10h30/display-featured-image-genesis
1
0
Fork 0
mirror of https://github.com/10h30/display-featured-image-genesis.git synced 2026-07-20 06:53:23 +09:00
Code Issues Packages Projects Releases Wiki Activity

Fix author/post meta sanitization

Browse Source
This commit is contained in:
Robin Cornett
2019-05-14 18:46:41 -04:00
parent 693c2051bd
commit e452341bf2
2 changed files with 20 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
includes/meta/class-displayfeaturedimagegenesis-postmeta.php
+3 -3
View File
@@ -6,7 +6,7 @@
* @author Robin Cornett <hello@robincornett.com>
* @license GPL-2.0+
* @link https://robincornett.com
* @copyright 2014-2017 Robin Cornett Creative, LLC
* @copyright 2014-2019 Robin Cornett Creative, LLC
*/
class Display_Featured_Image_Genesis_Post_Meta {
@@ -232,7 +232,7 @@ class Display_Featured_Image_Genesis_Post_Meta {
$checkboxes = $this->get_checkboxes();
foreach ( $checkboxes as $checkbox ) {
if ( isset( $_POST[ $checkbox['setting'] ] ) ) {
if ( filter_input( INPUT_POST, $checkbox['setting'], FILTER_DEFAULT ) ) {
update_post_meta( $post_id, $checkbox['setting'], 1 );
} else {
delete_post_meta( $post_id, $checkbox['setting'] );
@@ -241,7 +241,7 @@ class Display_Featured_Image_Genesis_Post_Meta {
$select = $this->get_select();
foreach ( $select as $s ) {
$value = sanitize_text_field( $_POST[ $s['setting'] ] );
$value = filter_input( INPUT_POST, $s['setting'], FILTER_DEFAULT );
$value = is_numeric( $value ) ? (int) $value : esc_attr( $value );
update_post_meta( $post_id, $s['setting'], $value );
}