| @@ -24,9 +24,19 @@ | ||
| 24 | 24 | 'refresh_interval' => 0, |
| 25 | 25 | 'excerpt_length' => 55, |
| 26 | 26 | ]; |
| 27 | 27 | |
| 28 | +$allowed_orderby = [ 'created', 'modified' ]; | |
| 29 | +$allowed_order = [ 'DESC', 'ASC', 'RAND' ]; | |
| 30 | + | |
| 28 | 31 | $instance = wp_parse_args( $attributes, $default_instance ); |
| 32 | + | |
| 33 | +if( ! is_string( $instance['orderby'] ) || ! in_array( $instance['orderby'], $allowed_orderby, true ) ) { | |
| 34 | + $instance['orderby'] = $default_instance['orderby']; | |
| 35 | +} | |
| 36 | +if( ! is_string( $instance['order'] ) || ! in_array( $instance['order'], $allowed_order, true ) ) { | |
| 37 | + $instance['order'] = $default_instance['order']; | |
| 38 | +} | |
| 29 | 39 | |
| 30 | 40 | // wpForo Recent Posts widget logic |
| 31 | 41 | wp_enqueue_script( 'wpforo-widgets-js' ); |
| 32 | 42 | |
