From 11d03aa136a5e22c930fdb2e554762c34b8d3d6c Mon Sep 17 00:00:00 2001 From: Brian Miyaji Date: Sat, 6 Nov 2021 11:11:29 +0900 Subject: [PATCH] Add sanitization to taxonomies --- includes/admin/class-sp-admin-taxonomies.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/includes/admin/class-sp-admin-taxonomies.php b/includes/admin/class-sp-admin-taxonomies.php index a9fb7e19..61756dd6 100644 --- a/includes/admin/class-sp-admin-taxonomies.php +++ b/includes/admin/class-sp-admin-taxonomies.php @@ -244,13 +244,13 @@ class SP_Admin_Taxonomies { $cat_keys = array_keys( $_POST['term_meta'] ); foreach ( $cat_keys as $key ) { if ( isset ( $_POST['term_meta'][ $key ] ) ) { - $term_meta[$key] = $_POST['term_meta'][ $key ]; + $term_meta[$key] = sanitize_text_field( $_POST['term_meta'][ $key ] ); } } update_option( "taxonomy_$t_id", $term_meta ); } if ( function_exists( 'add_term_meta' ) ) { - update_term_meta( $term_id, 'sp_order', (int) sp_array_value( $_POST, 'sp_order', 0 ) ); + update_term_meta( $term_id, 'sp_order', (int) sp_array_value( $_POST, 'sp_order', 0, 'int' ) ); } }