PluginProbe
School Management System – WPSchoolPress / trunk
School Management System – WPSchoolPress vtrunk
2.2.48 2.2.47 2.2.46 2.2.45 2.2.44 2.2.43 2.2.42 2.2.41 2.2.40 2.2.39 2.2.38 1.1.2 1.1.3 1.1.4 1.1.5 1.1.6 1.1.7 1.1.8 1.1.9 2.0.0 2.0.1 2.0.10 2.0.11 2.0.12 2.0.13 All 103 releases
← All changes | wpsp-layout.php +120 -92 2.2.43trunk View file →
@@ -92,9 +92,9 @@
92 92 <span class='wpsp-schoolname'><?php echo esc_html($schoolname,'wpschoolpress');?></span>
93 93 </a>
94 94 <div class="wpsp-head">
95 95 <div class="wpsp-menuIcon"><span></span></div>
96 - <h3 class="wpsp-customeMsg"><?php echo esc_html(" “Live as if you were to die tomorrow. Learn as if you were to live forever.” ","wpschoolpress");?></h3>
96 + <h3 class="wpsp-customeMsg"><?php echo esc_html(" \u{201c}Live as if you were to die tomorrow. Learn as if you were to live forever.\u{201d} ","wpschoolpress");?></h3>
97 97 <div class="wpsp-righthead">
98 98 <div class="wpsp-head-action"></div>
99 99 <div class="wpsp-userMain wpsp-dropdownmain ">
100 100 <div class="wpsp-profile-pic wpsp-dropdown-toggle">
@@ -126,9 +126,10 @@
126 126 $prohistory = wpsp_check_pro_version('wpsp_mc_version');
127 127 $prodisablehistory = !$prohistory['status'] ? 'notinstalled' : 'installed';
128 128 $promessage = wpsp_check_pro_version('wpsp_message_version');
129 129 $prodisablemessage = !$promessage['status'] ? 'notinstalled' : 'installed';
130 - $propayment = wpsp_check_pro_version('pay_WooCommerce');
130 + $propayment_gate_class = apply_filters('wpsp_payment_addon_gate_class', 'pay_WooCommerce');
131 + $propayment = wpsp_check_pro_version($propayment_gate_class);
131 132 $propayment = !$propayment['status'] ? 'notinstalled' : 'installed';
132 133
133 134 $prosocial = wpsp_check_pro_version('wpsp_sm_version');
134 135 $prosocial = !$prosocial['status'] ? 'notinstalled' : 'installed';
@@ -235,8 +236,14 @@
235 236 break;
236 237 case 'question':
237 238 $question_page = 'active';
238 239 break;
240 + case 'addons':
241 + $addons_page = 'active';
242 + break;
243 + case 'customization':
244 + $customization_page = 'active';
245 + break;
239 246 }
240 247
241 248
242 249
@@ -281,9 +288,9 @@
281 288 <ul class='wpsp-navigation'>
282 289 <li class='".esc_attr($dashboard_page)."'>
283 290 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-dashboard'))."'>
284 291 <i class='dashicons dashicons-dashboard icon'></i>
285 - <span>".$sch_dashboard."</span>
292 + <span>".esc_html($sch_dashboard)."</span>
286 293 </a>
287 294 </li>";
288 295 if($prosocial == 'installed'){
289 296 if($current_user_role=='administrator' || $current_user_role=='teacher'){
@@ -288,33 +295,33 @@
288 295 if($prosocial == 'installed'){
289 296 if($current_user_role=='administrator' || $current_user_role=='teacher'){
290 297 echo "<li class='has-submenu ".((isset($posts_page_main) ? esc_html($posts_page_main,'wpschoolpress') : ''))."'>
291 298
292 - <a href='".site_url('wp-admin/admin.php?page=sch-posts')."'>
299 + <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-posts'))."'>
293 300
294 301 <i class='dashicons dashicons-admin-post'></i>
295 302
296 - <span>".esc_html($sch_posts,'wpschoolpress')."</span>
303 + <span>".esc_html($sch_posts)."</span>
297 304
298 305 </a>
299 306
300 307 <ul class='sub-menu'>
301 308
302 - <li class='".$posts_page."'><a href='".site_url('wp-admin/admin.php?page=sch-posts')."'>
309 + <li class='".esc_attr($posts_page)."'><a href='".esc_url(site_url('wp-admin/admin.php?page=sch-posts'))."'>
303 310
304 - <span>".$sch_posts."</span>
311 + <span>".esc_html($sch_posts)."</span>
305 312
306 313 </a></li>
307 314
308 - <li class='".$posts_profile_page."'><a href='".site_url('wp-admin/admin.php?page=sch-postsprofile')."'>
315 + <li class='".esc_attr($posts_profile_page)."'><a href='".esc_url(site_url('wp-admin/admin.php?page=sch-postsprofile'))."'>
309 316
310 - <span>".$sch_posts_profile."</span>
317 + <span>".esc_html($sch_posts_profile)."</span>
311 318
312 319 </a></li>";
313 320 if($current_user_role=='administrator'){
