WordPress.org
Get WordPress

Plugin Directory

Changeset 2944887


Ignore:
Timestamp:
07/29/2023 11:43:37 AM (3 years ago)
Author:
mannweb
Message:

Forgot to add in the sanitize_text_field

File:
1 edited

Legend:

Unmodified
Added
Removed

  • simple-site-verify/trunk/simple-site-verify-settings.php

    r2944168 r2944887  
    8080
    8181    $options = get_option( 'ssv_settings' ); // Plugin Saved Settings
     82    $ssv_pinterest = sanitize_text_field( $options['ssv_pinterest'] );
    8283
    8384    ?>
    8485
    85     <input type='text' name='ssv_settings[ssv_pinterest]' <?php if (isset($options['ssv_pinterest'])) echo 'value="' . htmlspecialchars($options['ssv_pinterest'], ENT_QUOTES) . '"'; ?> id="pinterest" /><br />
     86    <input type='text' name='ssv_settings[ssv_pinterest]' <?php if (isset($options['ssv_pinterest'])) echo 'value="' . esc_html($ssv_pinterest) . '"'; ?> id="pinterest" /><br />
    8687This is your website's unique 32-character code. It is the code shown within content="" inside the meta tag given to you.
    8788
    … …  
    9495
    9596    $options = get_option( 'ssv_settings' ); // Plugin Saved Settings
     97    $ssv_google = sanitize_text_field( $options['ssv_google'] );
    9698
    9799    ?>
    98100
    99     <input type='text' name='ssv_settings[ssv_google]' <?php if (isset($options['ssv_google'])) echo 'value="' . htmlspecialchars($options['ssv_google'], ENT_QUOTES) . '"'; ?> id="google" /><br />
     101    <input type='text' name='ssv_settings[ssv_google]' <?php if (isset($options['ssv_google'])) echo 'value="' . htmlspecialchars($ssv_google) . '"'; ?> id="google" /><br />
    100102    Google Search Console/Google Apps. This is your website's unique code. It is the code shown within content="" inside the meta tag given to you.
    101103
    … …  
    108110
    109111    $options = get_option( 'ssv_settings' ); // Plugin Saved Settings
     112    $ssv_google_analytics = sanitize_text_field( $options['ssv_google_analytics'] );
    110113
    111114    ?>
    112115
    113     <input type='text' name='ssv_settings[ssv_google_analytics]' <?php if (isset($options['ssv_google_analytics'])) echo 'value="' . htmlspecialchars($options['ssv_google_analytics'], ENT_QUOTES) . '"'; ?> id="google-analytics" /><br />This is your website's unique code. It is the code shown within content="" inside the meta tag given to you.
     116    <input type='text' name='ssv_settings[ssv_google_analytics]' <?php if (isset($options['ssv_google_analytics'])) echo 'value="' . htmlspecialchars($ssv_google_analytics) . '"'; ?> id="google-analytics" /><br />This is your website's unique code. It is the code shown within content="" inside the meta tag given to you.
    114117
    115118    <?php
    … …  
    121124
    122125    $options = get_option( 'ssv_settings' ); // Plugin Saved Settings
     126    $ssv_bing = sanitize_text_field( $options['ssv_bing'] );
    123127
    124128    ?>
    125129
    126     <input type='text' name='ssv_settings[ssv_bing]' <?php if (isset($options['ssv_bing'])) echo 'value="' . htmlspecialchars($options['ssv_bing'], ENT_QUOTES) . '"'; ?> id="bing" /><br />This is your website's unique code. It is the code shown within content="" inside the meta tag given to you.
     130    <input type='text' name='ssv_settings[ssv_bing]' <?php if (isset($options['ssv_bing'])) echo 'value="' . htmlspecialchars($ssv_bing) . '"'; ?> id="bing" /><br />This is your website's unique code. It is the code shown within content="" inside the meta tag given to you.
    127131
    128132    <?php
    … …  
    134138
    135139    $options = get_option( 'ssv_settings' ); // Plugin Saved Settings
     140    $ssv_yandex = sanitize_text_field( $options['ssv_yandex'] );
    136141
    137142    ?>
    138143
    139     <input type='text' name='ssv_settings[ssv_yandex]' <?php if (isset($options['ssv_yandex'])) echo 'value="' . htmlspecialchars($options['ssv_yandex'], ENT_QUOTES) . '"'; ?> id="yandex" /><br />This is your website's unique code. It is the code shown within content="" inside the meta tag given to you.
     144    <input type='text' name='ssv_settings[ssv_yandex]' <?php if (isset($options['ssv_yandex'])) echo 'value="' . htmlspecialchars($ssv_yandex) . '"'; ?> id="yandex" /><br />This is your website's unique code. It is the code shown within content="" inside the meta tag given to you.
    140145
    141146
Note: See TracChangeset for help on using the changeset viewer.