Changeset 3127808

Timestamp:

07/30/2024 05:50:39 AM (19 months ago)

Author:

hullcode

Message:

Some fields escaped

Location:

weather-in-any-city-widget/trunk

Files:

• README.txt (modified) (1 diff)
• weather-in-any-city-widget.php (modified) (7 diffs)

weather-in-any-city-widget/trunk/README.txt

@@ -4 +4 @@
 Tested up to: 6.5
 Requires PHP: 5.3
-Stable tag: 1.1.40
+Stable tag: 1.1.41
 License: GPLv2 or later
 

weather-in-any-city-widget/trunk/weather-in-any-city-widget.php

@@ -4 +4 @@
  * Plugin URI: https://weatherin.org
  * Description: Weather Widget Pro provides a complete weather forecast for any location around the world.
- * Version: 1.1.40
+ * Version: 1.1.41
  * Author: El tiempo
  * Author URI: https://eltiempoen.com
@@ -16 +16 @@
 defined( 'ABSPATH' ) or die( 'ABSPATH not defined' );
 
-define ('WIYCW_VERSION', '1.1.40');
+define ('WIYCW_VERSION', '1.1.41');
 define ('WIYCW_DEF_PLUGIN', 'weather-in-any-city-widget');
 define ('WIYCW_DEF_BASEURL', plugins_url('', __FILE__));
@@ -747 +747 @@
     if(!empty($instance['url_en']) && !empty($instance['url_es'])){
         if($lang == "es" || $lang == "es_ES" || $lang == "es_CL"){
-            $credits = "<a class='WIYCW-credit' style='text-decoration: none; color:".esc_attr($instance['textColor'])."' href='https://eltiempoen.com/".$instance['url_es']."'>El tiempo en ".$instance['city']."</a>";
+            $credits = "<a class='WIYCW-credit' style='text-decoration: none; color:".esc_attr($instance['textColor'])."' href='https://eltiempoen.com/".esc_attr($instance['url_es'])."'>El tiempo en ".esc_attr($instance['city'])."</a>";
         }else if(str_starts_with($lang, 'es')){
-            $credits = "<a class='WIYCW-credit' style='text-decoration: none; color:".esc_attr($instance['textColor'])."' href='https://eltiempoen.com/".$instance['url_es']."'>Clima en ".$instance['city']."</a>";
+            $credits = "<a class='WIYCW-credit' style='text-decoration: none; color:".esc_attr($instance['textColor'])."' href='https://eltiempoen.com/".esc_attr($instance['url_es'])."'>Clima en ".esc_attr($instance['city'])."</a>";
         }else{
-            $credits = "<a class='WIYCW-credit' style='text-decoration: none; color:".esc_attr($instance['textColor'])."' href='https://weatherin.org/".$instance['url_en']."'>".$instance['city']." weather</a>";
+            $credits = "<a class='WIYCW-credit' style='text-decoration: none; color:".esc_attr($instance['textColor'])."' href='https://weatherin.org/".esc_attr($instance['url_en'])."'>".esc_attr($instance['city'])." weather</a>";
         }
     }else{
@@ -780 +780 @@
         $output .= "<div class='WIYCW-shortcode'>";
     }
-    $output .= "<div class='WIYCW-wrapper $shadowClass'";
-    $output .= " style='font-size:".$instance['fontSize']."px;color:".$instance['textColor']."; background-color:".$instance['backgroundColor']."; border: solid 1px ".$instance['borderColor']."'";
+    $output .= "<div class='WIYCW-wrapper ".esc_attr($shadowClass)."'";
+    $output .= " style='font-size:".esc_attr($instance['fontSize'])."px;color:".esc_attr($instance['textColor'])."; background-color:".esc_attr($instance['backgroundColor'])."; border: solid 1px ".esc_attr($instance['borderColor'])."'";
     $output .= " data-version='".esc_attr(WIYCW_VERSION)."'";
     $output .= " data-path='".esc_url(WIYCW_DEF_BASEURL)."'";
@@ -836 +836 @@
         $output .=  "<div class='WIYCW-now-row-info'>";
         if($instance['now_sunrise'] == "on"){
-            $output .= "<div class='WIYCW-now-row-info-col'><img alt='Sunrise' class='WIYCW-item-icon $iconColorClass' src='$baseURL/resources/icons/ui-icons/sunrise.svg' style='width: 11px; height: 11px;'>-</div>";
-            $output .= "<div class='WIYCW-now-row-info-col'><img alt='Sunset' class='WIYCW-item-icon $iconColorClass' src='$baseURL/resources/icons/ui-icons/sunset.svg' style='width: 11px; height: 11px;'>-</div>";
+            $output .= "<div class='WIYCW-now-row-info-col'><img alt='Sunrise' class='WIYCW-item-icon ".esc_attr($iconColorClass)."' src='".esc_attr($baseURL)."/resources/icons/ui-icons/sunrise.svg' style='width: 11px; height: 11px;'>-</div>";
+            $output .= "<div class='WIYCW-now-row-info-col'><img alt='Sunset' class='WIYCW-item-icon ".esc_attr($iconColorClass)."' src='".esc_attr($baseURL)."/resources/icons/ui-icons/sunset.svg' style='width: 11px; height: 11px;'>-</div>";
         }
         if($instance['now_humidity'] == "on"){
-            $output .= "<div class='WIYCW-now-row-info-col'><img alt='Humidity'class='WIYCW-item-icon $iconColorClass' src='$baseURL/resources/icons/ui-icons/dew-point.svg' style='width: 11px; height: 11px;'>-</div>";
+            $output .= "<div class='WIYCW-now-row-info-col'><img alt='Humidity'class='WIYCW-item-icon ".esc_attr($iconColorClass)."' src='".esc_attr($baseURL)."/resources/icons/ui-icons/dew-point.svg' style='width: 11px; height: 11px;'>-</div>";
         }
 
