- added escape functions, security fix for XSS;

This commit is contained in:
nikitasinelnikov
2019-08-08 00:36:33 +03:00
parent b2e57e8f92
commit 5f66fd5fe3
95 changed files with 2228 additions and 2026 deletions
+9 -9
View File
@@ -188,11 +188,11 @@ $free['terms-conditions'] = array(
foreach ( $premium as $key => $info ) { ?>
<div class="plugin-card">
<a href="<?php echo esc_attr( $info['url'] ); ?>" class="plugin-image">
<img src="<?php echo esc_attr( um_url . 'assets/img/extensions/' . $key . '.png' ); ?>" alt="<?php echo esc_attr( $info['name'] ) ?>" />
<a href="<?php echo esc_url( $info['url'] ); ?>" class="plugin-image">
<img src="<?php echo esc_url( um_url . 'assets/img/extensions/' . $key . '.png' ); ?>" alt="<?php echo esc_attr( $info['name'] ) ?>" />
</a>
<div class="plugin-card-top">
<h3><a href="<?php echo esc_attr( $info['url'] ); ?>"><?php echo $info['name']; ?></a></h3>
<h3><a href="<?php echo esc_url( $info['url'] ); ?>"><?php echo $info['name']; ?></a></h3>
<div class="desc column-description">
<?php echo $info['desc']; ?>
@@ -201,12 +201,12 @@ $free['terms-conditions'] = array(
<div class="action-links">
<ul class="plugin-action-buttons">
<li>
<a class="install-now button" href="<?php echo $info['url']; ?>">
<a class="install-now button" href="<?php echo esc_url( $info['url'] ); ?>">
<?php _e( 'Get this Add on', 'ultimate-member' ) ?>
</a>
</li>
<li>
<a href="<?php echo $info['url']; ?>">
<a href="<?php echo esc_url( $info['url'] ); ?>">
<?php _e( 'More Details', 'ultimate-member' ) ?>
</a>
</li>
@@ -222,11 +222,11 @@ $free['terms-conditions'] = array(
foreach ( $free as $key => $info ) { ?>
<div class="plugin-card">
<a href="<?php echo $info['url']; ?>" class="plugin-image">
<img src="<?php echo esc_attr( um_url . 'assets/img/extensions/' . $key . '.png' ); ?>" alt="<?php echo esc_attr( $info['name'] ) ?>" />
<a href="<?php echo esc_url( $info['url'] ); ?>" class="plugin-image">
<img src="<?php echo esc_url( um_url . 'assets/img/extensions/' . $key . '.png' ); ?>" alt="<?php echo esc_attr( $info['name'] ) ?>" />
</a>
<div class="plugin-card-top">
<h3><a href="<?php echo $info['url']; ?>"><?php echo $info['name']; ?></a></h3>
<h3><a href="<?php echo esc_url( $info['url'] ); ?>"><?php echo $info['name']; ?></a></h3>
<div class="desc column-description">
<?php echo $info['desc']; ?>
@@ -235,7 +235,7 @@ $free['terms-conditions'] = array(
<div class="action-links">
<ul class="plugin-action-buttons">
<li>
<a class="install-now button" href="<?php echo $info['url']; ?>">
<a class="install-now button" href="<?php echo esc_url( $info['url'] ); ?>">
<?php _e( 'Get this Add on', 'ultimate-member' ) ?>
</a>
</li>