PluginProbe
School Management System – WPSchoolPress / trunk
School Management System – WPSchoolPress vtrunk
2.2.48 2.2.47 2.2.46 2.2.45 2.2.44 2.2.43 2.2.42 2.2.41 2.2.40 2.2.39 2.2.38 1.1.2 1.1.3 1.1.4 1.1.5 1.1.6 1.1.7 1.1.8 1.1.9 2.0.0 2.0.1 2.0.10 2.0.11 2.0.12 2.0.13 All 103 releases
← All changes | wpsp-layout.php +130 -99 2.2.38 → trunk View file →
@@ -92,9 +92,9 @@
92 92 <span class='wpsp-schoolname'><?php echo esc_html($schoolname,'wpschoolpress');?></span>
93 93 </a>
94 94 <div class="wpsp-head">
95 95 <div class="wpsp-menuIcon"><span></span></div>
96 - <h3 class="wpsp-customeMsg"><?php echo esc_html(" “Live as if you were to die tomorrow. Learn as if you were to live forever.” ","wpschoolpress");?></h3>
96 + <h3 class="wpsp-customeMsg"><?php echo esc_html(" \u{201c}Live as if you were to die tomorrow. Learn as if you were to live forever.\u{201d} ","wpschoolpress");?></h3>
97 97 <div class="wpsp-righthead">
98 98 <div class="wpsp-head-action"></div>
99 99 <div class="wpsp-userMain wpsp-dropdownmain ">
100 100 <div class="wpsp-profile-pic wpsp-dropdown-toggle">
@@ -126,9 +126,10 @@
126 126 $prohistory = wpsp_check_pro_version('wpsp_mc_version');
127 127 $prodisablehistory = !$prohistory['status'] ? 'notinstalled' : 'installed';
128 128 $promessage = wpsp_check_pro_version('wpsp_message_version');
129 129 $prodisablemessage = !$promessage['status'] ? 'notinstalled' : 'installed';
130 - $propayment = wpsp_check_pro_version('pay_WooCommerce');
130 + $propayment_gate_class = apply_filters('wpsp_payment_addon_gate_class', 'pay_WooCommerce');
131 + $propayment = wpsp_check_pro_version($propayment_gate_class);
131 132 $propayment = !$propayment['status'] ? 'notinstalled' : 'installed';
132 133
133 134 $prosocial = wpsp_check_pro_version('wpsp_sm_version');
134 135 $prosocial = !$prosocial['status'] ? 'notinstalled' : 'installed';
@@ -235,8 +236,14 @@
235 236 break;
236 237 case 'question':
237 238 $question_page = 'active';
238 239 break;
240 + case 'addons':
241 + $addons_page = 'active';
242 + break;
243 + case 'customization':
244 + $customization_page = 'active';
245 + break;
239 246 }
240 247
241 248
242 249
@@ -281,9 +288,9 @@
281 288 <ul class='wpsp-navigation'>
282 289 <li class='".esc_attr($dashboard_page)."'>
283 290 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-dashboard'))."'>
284 291 <i class='dashicons dashicons-dashboard icon'></i>
285 - <span>".$sch_dashboard."</span>
292 + <span>".esc_html($sch_dashboard)."</span>
286 293 </a>
287 294 </li>";
288 295 if($prosocial == 'installed'){
289 296 if($current_user_role=='administrator' || $current_user_role=='teacher'){
@@ -288,33 +295,33 @@
288 295 if($prosocial == 'installed'){
289 296 if($current_user_role=='administrator' || $current_user_role=='teacher'){
290 297 echo "<li class='has-submenu ".((isset($posts_page_main) ? esc_html($posts_page_main,'wpschoolpress') : ''))."'>
291 298
292 - <a href='".site_url('wp-admin/admin.php?page=sch-posts')."'>
299 + <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-posts'))."'>
293 300
294 301 <i class='dashicons dashicons-admin-post'></i>
295 302
296 - <span>".esc_html($sch_posts,'wpschoolpress')."</span>
303 + <span>".esc_html($sch_posts)."</span>
297 304
298 305 </a>
299 306
300 307 <ul class='sub-menu'>
301 308
302 - <li class='".$posts_page."'><a href='".site_url('wp-admin/admin.php?page=sch-posts')."'>
309 + <li class='".esc_attr($posts_page)."'><a href='".esc_url(site_url('wp-admin/admin.php?page=sch-posts'))."'>
303 310
304 - <span>".$sch_posts."</span>
311 + <span>".esc_html($sch_posts)."</span>
305 312
306 313 </a></li>
307 314
308 - <li class='".$posts_profile_page."'><a href='".site_url('wp-admin/admin.php?page=sch-postsprofile')."'>
315 + <li class='".esc_attr($posts_profile_page)."'><a href='".esc_url(site_url('wp-admin/admin.php?page=sch-postsprofile'))."'>
309 316
310 - <span>".$sch_posts_profile."</span>
317 + <span>".esc_html($sch_posts_profile)."</span>
311 318
312 319 </a></li>";
313 320 if($current_user_role=='administrator'){
314 - echo "<li class='".$posts_reported_page."'><a href='".site_url('wp-admin/admin.php?page=sch-reported-posts')."'>
