| @@ -33,9 +33,9 @@ | ||
| 33 | 33 | <h3 class="title"> |
| 34 | 34 | <a href="<?php echo esc_url($url);?>"> |
| 35 | 35 | <?php foreach ($title_part as $key => $field):?> |
| 36 | 36 | <span> |
| 37 | - <?php echo wmvc_show_data('prefix', $field).wdk_filter_decimal(wmvc_show_data('value', $field)).wmvc_show_data('suffix', $field);?> | |
| 37 | + <?php echo esc_html(wmvc_show_data('prefix', $field).wdk_filter_decimal(wmvc_show_data('value', $field)).wmvc_show_data('suffix', $field));?> | |
| 38 | 38 | </span> |
| 39 | 39 | <?php endforeach;?> |
| 40 | 40 | </a> |
| 41 | 41 | </h3> |
| @@ -46,14 +46,14 @@ | ||
| 46 | 46 | <span> |
| 47 | 47 | <?php echo esc_html(apply_filters( 'wpdirectorykit/listing/field/prefix', wmvc_show_data('prefix', $field), wmvc_show_data('field_id', $field)));?> |
| 48 | 48 | <?php if(function_exists('run_wdk_currency_conversion') && wdk_field_option(wmvc_show_data('field_id', $field), 'field_type') == 'NUMBER'):?> |
| 49 | 49 | <?php |
| 50 | - $value = strip_tags(apply_filters( 'wpdirectorykit/listing/field/value', wdk_filter_decimal(wmvc_show_data('value', $field)), wmvc_show_data('field_id', $field), FALSE)); | |
| 50 | + $value = wp_strip_all_tags(apply_filters( 'wpdirectorykit/listing/field/value', wdk_filter_decimal(wmvc_show_data('value', $field)), wmvc_show_data('field_id', $field), FALSE)); | |
| 51 | 51 | echo esc_html(wdk_number_format_i18n($value)); |
| 52 | 52 | ?> |
| 53 | 53 | <?php else:?> |
| 54 | 54 | <?php |
| 55 | - $value = strip_tags(apply_filters( 'wpdirectorykit/listing/field/value', wdk_filter_decimal(wmvc_show_data('value', $field)), wmvc_show_data('field_id', $field), FALSE)); | |
| 55 | + $value = wp_strip_all_tags(apply_filters( 'wpdirectorykit/listing/field/value', wdk_filter_decimal(wmvc_show_data('value', $field)), wmvc_show_data('field_id', $field), FALSE)); | |
| 56 | 56 | echo esc_html(wdk_number_format_i18n($value)); |
| 57 | 57 | ?> |
| 58 | 58 | <?php endif;?> |
| 59 | 59 | <?php echo esc_html(apply_filters( 'wpdirectorykit/listing/field/suffix', wmvc_show_data('suffix', $field), wmvc_show_data('field_id', $field)));?> |