PluginProbe
WP Directory Kit / 1.5.9
WP Directory Kit v1.5.9
1.5.9 1.5.7 1.5.6 1.5.5 1.5.4 1.5.3 trunk 1.1.0 1.1.6 1.1.8 1.2.3 1.2.4 1.2.5 1.2.6 1.2.7 1.2.8 1.2.9 1.3.0 1.3.1 1.3.2 1.3.3 1.3.4 1.3.5 1.3.6 1.3.8 All 37 releases
← All changes | shortcodes/views/shortcode-wdk-listing-fields-section.php +3 -3 1.5.5 → 1.5.9 View file →
@@ -38,9 +38,9 @@
38 38 <?php echo esc_html(wmvc_show_data('field_layout', $settings));?> <?php echo esc_html(wmvc_show_data('field_type', $field));?>
39 39 ">
40 40 <?php if(wmvc_show_data('field_group_icon_enable', $settings) == 'yes' && wmvc_show_data('icon_id', $field, false)):?>
41 41 <span class="field_icon">
42 - <img src="<?php echo esc_url(wdk_image_src($field, 'full',NULL,'icon_id'));?>" alt="<?php echo wmvc_show_data('field_label', $value);?>" class="wdk-icon">
42 + <img src="<?php echo esc_url(wdk_image_src($field, 'full',NULL,'icon_id'));?>" alt="<?php echo esc_attr(wmvc_show_data('field_label', $value));?>" class="wdk-icon">
43 43 </span>
44 44 <?php endif;?>
45 45 <span class="field_label">
46 46 <?php echo esc_html(wmvc_show_data('label_prefix', $settings));?><?php echo esc_html(wmvc_show_data('field_label', $field));?><?php echo esc_html(wmvc_show_data('label_suffix', $settings));?>
@@ -108,13 +108,13 @@
108 108
109 109 /* price format implement */
110 110 if(function_exists('run_wdk_currency_conversion') && wdk_currencies_is_price_field(wmvc_show_data('idfield', $field))) {
111 111 /* if currency_conversion and field is price */
112 - $value = strip_tags(apply_filters( 'wpdirectorykit/listing/field/value', wdk_filter_decimal($field_value), wmvc_show_data('idfield', $field), FALSE));
112 + $value = wp_strip_all_tags(apply_filters( 'wpdirectorykit/listing/field/value', wdk_filter_decimal($field_value), wmvc_show_data('idfield', $field), FALSE));
113 113 $field_value = esc_html(wdk_number_format_i18n($value));
114 114 } elseif(wdk_field_option(wmvc_show_data('idfield', $field), 'is_price_format')) {
115 115 /* if field enabled is_price_format and field type is number*/
116 - $value = strip_tags(apply_filters( 'wpdirectorykit/listing/field/value', wdk_filter_decimal($field_value), wmvc_show_data('idfield', $field), FALSE));
116 + $value = wp_strip_all_tags(apply_filters( 'wpdirectorykit/listing/field/value', wdk_filter_decimal($field_value), wmvc_show_data('idfield', $field), FALSE));
117 117 $field_value = esc_html(wdk_number_format_i18n($value));
118 118 } else {
119 119 /* without number format */
120 120 $field_value = apply_filters( 'wpdirectorykit/listing/field/value', $field_value, wmvc_show_data('idfield', $field));