WordPress.org
Get WordPress

Plugin Directory

Changeset 1665258


Ignore:
Timestamp:
05/26/2017 07:34:45 AM (9 years ago)
Author:
mideal
Message:

Validation Sanitizing

Location:
question-answer-faq
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • question-answer-faq/tags/1.1.1/mideal-faq.php

    r1664980 r1665258  
    292292    if ( ! isset( $_POST['mideal_faq_answer'] ) ) return $post_id;
    293293   
    294     $my_data = sanitize_text_field( $_POST['mideal_faq_answer'] );
    295     $my_data2 = sanitize_text_field( $_POST['mideal_faq_email'] );
     294    $my_data = sanitize_text_field( nl2br($_POST['mideal_faq_answer']) );
     295    $my_data2 = sanitize_email( $_POST['mideal_faq_email'] );
    296296
    297297    update_post_meta( $post_id, 'mideal_faq_answer', $my_data );
    … …  
    498498    $post_id = wp_insert_post( $post_data );
    499499    if( $post_id ){
    500         if( is_email( $_POST['mideal_faq_email'] ) ){
    501             update_post_meta( $post_id, 'mideal_faq_email', $_POST['mideal_faq_email'] );
    502         }
    503 
     500        $user_email = sanitize_email( $_POST['mideal_faq_email']);
     501        update_post_meta( $post_id, 'mideal_faq_email', $user_email );
    504502
    505503
    … …  
    514512        }
    515513
    516         $username  = nl2br($_POST['mideal_faq_name']);
    517         $usermail = $_POST['mideal_faq_email'];
    518         $faq_content  = nl2br($_POST['mideal_faq_question']);
     514        $username  = sanitize_text_field($_POST['mideal_faq_name']);
     515        $usermail = sanitize_email($_POST['mideal_faq_email']);
     516        $faq_content  = sanitize_text_field(nl2br($_POST['mideal_faq_question']));
    519517        $msg  = "<html><body style='font-family:Arial,sans-serif;'>";
    520518        $msg .= "<h2 style='font-weight:bold;border-bottom:1px dotted #ccc;'>".__('New question on site', 'mideal-faq').":</h2>\r\n";

  • question-answer-faq/trunk/mideal-faq.php

    r1664980 r1665258  
    292292    if ( ! isset( $_POST['mideal_faq_answer'] ) ) return $post_id;
    293293   
    294     $my_data = sanitize_text_field( $_POST['mideal_faq_answer'] );
    295     $my_data2 = sanitize_text_field( $_POST['mideal_faq_email'] );
     294    $my_data = sanitize_text_field( nl2br($_POST['mideal_faq_answer']) );
     295    $my_data2 = sanitize_email( $_POST['mideal_faq_email'] );
    296296
    297297    update_post_meta( $post_id, 'mideal_faq_answer', $my_data );
    … …  
    498498    $post_id = wp_insert_post( $post_data );
    499499    if( $post_id ){
    500         if( is_email( $_POST['mideal_faq_email'] ) ){
    501             update_post_meta( $post_id, 'mideal_faq_email', $_POST['mideal_faq_email'] );
    502         }
    503 
     500        $user_email = sanitize_email( $_POST['mideal_faq_email']);
     501        update_post_meta( $post_id, 'mideal_faq_email', $user_email );
    504502
    505503
    … …  
    514512        }
    515513
    516         $username  = nl2br($_POST['mideal_faq_name']);
    517         $usermail = $_POST['mideal_faq_email'];
    518         $faq_content  = nl2br($_POST['mideal_faq_question']);
     514        $username  = sanitize_text_field($_POST['mideal_faq_name']);
     515        $usermail = sanitize_email($_POST['mideal_faq_email']);
     516        $faq_content  = sanitize_text_field(nl2br($_POST['mideal_faq_question']));
    519517        $msg  = "<html><body style='font-family:Arial,sans-serif;'>";
    520518        $msg .= "<h2 style='font-weight:bold;border-bottom:1px dotted #ccc;'>".__('New question on site', 'mideal-faq').":</h2>\r\n";
Note: See TracChangeset for help on using the changeset viewer.