314 - echo "<li class='".$posts_reported_page."'><a href='".site_url('wp-admin/admin.php?page=sch-reported-posts')."'>
321 + echo "<li class='".esc_attr($posts_reported_page)."'><a href='".esc_url(site_url('wp-admin/admin.php?page=sch-reported-posts'))."'>
315 322
316 - <span>".$sch_reported_posts."</span>
323 + <span>".esc_html($sch_reported_posts)."</span>
317 324
318 325 </a></li>";
319 326 }
320 327 // echo "<li class='".$documents_page."'><a href='".site_url('wp-admin/admin.php?page=sch-documents')."'>
@@ -332,9 +339,9 @@
332 339 if($prodisablemessage == 'installed'){
333 340 echo "<li class=".esc_attr($message_page).">
334 341 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-messages'))."'>
335 342 <i class='dashicons dashicons-email icon'></i>
336 - <span>".$sch_message."</span><span class='pull-right label label-primary pull-right'></span>
343 + <span>".esc_html($sch_message)."</span><span class='pull-right label label-primary pull-right'></span>
337 344 </a>
338 345 </li>";
339 346 }
340 347
@@ -340,15 +347,15 @@
340 347
341 348 echo "<li class='".esc_attr($teacher_page)."'>
342 349 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-teacher'))."'>
343 350 <i class='dashicons dashicons-businessman icon'></i>
344 - <span>".$sch_teacher."</span>
351 + <span>".esc_html($sch_teacher)."</span>
345 352 </a>
346 353 </li>
347 354 <li class='".esc_attr($student_page)."'>
348 355 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-student'))."'>
349 356 <i class='dashicons dashicons-id icon'></i>
350 - <span>".$sch_student."</span>
357 + <span>".esc_html($sch_student)."</span>
351 358 </a>
352 359 </li>";
353 360 if($current_user_role == 'administrator'){
354 361 if($proversion1['status']){
@@ -354,9 +361,9 @@
354 361 if($proversion1['status']){
355 362 echo "<li class='".esc_attr((isset($request_page) ? $request_page : '')) ."'>
356 363 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-request'))."'>
357 364 <i class='dashicons dashicons-welcome-write-blog icon'></i>
358 - <span>".$sch_registration."</span>
365 + <span>".esc_html($sch_registration)."</span>
359 366 </a></li>";
360 367 }
361 368 }
362 369 echo "<li class='".esc_attr($parent_page)."'>
@@ -361,25 +368,25 @@
361 368 }
362 369 echo "<li class='".esc_attr($parent_page)."'>
363 370 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-parent'))."'>
364 371 <i class='dashicons dashicons-groups icon'></i>
365 - <span>".$sch_parent."</span>
372 + <span>".esc_html($sch_parent)."</span>
366 373 </a>
367 374 </li>
368 375 <li class='has-submenu ".((isset($class_page_our)? esc_attr($class_page_our) : ''))."'>
369 376 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-class'))."'>
370 377 <i class='dashicons dashicons-welcome-widgets-menus icon'></i>
371 - <span>".$sch_classes."</span>
378 + <span>".esc_html($sch_classes)."</span>
372 379 </a>
373 380 <ul class='sub-menu'>
374 381 <li class='".esc_attr($class_page)."'>
375 382 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-class'))."'>
376 - <span>".$sch_classes."</span>
383 + <span>".esc_html($sch_classes)."</span>
377 384 </a>
378 385 </li>
379 386 <li class='".esc_attr($subject_page)."'>
380 387 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-subject'))."'>
381 - <span>".$sch_subject."</span>
388 + <span>".esc_html($sch_subject)."</span>
382 389 </a>
383 390 </li>";
384 391 do_action('wpsp_register_addon_menus');
385 392
@@ -384,25 +391,25 @@
384 391 do_action('wpsp_register_addon_menus');
385 392
386 393 if($current_user_role=='administrator'){
387 394 echo "<li class='".esc_attr($settings_subfield_page)."'>
388 - <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-settings&sc=subField'))."'>".$sch_subject_mark_field."</a>
395 + <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-settings&sc=subField'))."'>".esc_html($sch_subject_mark_field)."</a>
389 396 </li>";
390 397 }
391 398
392 399 echo "<li class='".esc_attr($mark_page)."'>
393 400 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-marks'))."'>
394 - <span>".$sch_marks."</span>
401 + <span>".esc_html($sch_marks)."</span>
395 402 </a>
396 403 </li>