321 + echo "<li class='".esc_attr($posts_reported_page)."'><a href='".esc_url(site_url('wp-admin/admin.php?page=sch-reported-posts'))."'>
315 322
316 - <span>".$sch_reported_posts."</span>
323 + <span>".esc_html($sch_reported_posts)."</span>
317 324
318 325 </a></li>";
319 326 }
320 327 // echo "<li class='".$documents_page."'><a href='".site_url('wp-admin/admin.php?page=sch-documents')."'>
@@ -332,9 +339,9 @@
332 339 if($prodisablemessage == 'installed'){
333 340 echo "<li class=".esc_attr($message_page).">
334 341 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-messages'))."'>
335 342 <i class='dashicons dashicons-email icon'></i>
336 - <span>".$sch_message."</span><span class='pull-right label label-primary pull-right'></span>
343 + <span>".esc_html($sch_message)."</span><span class='pull-right label label-primary pull-right'></span>
337 344 </a>
338 345 </li>";
339 346 }
340 347
@@ -340,15 +347,15 @@
340 347
341 348 echo "<li class='".esc_attr($teacher_page)."'>
342 349 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-teacher'))."'>
343 350 <i class='dashicons dashicons-businessman icon'></i>
344 - <span>".$sch_teacher."</span>
351 + <span>".esc_html($sch_teacher)."</span>
345 352 </a>
346 353 </li>
347 354 <li class='".esc_attr($student_page)."'>
348 355 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-student'))."'>
349 356 <i class='dashicons dashicons-id icon'></i>
350 - <span>".$sch_student."</span>
357 + <span>".esc_html($sch_student)."</span>
351 358 </a>
352 359 </li>";
353 360 if($current_user_role == 'administrator'){
354 361 if($proversion1['status']){
@@ -354,9 +361,9 @@
354 361 if($proversion1['status']){
355 362 echo "<li class='".esc_attr((isset($request_page) ? $request_page : '')) ."'>
356 363 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-request'))."'>
357 364 <i class='dashicons dashicons-welcome-write-blog icon'></i>
358 - <span>".$sch_registration."</span>
365 + <span>".esc_html($sch_registration)."</span>
359 366 </a></li>";
360 367 }
361 368 }
362 369 echo "<li class='".esc_attr($parent_page)."'>
@@ -361,47 +368,48 @@
361 368 }
362 369 echo "<li class='".esc_attr($parent_page)."'>
363 370 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-parent'))."'>
364 371 <i class='dashicons dashicons-groups icon'></i>
365 - <span>".$sch_parent."</span>
372 + <span>".esc_html($sch_parent)."</span>
366 373 </a>
367 374 </li>
368 375 <li class='has-submenu ".((isset($class_page_our)? esc_attr($class_page_our) : ''))."'>
369 376 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-class'))."'>
370 377 <i class='dashicons dashicons-welcome-widgets-menus icon'></i>
371 - <span>".$sch_classes."</span>
378 + <span>".esc_html($sch_classes)."</span>
372 379 </a>
373 380 <ul class='sub-menu'>
374 381 <li class='".esc_attr($class_page)."'>
375 382 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-class'))."'>
376 - <span>".$sch_classes."</span>
383 + <span>".esc_html($sch_classes)."</span>
377 384 </a>
378 385 </li>
379 386 <li class='".esc_attr($subject_page)."'>
380 387 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-subject'))."'>
381 - <span>".$sch_subject."</span>
388 + <span>".esc_html($sch_subject)."</span>
382 389 </a>
383 390 </li>";
391 + do_action('wpsp_register_addon_menus');
384 392
385 393 if($current_user_role=='administrator'){
386 394 echo "<li class='".esc_attr($settings_subfield_page)."'>
387 - <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-settings&sc=subField'))."'>".$sch_subject_mark_field."</a>
395 + <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-settings&sc=subField'))."'>".esc_html($sch_subject_mark_field)."</a>
388 396 </li>";
389 397 }
390 398
391 399 echo "<li class='".esc_attr($mark_page)."'>
392 400 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-marks'))."'>
393 - <span>".$sch_marks."</span>
401 + <span>".esc_html($sch_marks)."</span>
394 402 </a>
395 403 </li>
396 404 <li class='".esc_attr($exam_page)."'>
397 405 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-exams'))."'>
398 - <span>".$sch_exams."</span>
