mirror of
https://github.com/10h30/ultimatemember.git
synced 2026-06-05 15:09:37 +09:00
- added escape functions, security fix for XSS;
This commit is contained in:
@@ -24,7 +24,7 @@ class UM_Search_Widget extends \WP_Widget {
|
||||
'um_search_widget',
|
||||
|
||||
// Widget name will appear in UI
|
||||
__('Ultimate Member - Search', 'ultimate-member'),
|
||||
__( 'Ultimate Member - Search', 'ultimate-member' ),
|
||||
|
||||
// Widget description
|
||||
array( 'description' => __( 'Shows the search member form.', 'ultimate-member' ), )
|
||||
@@ -79,7 +79,9 @@ class UM_Search_Widget extends \WP_Widget {
|
||||
|
||||
<p>
|
||||
<label for="<?php echo esc_attr( $this->get_field_id( 'title' ) ); ?>"><?php _e( 'Title', 'ultimate-member' ); ?>:</label>
|
||||
<input class="widefat" id="<?php echo esc_attr( $this->get_field_id( 'title' ) ); ?>" name="<?php echo esc_attr( $this->get_field_name( 'title' ) ); ?>" type="text" value="<?php echo esc_attr( $title ); ?>" />
|
||||
<input class="widefat" id="<?php echo esc_attr( $this->get_field_id( 'title' ) ); ?>"
|
||||
name="<?php echo esc_attr( $this->get_field_name( 'title' ) ); ?>" type="text"
|
||||
value="<?php echo esc_attr( $title ); ?>" />
|
||||
</p>
|
||||
|
||||
<?php
|
||||
|
||||
Reference in New Issue
Block a user