WordPress.org
Get WordPress

Plugin Directory

Changeset 2794561


Ignore:
Timestamp:
10/05/2022 01:21:15 PM (3 years ago)
Author:
lddwebdesign
Message:

sanitized post

File:
1 edited

Legend:

Unmodified
Added
Removed

  • ldd-directory-lite/trunk/includes/ajax.php

    r2788952 r2794561  
    5757   
    5858   
    59     $captcha=$_POST['g-recaptcha-response'];
     59    $captcha=esc_html($_POST['g-recaptcha-response']);
    6060        $secretkey = ldl()->get_option('google_recaptcha_secret');                 
    6161    $data = array(
    … …  
    146146
    147147    ldl()->update_option('allow_tracking_popup_done', true);
    148     ldl()->update_option('allow_tracking', $_POST['allow_tracking'] == 'yes' ? true : false);
     148    ldl()->update_option('allow_tracking', sanitize_text_field($_POST['allow_tracking']) == 'yes' ? true : false);
    149149
    150150    die;
Note: See TracChangeset for help on using the changeset viewer.