| @@ -15,8 +15,10 @@ | ||
| 15 | 15 | $field_key = 'field_'.wmvc_show_data('idfield',$field_data); |
| 16 | 16 | $field_attr_id = 'wdk_field_'.wmvc_show_data('idfield', $field_data); |
| 17 | 17 | $placeholder = wmvc_show_data('field_label', $field_data); |
| 18 | 18 | $field_value = ''; |
| 19 | +// Dynamic field values are registered in the translation catalog separately. | |
| 20 | +// phpcs:ignore WordPress.WP.I18n.NonSingularStringLiteralText | |
| 19 | 21 | $placeholder = esc_html__($placeholder,'wpdirectorykit'); |
| 20 | 22 | $query_type = wmvc_show_data('query_type', $field_data, ''); |
| 21 | 23 | |
| 22 | 24 | if(isset($predefinedfields_query) && !empty($predefinedfields_query[$field_key])) { |
| @@ -23,9 +25,9 @@ | ||
| 23 | 25 | $field_value = sanitize_text_field($predefinedfields_query[$field_key]); |
| 24 | 26 | } |
| 25 | 27 | |
| 26 | 28 | if(isset($_GET[$field_key])) { |
| 27 | - $field_value = sanitize_text_field($_GET[$field_key]); | |
| 29 | + $field_value = sanitize_text_field(wp_unslash($_GET[$field_key])); | |
| 28 | 30 | } |
| 29 | 31 | |
| 30 | 32 | $suffix = ''; |
| 31 | 33 | $prefix = ''; |
