- fixed sanitizing of the forms and member directories;

This commit is contained in:
Nikita Sinelnikov
2021-06-30 13:31:51 +03:00
parent 0fc2d131ee
commit 18dea8f622
+38 -2
View File
@@ -977,7 +977,11 @@ if ( ! class_exists( 'um\admin\Admin' ) ) {
$sanitized[ $k ] = (bool) $v;
break;
case 'url':
$sanitized[ $k ] = esc_url_raw( $v );
if ( is_array( $v ) ) {
$sanitized[ $k ] = array_map( 'esc_url_raw', $v );
} else {
$sanitized[ $k ] = esc_url_raw( $v );
}
break;
case 'text':
$sanitized[ $k ] = sanitize_text_field( $v );
@@ -985,6 +989,20 @@ if ( ! class_exists( 'um\admin\Admin' ) ) {
case 'textarea':
$sanitized[ $k ] = sanitize_textarea_field( $v );
break;
case 'key':
if ( is_array( $v ) ) {
$sanitized[ $k ] = array_map( 'sanitize_key', $v );
} else {
$sanitized[ $k ] = sanitize_key( $v );
}
break;
case 'absint':
if ( is_array( $v ) ) {
$sanitized[ $k ] = array_map( 'absint', $v );
} else {
$sanitized[ $k ] = absint( $v );
}
break;
}
}
@@ -1035,7 +1053,11 @@ if ( ! class_exists( 'um\admin\Admin' ) ) {
$sanitized[ $k ] = (bool) $v;
break;
case 'url':
$sanitized[ $k ] = esc_url_raw( $v );
if ( is_array( $v ) ) {
$sanitized[ $k ] = array_map( 'esc_url_raw', $v );
} else {
$sanitized[ $k ] = esc_url_raw( $v );
}
break;
case 'text':
$sanitized[ $k ] = sanitize_text_field( $v );
@@ -1043,6 +1065,20 @@ if ( ! class_exists( 'um\admin\Admin' ) ) {
case 'textarea':
$sanitized[ $k ] = sanitize_textarea_field( $v );
break;
case 'key':
if ( is_array( $v ) ) {
$sanitized[ $k ] = array_map( 'sanitize_key', $v );
} else {
$sanitized[ $k ] = sanitize_key( $v );
}
break;
case 'absint':
if ( is_array( $v ) ) {
$sanitized[ $k ] = array_map( 'absint', $v );
} else {
$sanitized[ $k ] = absint( $v );
}
break;
}
}