PluginProbe
WP Directory Kit / 1.5.9
WP Directory Kit v1.5.9
1.5.9 1.5.7 1.5.6 1.5.5 1.5.4 1.5.3 trunk 1.1.0 1.1.6 1.1.8 1.2.3 1.2.4 1.2.5 1.2.6 1.2.7 1.2.8 1.2.9 1.3.0 1.3.1 1.3.2 1.3.3 1.3.4 1.3.5 1.3.6 1.3.8 All 37 releases
← All changes | application/views/search_fields/DROPDOWN.php +20 -9 1.2.6 → 1.5.9 View file →
@@ -17,9 +17,11 @@
17 17
18 18 $placeholder = wmvc_show_data('field_label', $field_data);
19 19 if(!empty(wmvc_show_data('placeholder', $field_data,'')))
20 20 $placeholder = wmvc_show_data('placeholder', $field_data);
21 -
21 +
22 +// Dynamic field values are registered in the translation catalog separately.
23 +// phpcs:ignore WordPress.WP.I18n.NonSingularStringLiteralText
22 24 $placeholder = esc_html__($placeholder,'wpdirectorykit');
23 25 $field_value = '';
24 26
25 27 $query_type = wmvc_show_data('query_type', $field_data, '');
@@ -31,9 +33,9 @@
31 33 $field_value = sanitize_text_field($predefinedfields_query[$field_key]);
32 34 }
33 35
34 36 if(isset($_GET[$field_key])) {
35 - $field_value = sanitize_text_field($_GET[$field_key]);
37 + $field_value = sanitize_text_field(wp_unslash($_GET[$field_key]));
36 38 }
37 39
38 40 $suffix = '';
39 41 $prefix = '';
@@ -57,22 +59,31 @@
57 59 wdk_search_fields_toggle();
58 60 ?>
59 61
60 62 <div class="wdk-field wdk-col wdk_search_<?php echo esc_attr($field_key);?> <?php if($query_type == 'min_max'):?>min_max_wdk-field<?php endif;?> <?php echo esc_attr(wmvc_show_data('field_type', $field_data)); ?> <?php echo esc_attr(wmvc_show_data('class', $field_data)); ?>
61 - wdk_field_id_<?php echo wmvc_show_data('idfield',$field_data);?>">
62 - <label class="wdk-field-label"><?php echo esc_html__(wmvc_show_data('field_label', $field_data),'wpdirectorykit'); ?></label>
63 + wdk_field_id_<?php echo esc_attr(wmvc_show_data('idfield',$field_data));?>">
64 + <label class="wdk-field-label"><?php
65 + // Dynamic field values are registered in the translation catalog separately.
66 + // phpcs:ignore WordPress.WP.I18n.NonSingularStringLiteralText
67 + echo esc_html__(wmvc_show_data('field_label', $field_data),'wpdirectorykit'); ?></label>
63 68 <div class="wdk-field-group">
64 69 <?php if($query_type == 'min_max'):?>
65 70 <div class="wdk-row min_max_row">
66 - <div class="wdk-col-6">
67 - <?php echo wmvc_select_option($field_key.'_min' , (array(''=> __('Min', 'wpdirectorykit').' '.$placeholder) + $values), (isset($_GET[$field_key.'_min'])) ? esc_attr($_GET[$field_key.'_min']) : '', 'class="wdk-control"'); ?>
71 + <div class="wdk-col wdk-col-6">
72 + <?php
73 + // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped, WordPress.WP.I18n.NonSingularStringLiteralText
74 + echo wmvc_select_option($field_key.'_min' , (array(''=> __('Min', 'wpdirectorykit').' '.$placeholder) + $values), (isset($_GET[$field_key.'_min'])) ? esc_attr($_GET[$field_key.'_min']) : '', 'class="wdk-control"'); ?>
68 75 </div>
69 - <div class="wdk-col-6">
70 - <?php echo wmvc_select_option($field_key.'_max', (array(''=> __('Max', 'wpdirectorykit').' '.$placeholder) + $values), (isset($_GET[$field_key.'_max'])) ? esc_attr($_GET[$field_key.'_max']) : '', 'class="wdk-control"'); ?>
76 + <div class="wdk-col wdk-col-6">
77 + <?php
78 + // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped, WordPress.WP.I18n.NonSingularStringLiteralText
79 + echo wmvc_select_option($field_key.'_max', (array(''=> __('Max', 'wpdirectorykit').' '.$placeholder) + $values), (isset($_GET[$field_key.'_max'])) ? esc_attr($_GET[$field_key.'_max']) : '', 'class="wdk-control"'); ?>
71 80 </div>
72 81 </div>
73 82 <?php else:?>
74 - <?php echo wmvc_select_option($field_key , (array(''=> $placeholder) + $values), $field_value, 'class="wdk-control"'); ?>
83 + <?php
84 + // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped, WordPress.WP.I18n.NonSingularStringLiteralText
85 + echo wmvc_select_option($field_key , (array(''=> $placeholder) + $values), $field_value, 'class="wdk-control"'); ?>
75 86 <?php endif;?>
76 87 </div>
77 88 </div>
78 89