406 + <span>".esc_html($sch_exams)."</span>
399 407 </a>
400 408 </li>
401 409 <li class='".esc_attr($timetable_page)."'>
402 410 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-timetable'))."'>
403 - <span>".$sch_timetable."</span>
411 + <span>".esc_html($sch_timetable)."</span>
404 412 </a>
405 413 </li>
406 414 </ul>
407 415 </li>";
@@ -408,19 +416,19 @@
408 416 if($prolms1 == 'installed'){
409 417 echo "<li class='has-submenu'>
410 418 <a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-attendance')) . "'>
411 419 <i class='dashicons dashicons-clipboard icon'></i>
412 - <span>" . $sch_lms . "</span>
420 + <span>" . esc_html($sch_lms) . "</span>
413 421 </a>
414 422 <ul class='sub-menu'>
415 423 <li class='" . esc_attr($lesson_page) . "'><a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-lessons')) . "'>
416 - <span>" . $sch_lesson . "</span>
424 + <span>" . esc_html($sch_lesson) . "</span>
417 425 </a></li>
418 426 <li class='" . esc_attr($quiz_page) . "'><a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-quizzes')) . "'>
419 - <span>" . $sch_quiz . "</span>
427 + <span>" . esc_html($sch_quiz) . "</span>
420 428 </a></li>
421 429 <li class='" . esc_attr($question_page) . "'><a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-questions')) . "'>
422 - <span>" . $sch_question . "</span>
430 + <span>" . esc_html($sch_question) . "</span>
423 431 </a></li>
424 432 </ul>
425 433 </li>";
426 434 }
@@ -426,18 +434,18 @@
426 434 }
427 435 echo "<li class='has-submenu ".((isset($attendance_page_main)? esc_attr($attendance_page_main) : ''))."'>
428 436 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-attendance'))."'>
429 437 <i class='dashicons dashicons-clipboard icon'></i>
430 - <span>".$sch_attendance."</span>
438 + <span>".esc_html($sch_attendance)."</span>
431 439 </a>
432 440 <ul class='sub-menu'>
433 441 <li class='".esc_attr($attendance_page)."'><a href='".esc_url(site_url('wp-admin/admin.php?page=sch-attendance'))."'>
434 - <span>".$sch_student_attendance."</span>
442 + <span>".esc_html($sch_student_attendance)."</span>
435 443 </a></li>";
436 444 if($current_user_role=='administrator' || $current_user_role=='teacher'){
437 445 echo "<li class='".esc_attr($teacher_attendance_page)."'>
438 446 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-teacherattendance'))."'>
439 - <span>".$sch_teacher_attendance."</span>
447 + <span>".esc_html($sch_teacher_attendance)."</span>
440 448 </a>
441 449 </li>";
442 450 }
443 451 echo "</ul>
@@ -443,9 +451,9 @@
443 451 echo "</ul>
444 452 </li>
445 453 <li class='".esc_attr($event_page)."'>
446 454 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-events'))."'>
447 - <i class='dashicons dashicons-calendar-alt icon'></i><span>".$sch_events."</span>
455 + <i class='dashicons dashicons-calendar-alt icon'></i><span>".esc_html($sch_events)."</span>
448 456 </a>
449 457 </li>
450 458 ";
451 459 if($current_user_role=='administrator' || $current_user_role=='teacher') {
@@ -451,40 +459,40 @@
451 459 if($current_user_role=='administrator' || $current_user_role=='teacher') {
452 460 echo "
453 461 <li class='".esc_attr($notify_page)."'>
454 462 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-notify'))."'>
455 - <i class='icon wpsp-notify'></i><span>".$sch_notfiy."</span>
463 + <i class='icon wpsp-notify'></i><span>".esc_html($sch_notfiy)."</span>
456 464 </a>
457 465 </li>";
458 466 }
459 467 echo "<li class='".esc_attr($transport_page)."'>
460 468 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-transport'))."'>
461 - <i class='icon wpsp-school-bus'></i><span>".$sch_transport."</span>
469 + <i class='icon wpsp-school-bus'></i><span>".esc_html($sch_transport)."</span>
462 470 </a>
463 471 </li>";
464 472 echo "<li class='has-submenu ".((isset($settings_page_main)? esc_attr($settings_page_main) : '' ))."'>
465 473 <a href='#'>
466 474 <i class='dashicons dashicons-admin-generic'></i>
467 - <span>".$sch_gen_setting."</span>
475 + <span>".esc_html($sch_gen_setting)."</span>
468 476 </a>
469 477 <ul class='sub-menu'>";
470 478 if($current_user_role=='administrator'){