397 404 <li class='".esc_attr($exam_page)."'>
398 405 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-exams'))."'>
399 - <span>".$sch_exams."</span>
406 + <span>".esc_html($sch_exams)."</span>
400 407 </a>
401 408 </li>
402 409 <li class='".esc_attr($timetable_page)."'>
403 410 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-timetable'))."'>
404 - <span>".$sch_timetable."</span>
411 + <span>".esc_html($sch_timetable)."</span>
405 412 </a>
406 413 </li>
407 414 </ul>
408 415 </li>";
@@ -409,19 +416,19 @@
409 416 if($prolms1 == 'installed'){
410 417 echo "<li class='has-submenu'>
411 418 <a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-attendance')) . "'>
412 419 <i class='dashicons dashicons-clipboard icon'></i>
413 - <span>" . $sch_lms . "</span>
420 + <span>" . esc_html($sch_lms) . "</span>
414 421 </a>
415 422 <ul class='sub-menu'>
416 423 <li class='" . esc_attr($lesson_page) . "'><a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-lessons')) . "'>
417 - <span>" . $sch_lesson . "</span>
424 + <span>" . esc_html($sch_lesson) . "</span>
418 425 </a></li>
419 426 <li class='" . esc_attr($quiz_page) . "'><a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-quizzes')) . "'>
420 - <span>" . $sch_quiz . "</span>
427 + <span>" . esc_html($sch_quiz) . "</span>
421 428 </a></li>
422 429 <li class='" . esc_attr($question_page) . "'><a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-questions')) . "'>
423 - <span>" . $sch_question . "</span>
430 + <span>" . esc_html($sch_question) . "</span>
424 431 </a></li>
425 432 </ul>
426 433 </li>";
427 434 }
@@ -427,18 +434,18 @@
427 434 }
428 435 echo "<li class='has-submenu ".((isset($attendance_page_main)? esc_attr($attendance_page_main) : ''))."'>
429 436 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-attendance'))."'>
430 437 <i class='dashicons dashicons-clipboard icon'></i>
431 - <span>".$sch_attendance."</span>
438 + <span>".esc_html($sch_attendance)."</span>
432 439 </a>
433 440 <ul class='sub-menu'>
434 441 <li class='".esc_attr($attendance_page)."'><a href='".esc_url(site_url('wp-admin/admin.php?page=sch-attendance'))."'>
435 - <span>".$sch_student_attendance."</span>
442 + <span>".esc_html($sch_student_attendance)."</span>
436 443 </a></li>";
437 444 if($current_user_role=='administrator' || $current_user_role=='teacher'){
438 445 echo "<li class='".esc_attr($teacher_attendance_page)."'>
439 446 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-teacherattendance'))."'>
440 - <span>".$sch_teacher_attendance."</span>
447 + <span>".esc_html($sch_teacher_attendance)."</span>
441 448 </a>
442 449 </li>";
443 450 }
444 451 echo "</ul>
@@ -444,9 +451,9 @@
444 451 echo "</ul>
445 452 </li>
446 453 <li class='".esc_attr($event_page)."'>
447 454 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-events'))."'>
448 - <i class='dashicons dashicons-calendar-alt icon'></i><span>".$sch_events."</span>
455 + <i class='dashicons dashicons-calendar-alt icon'></i><span>".esc_html($sch_events)."</span>
449 456 </a>
450 457 </li>
451 458 ";
452 459 if($current_user_role=='administrator' || $current_user_role=='teacher') {
@@ -452,40 +459,40 @@
452 459 if($current_user_role=='administrator' || $current_user_role=='teacher') {
453 460 echo "
454 461 <li class='".esc_attr($notify_page)."'>
455 462 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-notify'))."'>
456 - <i class='icon wpsp-notify'></i><span>".$sch_notfiy."</span>
463 + <i class='icon wpsp-notify'></i><span>".esc_html($sch_notfiy)."</span>
457 464 </a>
458 465 </li>";
459 466 }
460 467 echo "<li class='".esc_attr($transport_page)."'>
461 468 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-transport'))."'>
462 - <i class='icon wpsp-school-bus'></i><span>".$sch_transport."</span>
469 + <i class='icon wpsp-school-bus'></i><span>".esc_html($sch_transport)."</span>
463 470 </a>
464 471 </li>";
465 472 echo "<li class='has-submenu ".((isset($settings_page_main)? esc_attr($settings_page_main) : '' ))."'>
466 473 <a href='#'>
467 474 <i class='dashicons dashicons-admin-generic'></i>
468 - <span>".$sch_gen_setting."</span>
