suffix) + $values), (isset($_GET[$field_key.'_min'])) ? esc_attr($_GET[$field_key.'_min']) : '', 'class="wdk-control"'); ?> | |
| 102 | + <?php echo wp_kses( | |
| 103 | + wmvc_select_option( | |
| 104 | + $field_key.'_min', | |
| 105 | + (array(''=> __('Min', 'wpdirectorykit').' '.$placeholder.$prefix.$suffix) + $values), | |
| 106 | + (isset($_GET[$field_key.'_min'])) ? esc_attr($_GET[$field_key.'_min']) : '', | |
| 107 | + 'class="wdk-control"' | |
| 108 | + ), | |
| 109 | + [ | |
| 110 | + 'select' => [ | |
| 111 | + 'class' => true, | |
| 112 | + 'name' => true, | |
| 113 | + 'id' => true, | |
| 114 | + ], | |
| 115 | + 'option' => [ | |
| 116 | + 'value' => true, | |
| 117 | + 'selected' => true, | |
| 118 | + ], | |
| 119 | + ] | |
| 120 | + ); ?> | |
| 121 | + | |
| 96 | 122 | </div> |
| 97 | 123 | <div class="wdk-col wdk-col-6"> |
| 98 | - <?php echo wmvc_select_option($field_key.'_max', (array(''=> __('Max', 'wpdirectorykit').' '.$placeholder.$prefix.$suffix) + $values), (isset($_GET[$field_key.'_max'])) ? esc_attr($_GET[$field_key.'_max']) : '', 'class="wdk-control"'); ?> | |
| 124 | + <?php | |
| 125 | + echo wp_kses( | |
| 126 | + wmvc_select_option( | |
| 127 | + $field_key.'_max', | |
| 128 | + (array(''=> __('Max', 'wpdirectorykit').' '.$placeholder.$prefix.$suffix) + $values), | |
| 129 | + (isset($_GET[$field_key.'_max'])) ? esc_attr($_GET[$field_key.'_max']) : '', | |
| 130 | + 'class="wdk-control"' | |
| 131 | + ), | |
| 132 | + [ | |
| 133 | + 'select' => [ | |
| 134 | + 'class' => true, | |
| 135 | + 'name' => true, | |
| 136 | + 'id' => true, | |
| 137 | + ], | |
| 138 | + 'option' => [ | |
| 139 | + 'value' => true, | |
| 140 | + 'selected' => true, | |
| 141 | + ], | |
| 142 | + ] | |
| 143 | + ); | |
| 144 | + ?> | |
| 145 | + | |
| 99 | 146 | </div> |
| 100 | 147 | </div> |
| 101 | 148 | <?php else:?> |
| 102 | - <?php echo wmvc_select_option($field_key , (array(''=> $placeholder) + $values), $field_value, 'class="wdk-control"'); ?> | |
| 149 | + <?php | |
| 150 | + echo wp_kses( | |
| 151 | + wmvc_select_option( | |
| 152 | + $field_key, | |
| 153 | + (array(''=> $placeholder) + $values), | |
| 154 | + $field_value, | |
| 155 | + 'class="wdk-control"' | |
| 156 | + ), | |
| 157 | + [ | |
| 158 | + 'select' => [ | |
| 159 | + 'class' => true, | |
| 160 | + 'name' => true, | |
| 161 | + 'id' => true, | |
| 162 | + ], | |
| 163 | + 'option' => [ | |
| 164 | + 'value' => true, | |
| 165 | + 'selected' => true, | |
| 166 | + ], | |
| 167 | + ] | |
| 168 | + ); | |
| 169 | + ?> | |
| 170 | + | |
| 103 | 171 | <?php endif;?> |
| 104 | 172 | <?php endif;?> |
| 105 | 173 | </div> |
| 106 | 174 | </div> |