471 479 echo "<li class='".esc_attr($settings_general_page)."'>
472 480 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-settings'))."'>
473 - <span>".$sch_setting."</span></a>
481 + <span>".esc_html($sch_setting)."</span></a>
474 482 </li>";
475 483 echo "<li class='".esc_attr($settings_wrkhours_page)."'>
476 484 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-settings&sc=WrkHours'))."'>
477 - <span>".$sch_workinghours."</span></a>
485 + <span>".esc_html($sch_workinghours)."</span></a>
478 486 </li>";
479 487 }
480 - echo "<li class='".$leave_page."'>
488 + echo "<li class='".esc_attr($leave_page)."'>
481 489 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-leavecalendar'))."'>
482 - <span>".$sch_leavecalendar."</span></a></li>";
490 + <span>".esc_html($sch_leavecalendar)."</span></a></li>";
483 491 if($current_user_role=='administrator' || $current_user_role=='teacher') {
484 492 echo "<li class='" . esc_attr($import_page) . "'>
485 493 <a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-importhistory')) . "'>
486 - <span>". $sch_import_history . "</span>
494 + <span>". esc_html($sch_import_history) . "</span>
487 495 </a>
488 496 </li>
489 497 ";
490 498 }
@@ -490,8 +498,23 @@
490 498 }
491 499 echo "</ul>
492 500 </li>";
493 501
502 + if ( $current_user_role === 'administrator' || $current_user_role === 'teacher') {
503 + echo "<li class='" . esc_attr( isset( $addons_page ) ? $addons_page : '' ) . "'>
504 + <a href='" . esc_url( site_url( 'wp-admin/admin.php?page=sch-addons' ) ) . "'>
505 + <i class='dashicons dashicons-welcome-add-page icon'></i>
506 + <span>" . esc_html($sch_addons) . "</span>
507 + </a>
508 + </li>
509 + <li class='" . esc_attr( isset( $customization_page ) ? $customization_page : '' ) . "'>
510 + <a href='" . esc_url( site_url( 'wp-admin/admin.php?page=sch-customization' ) ) . "'>
511 + <i class='fa fa-pencil-square-o icon'></i>
512 + <span>" . esc_html($sch_customization) . "</span>
513 + </a>
514 + </li>";
515 + }
516 +
494 517 echo "</ul>
495 518 </div>
496 519 </aside>";
497 520 } elseif($current_user_role=='student'){
@@ -615,24 +638,24 @@
615 638 <ul class='wpsp-navigation'>
616 639 <li class='".esc_attr($dashboard_page)."'>
617 640 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-dashboard'))."'>
618 641 <i class='dashicons dashicons-dashboard icon'></i>
619 - <span>".$sch_dashboard."</span>
642 + <span>".esc_html($sch_dashboard)."</span>
620 643 </a>
621 644 </li>";
622 645 if($prosocial == 'installed'){
623 - echo "<li class='has-submenu ".((isset($posts_page_main)? $posts_page_main : ''))."'>
624 - <a href='".site_url('wp-admin/admin.php?page=sch-posts')."'>
646 + echo "<li class='has-submenu ".((isset($posts_page_main)? esc_attr($posts_page_main) : ''))."'>
647 + <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-posts'))."'>
625 648 <i class='dashicons dashicons-admin-post'></i>
626 - <span>".$sch_posts."</span>
649 + <span>".esc_html($sch_posts)."</span>
627 650 </a>
628 651 <ul class='sub-menu'>
629 - <li class='".$posts_page."'><a href='".site_url('wp-admin/admin.php?page=sch-posts')."'>
630 - <span>".$sch_posts."</span>
652 + <li class='".esc_attr($posts_page)."'><a href='".esc_url(site_url('wp-admin/admin.php?page=sch-posts'))."'>
653 + <span>".esc_html($sch_posts)."</span>
631 654 </a>
632 655 </li>
633 - <li class='".$posts_profile_page."'><a href='".site_url('wp-admin/admin.php?page=sch-postsprofile')."'>
634 - <span>".$sch_posts_profile."</span>
656 + <li class='".esc_attr($posts_profile_page)."'><a href='".esc_url(site_url('wp-admin/admin.php?page=sch-postsprofile'))."'>
657 + <span>".esc_html($sch_posts_profile)."</span>
635 658 </a>
636 659 </li>
637 660 </ul>
638 661 </li>";
@@ -640,9 +663,9 @@
640 663 if($prodisablemessage == 'installed'){
641 664 echo "<li class=".esc_attr($message_page).">
642 665 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-messages'))."'>
643 666 <i class='dashicons dashicons-email icon'></i>
644 - <span>".$sch_message."</span><span class='pull-right label label-primary pull-right'></span>