475 + <span>".esc_html($sch_gen_setting)."</span>
469 476 </a>
470 477 <ul class='sub-menu'>";
471 478 if($current_user_role=='administrator'){
472 479 echo "<li class='".esc_attr($settings_general_page)."'>
473 480 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-settings'))."'>
474 - <span>".$sch_setting."</span></a>
481 + <span>".esc_html($sch_setting)."</span></a>
475 482 </li>";
476 483 echo "<li class='".esc_attr($settings_wrkhours_page)."'>
477 484 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-settings&sc=WrkHours'))."'>
478 - <span>".$sch_workinghours."</span></a>
485 + <span>".esc_html($sch_workinghours)."</span></a>
479 486 </li>";
480 487 }
481 - echo "<li class='".$leave_page."'>
488 + echo "<li class='".esc_attr($leave_page)."'>
482 489 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-leavecalendar'))."'>
483 - <span>".$sch_leavecalendar."</span></a></li>";
490 + <span>".esc_html($sch_leavecalendar)."</span></a></li>";
484 491 if($current_user_role=='administrator' || $current_user_role=='teacher') {
485 492 echo "<li class='" . esc_attr($import_page) . "'>
486 493 <a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-importhistory')) . "'>
487 - <span>". $sch_import_history . "</span>
494 + <span>". esc_html($sch_import_history) . "</span>
488 495 </a>
489 496 </li>
490 497 ";
491 498 }
@@ -491,8 +498,23 @@
491 498 }
492 499 echo "</ul>
493 500 </li>";
494 501
502 + if ( $current_user_role === 'administrator' || $current_user_role === 'teacher') {
503 + echo "<li class='" . esc_attr( isset( $addons_page ) ? $addons_page : '' ) . "'>
504 + <a href='" . esc_url( site_url( 'wp-admin/admin.php?page=sch-addons' ) ) . "'>
505 + <i class='dashicons dashicons-welcome-add-page icon'></i>
506 + <span>" . esc_html($sch_addons) . "</span>
507 + </a>
508 + </li>
509 + <li class='" . esc_attr( isset( $customization_page ) ? $customization_page : '' ) . "'>
510 + <a href='" . esc_url( site_url( 'wp-admin/admin.php?page=sch-customization' ) ) . "'>
511 + <i class='fa fa-pencil-square-o icon'></i>
512 + <span>" . esc_html($sch_customization) . "</span>
513 + </a>
514 + </li>";
515 + }
516 +
495 517 echo "</ul>
496 518 </div>
497 519 </aside>";
498 520 } elseif($current_user_role=='student'){
@@ -616,24 +638,24 @@
616 638 <ul class='wpsp-navigation'>
617 639 <li class='".esc_attr($dashboard_page)."'>
618 640 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-dashboard'))."'>
619 641 <i class='dashicons dashicons-dashboard icon'></i>
620 - <span>".$sch_dashboard."</span>
642 + <span>".esc_html($sch_dashboard)."</span>
621 643 </a>
622 644 </li>";
623 645 if($prosocial == 'installed'){
624 - echo "<li class='has-submenu ".((isset($posts_page_main)? $posts_page_main : ''))."'>
625 - <a href='".site_url('wp-admin/admin.php?page=sch-posts')."'>
646 + echo "<li class='has-submenu ".((isset($posts_page_main)? esc_attr($posts_page_main) : ''))."'>
647 + <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-posts'))."'>
626 648 <i class='dashicons dashicons-admin-post'></i>
627 - <span>".$sch_posts."</span>
649 + <span>".esc_html($sch_posts)."</span>
628 650 </a>
629 651 <ul class='sub-menu'>
630 - <li class='".$posts_page."'><a href='".site_url('wp-admin/admin.php?page=sch-posts')."'>
631 - <span>".$sch_posts."</span>
652 + <li class='".esc_attr($posts_page)."'><a href='".esc_url(site_url('wp-admin/admin.php?page=sch-posts'))."'>
653 + <span>".esc_html($sch_posts)."</span>
632 654 </a>
633 655 </li>
634 - <li class='".$posts_profile_page."'><a href='".site_url('wp-admin/admin.php?page=sch-postsprofile')."'>
635 - <span>".$sch_posts_profile."</span>
656 + <li class='".esc_attr($posts_profile_page)."'><a href='".esc_url(site_url('wp-admin/admin.php?page=sch-postsprofile'))."'>
657 + <span>".esc_html($sch_posts_profile)."</span>
636 658 </a>
637 659 </li>
638 660 </ul>
639 661 </li>";
@@ -641,9 +663,9 @@
641 663 if($prodisablemessage == 'installed'){
642 664 echo "<li class=".esc_attr($message_page).">
643 665 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-messages'))."'>
