From 016aee41633be50cb78989757f02ee77230e5a7b Mon Sep 17 00:00:00 2001 From: Robin Cornett Date: Wed, 17 Aug 2016 15:59:26 -0400 Subject: [PATCH] Cast term_id as int, escape term option --- includes/class-displayfeaturedimagegenesis-settings.php | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/includes/class-displayfeaturedimagegenesis-settings.php b/includes/class-displayfeaturedimagegenesis-settings.php index 7586f10..a618653 100644 --- a/includes/class-displayfeaturedimagegenesis-settings.php +++ b/includes/class-displayfeaturedimagegenesis-settings.php @@ -610,7 +610,10 @@ class Display_Featured_Image_Genesis_Settings extends Display_Featured_Image_Gen $message .= ''; @@ -656,8 +659,8 @@ class Display_Featured_Image_Genesis_Settings extends Display_Featured_Image_Gen return; } foreach ( $this->term_option_query as $term ) { - $term_id = str_replace( 'displayfeaturedimagegenesis_', '', $term ); - $option = get_option( $term, false ); + $term_id = (int) str_replace( 'displayfeaturedimagegenesis_', '', $term ); + $option = get_option( esc_attr( $term ), false ); if ( false !== $option ) { $image_id = (int) displayfeaturedimagegenesis_check_image_id( $option['term_image'] ); update_term_meta( $term_id, 'displayfeaturedimagegenesis', $image_id );