| @@ -15,8 +15,10 @@ | ||
| 15 | 15 | $field_key = 'field_'.wmvc_show_data('idfield',$field_data); |
| 16 | 16 | $field_attr_id = 'wdk_field_'.wmvc_show_data('idfield', $field_data); |
| 17 | 17 | $placeholder = wmvc_show_data('field_label', $field_data); |
| 18 | 18 | $field_value = ''; |
| 19 | +// Dynamic field values are registered in the translation catalog separately. | |
| 20 | +// phpcs:ignore WordPress.WP.I18n.NonSingularStringLiteralText | |
| 19 | 21 | $placeholder = esc_html__($placeholder,'wpdirectorykit'); |
| 20 | 22 | $query_type = wmvc_show_data('query_type', $field_data, ''); |
| 21 | 23 | |
| 22 | 24 | if(isset($predefinedfields_query) && !empty($predefinedfields_query[$field_key])) { |
| @@ -23,9 +25,9 @@ | ||
| 23 | 25 | $field_value = sanitize_text_field($predefinedfields_query[$field_key]); |
| 24 | 26 | } |
| 25 | 27 | |
| 26 | 28 | if(isset($_GET[$field_key])) { |
| 27 | - $field_value = sanitize_text_field($_GET[$field_key]); | |
| 29 | + $field_value = sanitize_text_field(wp_unslash($_GET[$field_key])); | |
| 28 | 30 | } |
| 29 | 31 | |
| 30 | 32 | $suffix = ''; |
| 31 | 33 | $prefix = ''; |
| @@ -72,17 +74,17 @@ | ||
| 72 | 74 | |
| 73 | 75 | ?> |
| 74 | 76 | |
| 75 | 77 | <div class="wdk-field wdk-col wdk-slider-range-col wdk_search_<?php echo esc_attr($field_key);?> <?php if($query_type == 'min_max'):?>min_max_wdk-field<?php endif;?> <?php echo esc_attr(wmvc_show_data('field_type', $field_data)); ?> <?php echo esc_attr(wmvc_show_data('class', $field_data)); ?> |
| 76 | - wdk_field_id_<?php echo wmvc_show_data('idfield',$field_data);?>"> | |
| 78 | + wdk_field_id_<?php echo esc_attr(wmvc_show_data('idfield',$field_data));?>"> | |
| 77 | 79 | <label class="wdk-field-label"><?php echo esc_html(wmvc_show_data('field_label', $field_data)); ?></label> |
| 78 | 80 | <div class="wdk-field-group"> |
| 79 | 81 | <div class="wdk-slider-range-field"> |
| 80 | 82 | <div class="hidden config-range" |
| 81 | - data-min="<?php echo $min_value;?>" | |
| 82 | - data-max="<?php echo $max_value;?>" | |
| 83 | - data-sufix="<?php echo $suffix;?>" | |
| 84 | - data-prefix="<?php echo $prefix;?>" | |
| 83 | + data-min="<?php echo esc_attr($min_value);?>" | |
| 84 | + data-max="<?php echo esc_attr($max_value);?>" | |
| 85 | + data-sufix="<?php echo esc_attr($suffix);?>" | |
| 86 | + data-prefix="<?php echo esc_attr($prefix);?>" | |
| 85 | 87 | data-infinity="false" |
| 86 | 88 | data-predifinedMin="<?php echo (isset($_GET[$field_key.'_min'])) ? esc_attr($_GET[$field_key.'_min']) : ''; ?>" |
| 87 | 89 | data-predifinedMax="<?php echo (isset($_GET[$field_key.'_max'])) ? esc_attr($_GET[$field_key.'_max']) : ''; ?>" |
| 88 | 90 | > |