667 + <span>".esc_html($sch_message)."</span><span class='pull-right label label-primary pull-right'></span>
645 668 </a>
646 669 </li>";
647 670 }
648 671 echo "
@@ -648,14 +671,14 @@
648 671 echo "
649 672 <li class='".esc_attr($parent_page)."'>
650 673 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-parent'))."'>
651 674 <i class='dashicons dashicons-groups icon'></i>
652 - <span>". $sch_parent."</span>
675 + <span>". esc_html($sch_parent)."</span>
653 676 </a>
654 677 </li>
655 678 <li class='has-submenu".esc_attr($class_innercls1)."'>
656 679 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-class'))."'>
657 - <i class='dashicons dashicons-welcome-widgets-menus icon'></i><span>".$sch_enrolled_class."</span>
680 + <i class='dashicons dashicons-welcome-widgets-menus icon'></i><span>".esc_html($sch_enrolled_class)."</span>
658 681 </a>";
659 682 if (is_numeric($wpsp_classes[0]->class_id)){
660 683 $classIDArray[] = $wpsp_classes[0]->class_id;
661 684 }else{
@@ -689,9 +712,9 @@
689 712 if($getid == base64_decode(stripslashes($id))){
690 713 $timetable_page = 'active';
691 714 }
692 715 if($clsgetid != 0){
693 - echo "<ul class='sub-menu has-submenu hehehe".((isset($nonemenu) ? $nonemenu : ''))." '>";
716 + echo "<ul class='sub-menu has-submenu hehehe".((isset($nonemenu) ? esc_attr($nonemenu) : ''))." '>";
694 717 if(trim($clsgetid) == trim($getid)){
695 718 echo "<li class='has-submenu active'>";
696 719 } else {
697 720 echo "<li class='has-submenu'>";
@@ -701,44 +724,45 @@
701 724 </a>
702 725 <ul class='sub-menu'>
703 726 <li class='".esc_attr($timetable_page)."'>
704 727 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-timetable&cid=').esc_attr($id))."'>
705 - <span>".$sch_timetable."</span>
728 + <span>".esc_html($sch_timetable)."</span>
706 729 </a>
707 730 </li>
708 731 <li class='".esc_attr($teacher_page)."'>
709 732 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-teacher&cid=').esc_attr($id))."'>
710 - <span>".$sch_teacher."</span>
733 + <span>".esc_html($sch_teacher)."</span>
711 734 </a>
712 735 </li>
713 736 <li class='".esc_attr($student_page)."'>
714 737 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-student&cid=').esc_attr($id))."'>
715 - <span>".$sch_student."</span>
738 + <span>".esc_html($sch_student)."</span>
716 739 </a>
717 740 </li>
718 741 <li class='".esc_attr($subject_page)."'>
719 742 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-subject&cid=').esc_attr($id))."'>
720 - <span>".$sch_subject."</span>
743 + <span>".esc_html($sch_subject)."</span>
721 744 </a>
722 - </li>
723 - <li class='".esc_attr($exam_page)."'>
745 + </li>";
746 + do_action('wpsp_register_addon_menus', $id);
747 + echo "<li class='".esc_attr($exam_page)."'>
724 748 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-exams&cid=').esc_attr($id))."'>
725 - <span>".$sch_exams."</span>
749 + <span>".esc_html($sch_exams)."</span>
726 750 </a>
727 751 </li>
728 752 <li class='".esc_attr($mark_page)."'>
729 753 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-marks&cid=').esc_attr($id))."'>
730 - <span>".$sch_marks."</span>
754 + <span>".esc_html($sch_marks)."</span>
731 755 </a>
732 756 </li>
733 757 <li class='".esc_attr($attendance_page)."'>
734 758 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-attendance&cid=').esc_attr($id))."'>
735 - <span>".$sch_attendance."</span>
759 + <span>".esc_html($sch_attendance)."</span>
736 760 </a>
737 761 </li>
738 762 <li class='".esc_attr($leave_page)."'>
739 763 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-leavecalendar&cid=').esc_attr($id))."'>
740 - <span>".$sch_leavecalendar."</span></a>
764 + <span>".esc_html($sch_leavecalendar)."</span></a>
741 765 </li>
742 766 </ul>
743 767 </li>
744 768 </li>
@@ -747,25 +771,25 @@
747 771 }
748 772 }
749 773 echo "<li class='".esc_attr($event_page)."'>
750 774 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-events'))."'>
751 - <i class='dashicons dashicons-calendar-alt icon'></i><span>".$sch_events."</span>
775 + <i class='dashicons dashicons-calendar-alt icon'></i><span>".esc_html($sch_events)."</span>
752 776 </a>
753 777 </li>";