644 666 <i class='dashicons dashicons-email icon'></i>
645 - <span>".$sch_message."</span><span class='pull-right label label-primary pull-right'></span>
667 + <span>".esc_html($sch_message)."</span><span class='pull-right label label-primary pull-right'></span>
646 668 </a>
647 669 </li>";
648 670 }
649 671 echo "
@@ -649,14 +671,14 @@
649 671 echo "
650 672 <li class='".esc_attr($parent_page)."'>
651 673 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-parent'))."'>
652 674 <i class='dashicons dashicons-groups icon'></i>
653 - <span>". $sch_parent."</span>
675 + <span>". esc_html($sch_parent)."</span>
654 676 </a>
655 677 </li>
656 678 <li class='has-submenu".esc_attr($class_innercls1)."'>
657 679 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-class'))."'>
658 - <i class='dashicons dashicons-welcome-widgets-menus icon'></i><span>".$sch_enrolled_class."</span>
680 + <i class='dashicons dashicons-welcome-widgets-menus icon'></i><span>".esc_html($sch_enrolled_class)."</span>
659 681 </a>";
660 682 if (is_numeric($wpsp_classes[0]->class_id)){
661 683 $classIDArray[] = $wpsp_classes[0]->class_id;
662 684 }else{
@@ -690,9 +712,9 @@
690 712 if($getid == base64_decode(stripslashes($id))){
691 713 $timetable_page = 'active';
692 714 }
693 715 if($clsgetid != 0){
694 - echo "<ul class='sub-menu has-submenu hehehe".((isset($nonemenu) ? $nonemenu : ''))." '>";
716 + echo "<ul class='sub-menu has-submenu hehehe".((isset($nonemenu) ? esc_attr($nonemenu) : ''))." '>";
695 717 if(trim($clsgetid) == trim($getid)){
696 718 echo "<li class='has-submenu active'>";
697 719 } else {
698 720 echo "<li class='has-submenu'>";
@@ -702,45 +724,45 @@
702 724 </a>
703 725 <ul class='sub-menu'>
704 726 <li class='".esc_attr($timetable_page)."'>
705 727 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-timetable&cid=').esc_attr($id))."'>
706 - <span>".$sch_timetable."</span>
728 + <span>".esc_html($sch_timetable)."</span>
707 729 </a>
708 730 </li>
709 731 <li class='".esc_attr($teacher_page)."'>
710 732 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-teacher&cid=').esc_attr($id))."'>
711 - <span>".$sch_teacher."</span>
733 + <span>".esc_html($sch_teacher)."</span>
712 734 </a>
713 735 </li>
714 736 <li class='".esc_attr($student_page)."'>
715 737 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-student&cid=').esc_attr($id))."'>
716 - <span>".$sch_student."</span>
738 + <span>".esc_html($sch_student)."</span>
717 739 </a>
718 740 </li>
719 741 <li class='".esc_attr($subject_page)."'>
720 742 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-subject&cid=').esc_attr($id))."'>
721 - <span>".$sch_subject."</span>
743 + <span>".esc_html($sch_subject)."</span>
722 744 </a>
723 745 </li>";
724 746 do_action('wpsp_register_addon_menus', $id);
725 747 echo "<li class='".esc_attr($exam_page)."'>
726 748 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-exams&cid=').esc_attr($id))."'>
727 - <span>".$sch_exams."</span>
749 + <span>".esc_html($sch_exams)."</span>
728 750 </a>
729 751 </li>
730 752 <li class='".esc_attr($mark_page)."'>
731 753 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-marks&cid=').esc_attr($id))."'>
732 - <span>".$sch_marks."</span>
754 + <span>".esc_html($sch_marks)."</span>
733 755 </a>
734 756 </li>
735 757 <li class='".esc_attr($attendance_page)."'>
736 758 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-attendance&cid=').esc_attr($id))."'>
737 - <span>".$sch_attendance."</span>
759 + <span>".esc_html($sch_attendance)."</span>
738 760 </a>
739 761 </li>
740 762 <li class='".esc_attr($leave_page)."'>
741 763 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-leavecalendar&cid=').esc_attr($id))."'>
742 - <span>".$sch_leavecalendar."</span></a>
764 + <span>".esc_html($sch_leavecalendar)."</span></a>
743 765 </li>
744 766 </ul>
745 767 </li>
746 768 </li>
@@ -749,25 +771,25 @@
749 771 }
750 772 }
751 773 echo "<li class='".esc_attr($event_page)."'>
752 774 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-events'))."'>
753 - <i class='dashicons dashicons-calendar-alt icon'></i><span>".$sch_events."</span>
