| @@ -17,8 +17,10 @@ | ||
| 17 | 17 | $placeholder = wmvc_show_data('field_label', $field_data); |
| 18 | 18 | if(!empty(wmvc_show_data('placeholder', $field_data,''))) |
| 19 | 19 | $placeholder = wmvc_show_data('placeholder', $field_data); |
| 20 | 20 | |
| 21 | +// Dynamic field values are registered in the translation catalog separately. | |
| 22 | +// phpcs:ignore WordPress.WP.I18n.NonSingularStringLiteralText | |
| 21 | 23 | $placeholder = esc_html__($placeholder,'wpdirectorykit'); |
| 22 | 24 | |
| 23 | 25 | $field_value = ''; |
| 24 | 26 | |
| @@ -31,9 +33,9 @@ | ||
| 31 | 33 | $field_value = sanitize_text_field($predefinedfields_query[$field_key]); |
| 32 | 34 | } |
| 33 | 35 | |
| 34 | 36 | if(isset($_GET[$field_key])) { |
| 35 | - $field_value = sanitize_text_field($_GET[$field_key]); | |
| 37 | + $field_value = sanitize_text_field(wp_unslash($_GET[$field_key])); | |
| 36 | 38 | } elseif($field_key == 'field_search') { |
| 37 | 39 | if(function_exists('run_wdk_geo') && (get_option('wdk_geo_autodetect_by_ip_enable') && !get_option('wdk_geo_autodetect_by_google_js_enable'))) { |
| 38 | 40 | $user_locations = wdk_geo_get_locations(); |
| 39 | 41 | if(!empty($user_locations) && !wdk_geo_get_location_id()) { |
| @@ -51,21 +53,30 @@ | ||
| 51 | 53 | wdk_search_fields_toggle(); |
| 52 | 54 | ?> |
| 53 | 55 | |
| 54 | 56 | <div class="wdk-field wdk-col wdk_search_<?php echo esc_attr($field_key);?> <?php if($query_type == 'min_max'):?>min_max_wdk-field<?php endif;?> <?php echo esc_attr(wmvc_show_data('field_type', $field_data)); ?> <?php echo esc_attr(wmvc_show_data('class', $field_data)); ?> |
| 55 | - wdk_field_id_<?php echo wmvc_show_data('idfield',$field_data);?>"> | |
| 56 | - <label class="wdk-field-label"><?php echo esc_html__(wmvc_show_data('field_label', $field_data),'wpdirectorykit'); ?></label> | |
| 57 | + wdk_field_id_<?php echo esc_attr(wmvc_show_data('idfield',$field_data));?>"> | |
| 58 | + <label class="wdk-field-label"><?php | |
| 59 | + // Dynamic field values are registered in the translation catalog separately. | |
| 60 | + // phpcs:ignore WordPress.WP.I18n.NonSingularStringLiteralText | |
| 61 | + echo esc_html__(wmvc_show_data('field_label', $field_data),'wpdirectorykit'); ?></label> | |
| 57 | 62 | <div class="wdk-field-group"> |
| 58 | 63 | <?php if($query_type == 'min_max'):?> |
| 59 | 64 | <div class="wdk-row min_max_row"> |
| 60 | 65 | <div class="wdk-col wdk-col-6"> |
| 61 | - <input class="wdk-control" name="<?php echo esc_attr($field_key.'_min'); ?>" type="text" id="<?php echo esc_attr($field_attr_id.'_min'); ?>" value="<?php echo (isset($_GET[$field_key.'_min'])) ? esc_attr($_GET[$field_key.'_min']) : ''; ?>" placeholder="<?php echo esc_html__('Min','wpdirectorykit').' '.esc_attr(trim($placeholder));?>"> | |
| 66 | + <input class="wdk-control" name="<?php echo esc_attr($field_key.'_min'); ?>" type="text" id="<?php echo esc_attr($field_attr_id.'_min'); ?>" value="<?php echo (isset($_GET[$field_key.'_min'])) ? esc_attr($_GET[$field_key.'_min']) : ''; ?>" placeholder="<?php echo esc_attr__('Min','wpdirectorykit').' '.esc_attr(trim($placeholder));?>"> | |
| 62 | 67 | </div> |
| 63 | 68 | <div class="wdk-col wdk-col-6"> |
| 64 | - <input class="wdk-control" name="<?php echo esc_attr($field_key.'_max'); ?>" type="text" id="<?php echo esc_attr($field_attr_id.'_max'); ?>" value="<?php echo (isset($_GET[$field_key.'_max'])) ? esc_attr($_GET[$field_key.'_max']) : ''; ?>" placeholder="<?php echo esc_html__('Max','wpdirectorykit').' '.esc_attr(trim($placeholder));?>"> | |
| 69 | + <input class="wdk-control" name="<?php echo esc_attr($field_key.'_max'); ?>" type="text" id="<?php echo esc_attr($field_attr_id.'_max'); ?>" value="<?php echo (isset($_GET[$field_key.'_max'])) ? esc_attr($_GET[$field_key.'_max']) : ''; ?>" placeholder="<?php echo esc_attr__('Max','wpdirectorykit').' '.esc_attr(trim($placeholder));?>"> | |
| 65 | 70 | </div> |
| 66 | 71 | </div> |
| 67 | 72 | <?php else:?> |
| 68 | - <input class="wdk-control" name="<?php echo esc_attr($field_key); ?>" type="text" id="<?php echo esc_attr($field_attr_id); ?>" value="<?php echo esc_attr($field_value); ?>" placeholder="<?php echo esc_attr(trim($placeholder));?>"> | |
| 73 | + <?php if(wmvc_show_data('is_select_2_ajax_field_db_suggestion',$field_data)):?> | |
| 74 | + <?php | |
| 75 | + // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped, WordPress.WP.I18n.NonSingularStringLiteralText | |
| 76 | + echo wdk_select_db_field_ajax($field_key, NULL, $placeholder, wmvc_show_data('idfield',$field_data));?> | |
| 77 | + <?php else:?> | |
| 78 | + <input class="wdk-control" name="<?php echo esc_attr($field_key); ?>" type="text" id="<?php echo esc_attr($field_attr_id); ?>" value="<?php echo esc_attr($field_value); ?>" placeholder="<?php echo esc_attr(trim($placeholder));?>"> | |
| 79 | + <?php endif;?> | |
| 69 | 80 | <?php endif;?> |
| 70 | 81 | </div> |
| 71 | 82 | </div> |