754 778 if($prolms1 == 'installed'){
755 779 echo "<li class='has-submenu'>
756 780 <a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-lessons')) . "'>
757 - <i class='dashicons dashicons-welcome-widgets-menus icon'></i><span>" . $sch_lms . "</span>
781 + <i class='dashicons dashicons-welcome-widgets-menus icon'></i><span>" . esc_html($sch_lms) . "</span>
758 782 </a>
759 783 <ul class='sub-menu'>
760 784 <li class='" . esc_attr($lesson_page) . "'>
761 785 <a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-lessons')) . "'>
762 - <span>" . $sch_lesson . "</span>
786 + <span>" . esc_html($sch_lesson) . "</span>
763 787 </a>
764 788 </li>
765 789 <li class='" . esc_attr($quiz_page) . "'>
766 790 <a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-quizzes')) . "'>
767 - <span>" . $sch_quiz . "</span>
791 + <span>" . esc_html($sch_quiz) . "</span>
768 792 </a>
769 793 </li>
770 794 </ul>
771 795 </li>";
@@ -771,15 +795,15 @@
771 795 </li>";
772 796 }
773 797 echo "<li class='".esc_attr($transport_page)."'>
774 798 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-transport'))."'>
775 - <i class='icon wpsp-school-bus'></i><span>".$sch_transport."</span>
799 + <i class='icon wpsp-school-bus'></i><span>".esc_html($sch_transport)."</span>
776 800 </a>
777 801 </li>";
778 802 if($prohistory['status']){
779 803 echo "<li class='".esc_attr($history_page)."'>
780 804 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-history'))."'>
781 - <i class='icon fa fa-history'></i><span>".$sch_class_history."</span>
805 + <i class='icon fa fa-history'></i><span>".esc_html($sch_class_history)."</span>
782 806 </a>
783 807 </li>";
784 808 }
785 809 if($propayment == "installed"){
@@ -786,9 +810,9 @@
786 810 if($current_user_role=='student'){
787 811
788 812 echo "<li class='".esc_attr($payment_page_main)."'>
789 813 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-payment'))."'>
790 - <i class='icon fa fa-money'></i><span>".$sch_payment."</span>
814 + <i class='icon fa fa-money'></i><span>".esc_html($sch_payment)."</span>
791 815 </a>
792 816 </li>";
793 817 }}
794 818 echo "</ul>
@@ -873,9 +897,9 @@
873 897 global $wpdb;
874 898 $stable=$wpdb->prefix."wpsp_student";
875 899 $ctable=$wpdb->prefix."wpsp_class";
876 900 // $user_id = $wpdb->get_var("SELECT wp_usr_id FROM $stable where parent_wp_usr_id = '$current_user->ID'");
877 - $wpsp_classes = $wpdb->get_var($wpdb->prepare("SELECT wp_usr_id FROM $stable WHERE parent_wp_usr_id = %d",$$current_user->ID));
901 + $wpsp_classes = $wpdb->get_var($wpdb->prepare("SELECT wp_usr_id FROM $stable WHERE parent_wp_usr_id = %d",$current_user->ID));
878 902
879 903 // $wpsp_stud =$wpdb->get_results("SELECT s.class_id FROM $ctable s INNER JOIN $ctable c where s.wp_usr_id = '".$user_id."' and c.c_fee_type = 'paid'");
880 904 $wpsp_stud = $wpdb->get_results($wpdb->prepare("SELECT s.class_id FROM $ctable s INNER JOIN $ctable c ON s.class_id = c.cid
881 905 WHERE s.wp_usr_id = %d AND c.c_fee_type = %s",$user_id,'paid'));
@@ -918,34 +942,34 @@
918 942 <ul class='wpsp-navigation'>
919 943 <li class='".esc_attr($dashboard_page)."'>
920 944 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-dashboard'))."'>
921 945 <i class='dashicons dashicons-dashboard icon'></i>
922 - <span>".$sch_dashboard."</span>
946 + <span>".esc_html($sch_dashboard)."</span>
923 947 </a>
924 948 </li>";
925 949 if($prosocial == 'installed'){
926 950
927 - echo "<li class='has-submenu ".((isset($posts_page_main)? $posts_page_main : ''))."'>
951 + echo "<li class='has-submenu ".((isset($posts_page_main)? esc_attr($posts_page_main) : ''))."'>
928 952
929 - <a href='".site_url('wp-admin/admin.php?page=sch-posts')."'>
953 + <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-posts'))."'>
930 954
931 955 <i class='dashicons dashicons-admin-post'></i>
932 956
933 - <span>".$sch_posts."</span>
957 + <span>".esc_html($sch_posts)."</span>
934 958
935 959 </a>
936 960
937 961 <ul class='sub-menu'>
938 962
939 - <li class='".$posts_page."'><a href='".site_url('wp-admin/admin.php?page=sch-posts')."'>