775 + <i class='dashicons dashicons-calendar-alt icon'></i><span>".esc_html($sch_events)."</span>
754 776 </a>
755 777 </li>";
756 778 if($prolms1 == 'installed'){
757 779 echo "<li class='has-submenu'>
758 780 <a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-lessons')) . "'>
759 - <i class='dashicons dashicons-welcome-widgets-menus icon'></i><span>" . $sch_lms . "</span>
781 + <i class='dashicons dashicons-welcome-widgets-menus icon'></i><span>" . esc_html($sch_lms) . "</span>
760 782 </a>
761 783 <ul class='sub-menu'>
762 784 <li class='" . esc_attr($lesson_page) . "'>
763 785 <a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-lessons')) . "'>
764 - <span>" . $sch_lesson . "</span>
786 + <span>" . esc_html($sch_lesson) . "</span>
765 787 </a>
766 788 </li>
767 789 <li class='" . esc_attr($quiz_page) . "'>
768 790 <a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-quizzes')) . "'>
769 - <span>" . $sch_quiz . "</span>
791 + <span>" . esc_html($sch_quiz) . "</span>
770 792 </a>
771 793 </li>
772 794 </ul>
773 795 </li>";
@@ -773,15 +795,15 @@
773 795 </li>";
774 796 }
775 797 echo "<li class='".esc_attr($transport_page)."'>
776 798 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-transport'))."'>
777 - <i class='icon wpsp-school-bus'></i><span>".$sch_transport."</span>
799 + <i class='icon wpsp-school-bus'></i><span>".esc_html($sch_transport)."</span>
778 800 </a>
779 801 </li>";
780 802 if($prohistory['status']){
781 803 echo "<li class='".esc_attr($history_page)."'>
782 804 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-history'))."'>
783 - <i class='icon fa fa-history'></i><span>".$sch_class_history."</span>
805 + <i class='icon fa fa-history'></i><span>".esc_html($sch_class_history)."</span>
784 806 </a>
785 807 </li>";
786 808 }
787 809 if($propayment == "installed"){
@@ -788,9 +810,9 @@
788 810 if($current_user_role=='student'){
789 811
790 812 echo "<li class='".esc_attr($payment_page_main)."'>
791 813 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-payment'))."'>
792 - <i class='icon fa fa-money'></i><span>".$sch_payment."</span>
814 + <i class='icon fa fa-money'></i><span>".esc_html($sch_payment)."</span>
793 815 </a>
794 816 </li>";
795 817 }}
796 818 echo "</ul>
@@ -875,9 +897,9 @@
875 897 global $wpdb;
876 898 $stable=$wpdb->prefix."wpsp_student";
877 899 $ctable=$wpdb->prefix."wpsp_class";
878 900 // $user_id = $wpdb->get_var("SELECT wp_usr_id FROM $stable where parent_wp_usr_id = '$current_user->ID'");
879 - $wpsp_classes = $wpdb->get_var($wpdb->prepare("SELECT wp_usr_id FROM $stable WHERE parent_wp_usr_id = %d",$$current_user->ID));
901 + $wpsp_classes = $wpdb->get_var($wpdb->prepare("SELECT wp_usr_id FROM $stable WHERE parent_wp_usr_id = %d",$current_user->ID));
880 902
881 903 // $wpsp_stud =$wpdb->get_results("SELECT s.class_id FROM $ctable s INNER JOIN $ctable c where s.wp_usr_id = '".$user_id."' and c.c_fee_type = 'paid'");
882 904 $wpsp_stud = $wpdb->get_results($wpdb->prepare("SELECT s.class_id FROM $ctable s INNER JOIN $ctable c ON s.class_id = c.cid
883 905 WHERE s.wp_usr_id = %d AND c.c_fee_type = %s",$user_id,'paid'));
@@ -920,34 +942,34 @@
920 942 <ul class='wpsp-navigation'>
921 943 <li class='".esc_attr($dashboard_page)."'>
922 944 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-dashboard'))."'>
923 945 <i class='dashicons dashicons-dashboard icon'></i>
924 - <span>".$sch_dashboard."</span>
946 + <span>".esc_html($sch_dashboard)."</span>
925 947 </a>
926 948 </li>";
927 949 if($prosocial == 'installed'){
928 950
929 - echo "<li class='has-submenu ".((isset($posts_page_main)? $posts_page_main : ''))."'>
951 + echo "<li class='has-submenu ".((isset($posts_page_main)? esc_attr($posts_page_main) : ''))."'>
930 952
931 - <a href='".site_url('wp-admin/admin.php?page=sch-posts')."'>
953 + <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-posts'))."'>
932 954
933 955 <i class='dashicons dashicons-admin-post'></i>
934 956
935 - <span>".$sch_posts."</span>
957 + <span>".esc_html($sch_posts)."</span>
936 958
937 959 </a>
938 960
