diff --git a/includes/admin/core/class-admin-dragdrop.php b/includes/admin/core/class-admin-dragdrop.php index 02f68e9e..18504e58 100644 --- a/includes/admin/core/class-admin-dragdrop.php +++ b/includes/admin/core/class-admin-dragdrop.php @@ -59,7 +59,7 @@ if ( ! class_exists( 'um\admin\core\Admin_DragDrop' ) ) { } foreach ( $_POST as $key => $value ) { - + // don't use sanitize_key here because of a key can be in Uppercase $key = sanitize_text_field( $key ); // adding rows diff --git a/includes/core/class-form.php b/includes/core/class-form.php index 0f8081ce..e8aa6c02 100644 --- a/includes/core/class-form.php +++ b/includes/core/class-form.php @@ -579,7 +579,7 @@ if ( ! class_exists( 'um\core\Form' ) ) { $form[ $k ] = (int) $form[ $k ]; break; case 'textarea': - if ( ! empty( $field['html'] ) ) { + if ( ! empty( $field['html'] ) || ( UM()->profile()->get_show_bio_key( $form ) === $k && UM()->options()->get( 'profile_show_html_bio' ) ) ) { $form[ $k ] = wp_kses_post( $form[ $k ] ); } else { $form[ $k ] = sanitize_textarea_field( $form[ $k ] );