Changeset 2742475

Timestamp:

06/14/2022 09:27:49 PM (4 years ago)

Author:

kuroit

Message:

Escaping vars

Location:

advanced-admin-search/trunk

Files:

• README.md (modified) (2 diffs)
• advanced-admin-search.php (modified) (1 diff)
• menu.php (modified) (3 diffs)

advanced-admin-search/trunk/README.md

@@ -5 +5 @@
 Requires at least: 3.9
 Tested up to: 6.0
-Stable tag: 1.1.5
+Stable tag: 1.1.6
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -79 +79 @@
 == Changelog ==
 
+= 1.1.6 =
+* Bug fixes
 = 1.1.5 =
 * Bug fixes

advanced-admin-search/trunk/advanced-admin-search.php

@@ -4 +4 @@
  * Plugin URI:        https://www.kuroit.com/product/advanced-admin-search
  * Description:       Easily search everything in WordPress admin panel from one single search field.
- * Version:           1.1.5
+ * Version:           1.1.6
  * Author:            Kuroit
  * Author URI:        https://www.kuroit.com

advanced-admin-search/trunk/menu.php

@@ -57 +57 @@
             <input type="hidden" class="input_page" name="page" value="advanced-admin-search">
             
-            <input name="keyword" class="input_search" type="text" value="<?php if(isset($selectedKeyword) && $selectedKeyword!='') _e($selectedKeyword, 'advanced-admin-search'); ?>" placeholder="Search in database" id="post_search_box1" autocomplete="off" required />
+            <input name="keyword" class="input_search" type="text" value="<?php if(isset($selectedKeyword) && $selectedKeyword!='') echo(esc_attr($selectedKeyword)); ?>" placeholder="Search in database" id="post_search_box1" autocomplete="off" required />
             
             <select name="select" class="select1">
@@ -81 +81 @@
             </select>
 
-            <input type="text" input class="input_page input_search" name="user" placeholder="Filter by author ID or username" value="<?php if(isset($selectedUser) && $selectedUser!='') _e($selectedUser, 'advanced-admin-search'); ?>"/></br>
+            <input type="text" input class="input_page input_search" name="user" placeholder="Filter by author ID or username" value="<?php if(isset($selectedUser) && $selectedUser!='') echo(esc_attr($selectedUser)); ?>"/></br>
 
             <div class="advanced_search">
@@ -87 +87 @@
                 <p><span><input type="checkbox" id="open_advance_search" /><label for="open_advance_search" class="highlighted_adv_label"><i>Check this box to enable meta search</i></label></span></p>
 
-                <input type="text" input class="input_key input_search" name="metaKey" placeholder="Filter by meta key" value="<?php if(isset($selectedMetaKey) && $selectedMetaKey!='') _e($selectedMetaKey, 'advanced-admin-search'); ?>" disabled="" title="Check the box above to enable meta search fields" />
-
-                <input type="text" input class="input_value input_search" name="metaValue" placeholder="Filter by meta value" value="<?php if(isset($selectedMetaVal) && $selectedMetaVal!='') _e($selectedMetaVal, 'advanced-admin-search'); ?>" disabled="" title="Check the box above to enable meta search fields" />
+                <input type="text" input class="input_key input_search" name="metaKey" placeholder="Filter by meta key" value="<?php if(isset($selectedMetaKey) && $selectedMetaKey!='') echo(esc_attr($selectedMetaKey)); ?>" disabled="" title="Check the box above to enable meta search fields" />
+
+                <input type="text" input class="input_value input_search" name="metaValue" placeholder="Filter by meta value" value="<?php if(isset($selectedMetaVal) && $selectedMetaVal!='') echo(esc_attr($selectedMetaVal)); ?>" disabled="" title="Check the box above to enable meta search fields" />
 
                 <select name="matchType" input class="select1" disabled="" title="Check the box above to enable meta search fields">