         if($instance['now_wind'] == "on"){
-            $output .= "<div class='WIYCW-now-row-info-col'><img alt='Wind direction' class='WIYCW-item-icon $iconColorClass' src='$baseURL/resources/icons/ui-icons/arrow.svg' style='width: 11px; height: 11px;transform: rotate(0deg)'>-</div>";
+            $output .= "<div class='WIYCW-now-row-info-col'><img alt='Wind direction' class='WIYCW-item-icon ".esc_attr($iconColorClass)."' src='".esc_attr($baseURL)."/resources/icons/ui-icons/arrow.svg' style='width: 11px; height: 11px;transform: rotate(0deg)'>-</div>";
         }
 
         if($instance['now_pressure'] == "on"){
-            $output .= "<div class='WIYCW-now-row-info-col'><img alt='Pressure' class='WIYCW-item-icon $iconColorClass' src='$baseURL/resources/icons/ui-icons/pressure.svg' style='width: 11px; height: 11px;'>-</div>";
+            $output .= "<div class='WIYCW-now-row-info-col'><img alt='Pressure' class='WIYCW-item-icon ".esc_attr($iconColorClass)."' src='".esc_attr($baseURL)."/resources/icons/ui-icons/pressure.svg' style='width: 11px; height: 11px;'>-</div>";
         }
 
         if($instance['now_cloudiness'] == "on"){
-            $output .= "<div class='WIYCW-now-row-info-col'><img alt='Cloudiness'class='WIYCW-item-icon $iconColorClass' src='$baseURL/resources/icons/ui-icons/clouds.svg' style='width: 11px; height: 11px;'>-</div>";
+            $output .= "<div class='WIYCW-now-row-info-col'><img alt='Cloudiness'class='WIYCW-item-icon ".esc_attr($iconColorClass)."' src='".esc_attr($baseURL)."/resources/icons/ui-icons/clouds.svg' style='width: 11px; height: 11px;'>-</div>";
         }
 
@@ -860 +860 @@
 
     if($instance['days'] != "off"){
-        $output .= "<div class='WIYCW-forecast WIYCW-forecast-".$instance['layout']."'>";
+        $output .= "<div class='WIYCW-forecast WIYCW-forecast-".esc_attr($instance['layout'])."'>";
 
         for($WIYCWcounter=0; $WIYCWcounter < $instance['days']; $WIYCWcounter++){
@@ -873 +873 @@
             }
             if($instance['rainChance'] == "on"){
-                $output .= "<div class='WIYCW-forecast-pop WIYCW-col-1'><img alt='Rain chance' class='WIYCW-item-icon $iconColorClass' src='$baseURL/resources/icons/ui-icons/umbrella.svg' style='width: 11px; height: 11px;'>-</div>";
+                $output .= "<div class='WIYCW-forecast-pop WIYCW-col-1'><img alt='Rain chance' class='WIYCW-item-icon ".esc_attr($iconColorClass)."' src='".esc_attr($baseURL)."/resources/icons/ui-icons/umbrella.svg' style='width: 11px; height: 11px;'>-</div>";
             }
             if($instance['wind'] == "on"){
-                $output .= "<div class='WIYCW-forecast-pop WIYCW-col-1'><img alt='Wind direction' class='WIYCW-item-icon $iconColorClass' src='$baseURL/resources/icons/ui-icons/arrow.svg' style='width: 11px; height: 11px;transform: rotate(0deg);'>-</div>";
+                $output .= "<div class='WIYCW-forecast-pop WIYCW-col-1'><img alt='Wind direction' class='WIYCW-item-icon ".esc_attr($iconColorClass)."' src='".esc_attr($baseURL)."/resources/icons/ui-icons/arrow.svg' style='width: 11px; height: 11px;transform: rotate(0deg);'>-</div>";
             }