Changeset 2722284

Timestamp:

05/11/2022 10:08:03 PM (4 years ago)

Author:

Reamaze

Message:

update 1.2.5

Location:

reamaze/tags/1.2.5/includes/admin/settings

Files:

• reamaze-settings-page.php (modified) (2 diffs)
• reamaze-settings-personal.php (modified) (1 diff)

reamaze/tags/1.2.5/includes/admin/settings/reamaze-settings-page.php

@@ -69 +69 @@
 
     foreach ( $options as $value ) {
+            global $allowedposttags;
       if ( ! isset( $value['id'] ) || ! isset( $value['type'] ) ) {
         continue;
@@ -74 +75 @@
 
       $option_name = $value['id'];
-      $option_value = isset( $_POST[ $value['id'] ] ) ? wp_unslash( $_POST[ $value['id'] ] ) : null;
-
-      switch ( sanitize_title( $value['type'] ) ) {
+            $option_value = '';
+
+            switch ( $value['type'] ) {
         case 'checkbox':
-          $option_value = is_null( $option_value ) ? 'no' : 'yes';
+          $option_value = is_null( $_POST[ $value['id'] ] ) ? 'no' : 'yes';
           break;
         case 'textarea':
           if ( ! ( isset( $value['raw'] ) && $value['raw'] ) ) {
-            $option_value = wp_kses_post( trim( $option_value ) );
-          }
-          break;
-        case 'text':
+            $option_value = sanitize_textarea_field( trim( $_POST[ $value['id'] ] ) );
+          } else {
+                        # we need to allow users to insert HTML, script tags, style tags.
+                        $option_value = trim( wp_unslash( $_POST[ $value['id'] ] ) );
+          }
+          break;
         case 'email':
-        case 'number':
-        case 'select':
-        case 'password':
-        case 'radio':
-          $option_value = sanitize_text_field( $option_value );
+          $option_value = sanitize_email( $_POST[ $value['id'] ] );
           break;
         case 'multiselect':
-          $option_value = array_filter( array_map( 'sanitize_text_field', (array) $option_value ) );
-          break;
-        default :
-                    $option_value = sanitize_text_field( $option_value );
+          $option_value = array_filter( array_map( 'sanitize_text_field', (array) $_POST[ $value['id'] ] ) );
+          break;
+        default:
+                $option_value = sanitize_text_field( $_POST[ $value['id'] ] );
           break;
       }

reamaze/tags/1.2.5/includes/admin/settings/reamaze-settings-personal.php

@@ -52 +52 @@
         'type'     => 'password',
         'default'  => '',
+                'raw'      => true,
         'user_setting' => true
       ),