939 961 <ul class='sub-menu'>
940 962
941 - <li class='".$posts_page."'><a href='".site_url('wp-admin/admin.php?page=sch-posts')."'>
963 + <li class='".esc_attr($posts_page)."'><a href='".esc_url(site_url('wp-admin/admin.php?page=sch-posts'))."'>
942 964
943 - <span>".$sch_posts."</span>
965 + <span>".esc_html($sch_posts)."</span>
944 966
945 967 </a></li>
946 968
947 - <li class='".$posts_profile_page."'><a href='".site_url('wp-admin/admin.php?page=sch-postsprofile')."'>
969 + <li class='".esc_attr($posts_profile_page)."'><a href='".esc_url(site_url('wp-admin/admin.php?page=sch-postsprofile'))."'>
948 970
949 - <span>".$sch_posts_profile."</span>
971 + <span>".esc_html($sch_posts_profile)."</span>
950 972
951 973 </a></li></ul>
952 974 </li>";
953 975 }
@@ -955,9 +977,9 @@
955 977 if($prodisablemessage == 'installed'){
956 978 echo "<li class=".esc_attr($message_page).">
957 979 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-messages'))."'>
958 980 <i class='dashicons dashicons-email icon'></i>
959 - <span>".$sch_message."</span>
981 + <span>".esc_html($sch_message)."</span>
960 982 </a>
961 983 </li>";
962 984 }
963 985 echo "<li class='".esc_attr($student_page)." has-submenu ".esc_attr($class_innercls1)."'>
@@ -962,9 +984,9 @@
962 984 }
963 985 echo "<li class='".esc_attr($student_page)." has-submenu ".esc_attr($class_innercls1)."'>
964 986 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-student'))."'>
965 987 <i class='dashicons dashicons-id icon'></i>
966 - <span>".$sch_student."</span>
988 + <span>".esc_html($sch_student)."</span>
967 989 </a>";
968 990
969 991 foreach ($wpsp_classes as $sclas) {
970 992 echo "<ul class='sub-menu ".esc_attr($class_innercls1)."'>
@@ -974,9 +996,9 @@
974 996 <span>".esc_html($sclas->s_fname.' '. $sclas->s_mname.' '. $sclas->s_lname)."</span>
975 997 </a>
976 998 <ul class='sub-menu ".esc_attr($class_innercls1)."'><li class='has-submenu ".esc_attr($class_innercls1)."'>
977 999 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-class'))."'>
978 - <i class='dashicons dashicons-welcome-widgets-menus icon'></i><span>".$sch_enrolled_class."</span>
1000 + <i class='dashicons dashicons-welcome-widgets-menus icon'></i><span>".esc_html($sch_enrolled_class)."</span>
979 1001 </a>";
980 1002
981 1003 $sid = base64_encode(intval($sclas->sid));
982 1004
@@ -1034,40 +1056,40 @@
1034 1056 </a>
1035 1057 <ul class='sub-menu ".((isset($nonemenu)? esc_attr($nonemenu) : ''))."'>
1036 1058 <li class='".esc_attr($timetable_page)."'>
1037 1059 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-timetable&cid='.esc_attr($id).'&sid=').esc_attr($sid))."'>
1038 - <span>".$sch_timetable."</span>
1060 + <span>".esc_html($sch_timetable)."</span>
1039 1061 </a>
1040 1062 </li>
1041 1063 <li class='".esc_attr($teacher_page)."'>
1042 1064 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-teacher&cid='.esc_attr($id).'&sid=').esc_attr($sid))."'>
1043 - <span>".$sch_teacher."</span>
1065 + <span>".esc_html($sch_teacher)."</span>
1044 1066 </a>
1045 1067 </li>
1046 1068 <li class='".esc_attr($subject_page)."'>
1047 1069 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-subject&cid=').esc_attr($id))."'>
1048 - <span>".$sch_subject."</span>
1070 + <span>".esc_html($sch_subject)."</span>
1049 1071 </a>
1050 1072 </li>";
1051 1073 do_action('wpsp_register_addon_menus', $id);
1052 1074 echo "<li class='".esc_attr($exam_page)."'>
1053 1075 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-exams&cid='.esc_attr($id).'&sid=').esc_attr($sid))."'>
1054 - <span>".$sch_exams."</span>
1076 + <span>".esc_html($sch_exams)."</span>
1055 1077 </a>
1056 1078 </li>
1057 1079 <li class='".esc_attr($mark_page)."'>
1058 1080 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-marks&cid='.esc_attr($id).'&sid=').esc_attr($sid))."'>
1059 - <span>".$sch_marks."</span>
1081 + <span>".esc_html($sch_marks)."</span>
1060 1082 </a>
1061 1083 </li>
1062 1084 <li class='".esc_attr($attendance_page)."'>
1063 1085 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-attendance&cid='.esc_attr($id).'&sid=').esc_attr($sid))."'>