963 + <li class='".esc_attr($posts_page)."'><a href='".esc_url(site_url('wp-admin/admin.php?page=sch-posts'))."'>
940 964
941 - <span>".$sch_posts."</span>
965 + <span>".esc_html($sch_posts)."</span>
942 966
943 967 </a></li>
944 968
945 - <li class='".$posts_profile_page."'><a href='".site_url('wp-admin/admin.php?page=sch-postsprofile')."'>
969 + <li class='".esc_attr($posts_profile_page)."'><a href='".esc_url(site_url('wp-admin/admin.php?page=sch-postsprofile'))."'>
946 970
947 - <span>".$sch_posts_profile."</span>
971 + <span>".esc_html($sch_posts_profile)."</span>
948 972
949 973 </a></li></ul>
950 974 </li>";
951 975 }
@@ -953,9 +977,9 @@
953 977 if($prodisablemessage == 'installed'){
954 978 echo "<li class=".esc_attr($message_page).">
955 979 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-messages'))."'>
956 980 <i class='dashicons dashicons-email icon'></i>
957 - <span>".$sch_message."</span>
981 + <span>".esc_html($sch_message)."</span>
958 982 </a>
959 983 </li>";
960 984 }
961 985 echo "<li class='".esc_attr($student_page)." has-submenu ".esc_attr($class_innercls1)."'>
@@ -960,9 +984,9 @@
960 984 }
961 985 echo "<li class='".esc_attr($student_page)." has-submenu ".esc_attr($class_innercls1)."'>
962 986 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-student'))."'>
963 987 <i class='dashicons dashicons-id icon'></i>
964 - <span>".$sch_student."</span>
988 + <span>".esc_html($sch_student)."</span>
965 989 </a>";
966 990
967 991 foreach ($wpsp_classes as $sclas) {
968 992 echo "<ul class='sub-menu ".esc_attr($class_innercls1)."'>
@@ -972,9 +996,9 @@
972 996 <span>".esc_html($sclas->s_fname.' '. $sclas->s_mname.' '. $sclas->s_lname)."</span>
973 997 </a>
974 998 <ul class='sub-menu ".esc_attr($class_innercls1)."'><li class='has-submenu ".esc_attr($class_innercls1)."'>
975 999 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-class'))."'>
976 - <i class='dashicons dashicons-welcome-widgets-menus icon'></i><span>".$sch_enrolled_class."</span>
1000 + <i class='dashicons dashicons-welcome-widgets-menus icon'></i><span>".esc_html($sch_enrolled_class)."</span>
977 1001 </a>";
978 1002
979 1003 $sid = base64_encode(intval($sclas->sid));
980 1004
@@ -1032,39 +1056,40 @@
1032 1056 </a>
1033 1057 <ul class='sub-menu ".((isset($nonemenu)? esc_attr($nonemenu) : ''))."'>
1034 1058 <li class='".esc_attr($timetable_page)."'>
1035 1059 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-timetable&cid='.esc_attr($id).'&sid=').esc_attr($sid))."'>
1036 - <span>".$sch_timetable."</span>
1060 + <span>".esc_html($sch_timetable)."</span>
1037 1061 </a>
1038 1062 </li>
1039 1063 <li class='".esc_attr($teacher_page)."'>
1040 1064 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-teacher&cid='.esc_attr($id).'&sid=').esc_attr($sid))."'>
1041 - <span>".$sch_teacher."</span>
1065 + <span>".esc_html($sch_teacher)."</span>
1042 1066 </a>
1043 1067 </li>
1044 - <li class='".esc_attr($subject_page)."'>
1045 - <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-subject&cid='.esc_attr($id).'&sid=').esc_attr($sid))."'>
1046 - <span>".$sch_subject."</span>
1068 + <li class='".esc_attr($subject_page)."'>
1069 + <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-subject&cid=').esc_attr($id))."'>
1070 + <span>".esc_html($sch_subject)."</span>
1047 1071 </a>
1048 - </li>
1049 - <li class='".esc_attr($exam_page)."'>
1072 + </li>";
1073 + do_action('wpsp_register_addon_menus', $id);
1074 + echo "<li class='".esc_attr($exam_page)."'>
1050 1075 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-exams&cid='.esc_attr($id).'&sid=').esc_attr($sid))."'>
1051 - <span>".$sch_exams."</span>
1076 + <span>".esc_html($sch_exams)."</span>
1052 1077 </a>
1053 1078 </li>
1054 1079 <li class='".esc_attr($mark_page)."'>
1055 1080 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-marks&cid='.esc_attr($id).'&sid=').esc_attr($sid))."'>
1056 - <span>".$sch_marks."</span>
1081 + <span>".esc_html($sch_marks)."</span>
1057 1082 </a>
1058 1083 </li>
1059 1084 <li class='".esc_attr($attendance_page)."'>
1060 1085 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-attendance&cid='.esc_attr($id).'&sid=').esc_attr($sid))."'>
