Changeset 3359404

Timestamp:

09/10/2025 07:02:20 PM (7 months ago)

Author:

GentleSource

Message:

Escape user input

Location:

appointmind/trunk

Files:

• appointmind.php (modified) (2 diffs)
• readme.txt (modified) (1 diff)

appointmind/trunk/appointmind.php

@@ -165 +165 @@
         if (!empty($attributes['id'])) {
             if (empty($appointmindUrlParameters)) {
-                $appointmindUrlParameters = '?cap=' . $attributes['id'];
+                $appointmindUrlParameters = '?cap=' . esc_attr($attributes['id']);
             } else {
-                $appointmindUrlParameters .= '&cap=' . $attributes['id'];
+                $appointmindUrlParameters .= '&cap=' . esc_attr($attributes['id']);
             }
         }
         if (!empty($attributes['reason'])) {
             if (empty($appointmindUrlParameters)) {
-                $appointmindUrlParameters = '?reason=' . $attributes['reason'];
+                $appointmindUrlParameters = '?reason=' . esc_attr($attributes['reason']);
             } else {
-                $appointmindUrlParameters .= '&reason=' . $attributes['reason'];
+                $appointmindUrlParameters .= '&reason=' . esc_attr($attributes['reason']);
             }
         }
         if (!empty($attributes['language'])) {
             if (empty($appointmindUrlParameters)) {
-                $appointmindUrlParameters = '?select_lang=' . $attributes['language'] . '_utf8';
+                $appointmindUrlParameters = '?select_lang=' . esc_attr($attributes['language']) . '_utf8';
             } else {
-                $appointmindUrlParameters .= '&select_lang=' . $attributes['language'] . '_utf8';
+                $appointmindUrlParameters .= '&select_lang=' . esc_attr($attributes['language']) . '_utf8';
             }
         }
@@ -228 +228 @@
         }
 
-        $formType = trim($attributes['form']);
+        $formType = esc_attr(trim($attributes['form']));
 
         $calendarContent = '';

appointmind/trunk/readme.txt

@@ -20 +20 @@
 
 == Changelog ==
+
+= 4.2.0 =
+
+Escape user input
 
 = 4.1.0 =