1064 - <span>".$sch_attendance."</span>
1086 + <span>".esc_html($sch_attendance)."</span>
1065 1087 </a>
1066 1088 </li>
1067 1089 <li class='".esc_attr($leave_page)."'>
1068 1090 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-leavecalendar&cid='.esc_attr($id).'&sid=').esc_attr($sid))."'>
1069 - <span>".$sch_leavecalendar."</span></a>
1091 + <span>".esc_html($sch_leavecalendar)."</span></a>
1070 1092 </li>
1071 1093 </ul>
1072 1094 </li></ul>";
1073 1095 }
@@ -1076,27 +1098,27 @@
1076 1098 }
1077 1099
1078 1100 echo "</li><li class='".esc_attr($event_page)."'>
1079 1101 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-events'))."'>
1080 - <i class='dashicons dashicons-calendar-alt icon'></i><span>".$sch_events."</span>
1102 + <i class='dashicons dashicons-calendar-alt icon'></i><span>".esc_html($sch_events)."</span>
1081 1103 </a>
1082 1104 </li>";
1083 1105 if($prolms1 == 'installed'){
1084 1106 echo "<li class='" . esc_attr($quiz_page) . "'>
1085 1107 <a href='" . esc_url(site_url('wp-admin/admin.php?page=sch-quizzes')) . "'>
1086 - <i class='dashicons dashicons-calendar-alt icon'></i><span>" . $sch_quiz_result . "</span>
1108 + <i class='dashicons dashicons-calendar-alt icon'></i><span>" . esc_html($sch_quiz_result) . "</span>
1087 1109 </a>
1088 1110 </li>";
1089 1111 }
1090 1112 echo "<li class='".esc_attr($transport_page)."'>
1091 1113 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-transport'))."'>
1092 - <i class='icon wpsp-school-bus'></i><span>".$sch_transport."</span>
1114 + <i class='icon wpsp-school-bus'></i><span>".esc_html($sch_transport)."</span>
1093 1115 </a>
1094 1116 </li>";
1095 1117 if($prohistory['status']){
1096 1118 echo"<li class='".esc_attr($history_page)."'>
1097 1119 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-history'))."'>
1098 - <i class='icon fa fa-history'></i><span>".$sch_class_history."</span>
1120 + <i class='icon fa fa-history'></i><span>".esc_html($sch_class_history)."</span>
1099 1121 </a>
1100 1122 </li>";
1101 1123 }
1102 1124 if($propayment == "installed"){
@@ -1103,9 +1125,9 @@
1103 1125
1104 1126
1105 1127 echo "<li class='".esc_attr($payment_page_main)."'>
1106 1128 <a href='".esc_url(site_url('wp-admin/admin.php?page=sch-payment'))."'>
1107 - <i class='icon fa fa-money'></i><span>".$sch_payment."</span>
1129 + <i class='icon fa fa-money'></i><span>".esc_html($sch_payment)."</span>
1108 1130 </a>
1109 1131 </li>";
1110 1132
1111 1133 }
@@ -1260,9 +1282,9 @@
1260 1282 break;
1261 1283 case 'editprofile' :
1262 1284 $pagetitle="Edit Profile";
1263 1285 break;
1264 - case 'history' :
1286 + case 'history' :
1265 1287 $pagetitle="History";
1266 1288 break;
1267 1289 case 'lessons':
1268 1290 $pagetitle = "Lessons";
@@ -1275,8 +1297,14 @@
1275 1297 case 'questions':
1276 1298 $pagetitle = "Questions";
1277 1299 $addurl = $base_url . 'sch-questions&tab=addquestion';
1278 1300 break;
1301 + case 'addons':
1302 + $pagetitle = esc_html__( 'Addons', 'wpschoolpress' );
1303 + break;
1304 + case 'customization':
1305 + $pagetitle = esc_html__( 'Customization', 'wpschoolpress' );
1306 + break;
1279 1307 }
1280 1308 // echo $addurl;
1281 1309 //echo $result;
1282 1310 if((isset($_GET['sc'])) && ($_GET['sc'] == 'subField'))
@@ -1369,9 +1397,9 @@
1369 1397 /* This function used for footer copyright section */
1370 1398 function wpsp_body_end()
1371 1399 {
1372 1400 echo "<footer class='wpsp-footer'>
1373 - <p>Copyright &copy;".date('Y')." <a href='http://wpschoolpress.com' target='_blank'>WPSchoolPress</a>. All rights reserved. <span class='wpsp-right'>WPSchoolPress Version ".esc_html(WPSP_PLUGIN_VERSION,'wpschoolpress')."</span></p></footer>
1401 + <p>Copyright &copy;".esc_html(date('Y'))." <a href='".esc_url('http://wpschoolpress.com')."' target='_blank'>WPSchoolPress</a>. All rights reserved. <span class='wpsp-right'>WPSchoolPress Version ".esc_html(WPSP_PLUGIN_VERSION,'wpschoolpress')."</span></p></footer>
1374 1402 <!-- Control Sidebar -->
1375 1403 </section><!-- /.wpsp-container -->
1376 1404 </div><!-- /.wpsp-wrapper -->
1377 1405 </div><!-- ./wrapper -->";