1061 - <span>".$sch_attendance."</span>
1086 + <span>".esc_html($sch_attendance)."</span>
1062 1087 </a>
1063 1088 </li>
1064 1089 <li class='".esc_attr($leave_page)."'>
1065 1090 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-leavecalendar&cid='.esc_attr($id).'&sid=').esc_attr($sid))."'>
1066 - <span>".$sch_leavecalendar."</span></a>
1091 + <span>".esc_html($sch_leavecalendar)."</span></a>
1067 1092 </li>
1068 1093 </ul>
1069 1094 </li></ul>";
1070 1095 }
@@ -1073,27 +1098,27 @@
1073 1098 }
1074 1099
1075 1100 echo "</li><li class='".esc_attr($event_page)."'>
1076 1101 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-events'))."'>
1077 - <i class='dashicons dashicons-calendar-alt icon'></i><span>".$sch_events."</span>
1102 + <i class='dashicons dashicons-calendar-alt icon'></i><span>".esc_html($sch_events)."</span>
1078 1103 </a>
1079 1104 </li>";
1080 1105 if($prolms1 == 'installed'){
1081 1106 echo "<li class='" . esc_attr($quiz_page) . "'>
1082 1107 <a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-quizzes')) . "'>
1083 - <i class='dashicons dashicons-calendar-alt icon'></i><span>" . $sch_quiz_result . "</span>
1108 + <i class='dashicons dashicons-calendar-alt icon'></i><span>" . esc_html($sch_quiz_result) . "</span>
1084 1109 </a>
1085 1110 </li>";
1086 - }
1111 + }
1087 1112 echo "<li class='".esc_attr($transport_page)."'>
1088 1113 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-transport'))."'>
1089 - <i class='icon wpsp-school-bus'></i><span>".$sch_transport."</span>
1114 + <i class='icon wpsp-school-bus'></i><span>".esc_html($sch_transport)."</span>
1090 1115 </a>
1091 1116 </li>";
1092 1117 if($prohistory['status']){
1093 1118 echo"<li class='".esc_attr($history_page)."'>
1094 1119 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-history'))."'>
1095 - <i class='icon fa fa-history'></i><span>".$sch_class_history."</span>
1120 + <i class='icon fa fa-history'></i><span>".esc_html($sch_class_history)."</span>
1096 1121 </a>
1097 1122 </li>";
1098 1123 }
1099 1124 if($propayment == "installed"){
@@ -1100,9 +1125,9 @@
1100 1125
1101 1126
1102 1127 echo "<li class='".esc_attr($payment_page_main)."'>
1103 1128 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-payment'))."'>
1104 - <i class='icon fa fa-money'></i><span>".$sch_payment."</span>
1129 + <i class='icon fa fa-money'></i><span>".esc_html($sch_payment)."</span>
1105 1130 </a>
1106 1131 </li>";
1107 1132
1108 1133 }
@@ -1257,9 +1282,9 @@
1257 1282 break;
1258 1283 case 'editprofile' :
1259 1284 $pagetitle="Edit Profile";
1260 1285 break;
1261 - case 'history' :
1286 + case 'history' :
1262 1287 $pagetitle="History";
1263 1288 break;
1264 1289 case 'lessons':
1265 1290 $pagetitle = "Lessons";
@@ -1272,8 +1297,14 @@
1272 1297 case 'questions':
1273 1298 $pagetitle = "Questions";
1274 1299 $addurl = $base_url . 'sch-questions&tab=addquestion';
1275 1300 break;
1301 + case 'addons':
1302 + $pagetitle = esc_html__( 'Addons', 'wpschoolpress' );
1303 + break;
1304 + case 'customization':
1305 + $pagetitle = esc_html__( 'Customization', 'wpschoolpress' );
1306 + break;
1276 1307 }
1277 1308 // echo $addurl;
1278 1309 //echo $result;
1279 1310 if((isset($_GET['sc'])) && ($_GET['sc'] == 'subField'))
@@ -1366,9 +1397,9 @@
1366 1397 /* This function used for footer copyright section */
1367 1398 function wpsp_body_end()
1368 1399 {
1369 1400 echo "<footer class='wpsp-footer'>
1370 - <p>Copyright &copy;".date('Y')." <a href='http://wpschoolpress.com' target='_blank'>WPSchoolPress</a>. All rights reserved. <span class='wpsp-right'>WPSchoolPress Version ".esc_html(WPSP_PLUGIN_VERSION,'wpschoolpress')."</span></p></footer>
1401 + <p>Copyright &copy;".esc_html(date('Y'))." <a href='".esc_url('http://wpschoolpress.com')."' target='_blank'>WPSchoolPress</a>. All rights reserved. <span class='wpsp-right'>WPSchoolPress Version ".esc_html(WPSP_PLUGIN_VERSION,'wpschoolpress')."</span></p></footer>
1371 1402 <!-- Control Sidebar -->
1372 1403 </section><!-- /.wpsp-container -->
1373 1404 </div><!-- /.wpsp-wrapper -->
1374 1405 </div><!-- ./wrapper -->";