From 1baf3758829f28d86726fe751f48a18ef52b6032 Mon Sep 17 00:00:00 2001 From: Brian Miyaji Date: Sat, 6 Nov 2021 00:27:00 +0900 Subject: [PATCH] Fix sanitize title filter --- includes/sp-template-hooks.php | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/includes/sp-template-hooks.php b/includes/sp-template-hooks.php index a6844ce3..ec429999 100644 --- a/includes/sp-template-hooks.php +++ b/includes/sp-template-hooks.php @@ -227,13 +227,13 @@ function sportspress_sanitize_title( $title ) { elseif ( isset( $_POST ) && array_key_exists( 'post_type', $_POST ) && is_sp_config_type( $_POST['post_type'] ) ): - $key = isset( $_POST['sp_key'] ) ? sanitize_title( $_POST['sp_key'] ) : null; + $key = isset( $_POST['sp_key'] ) ? sanitize_text_field( $_POST['sp_key'] ) : null; - if ( ! $key ) $key = isset( $_POST['sp_default_key'] ) ? sanitize_title( $_POST['sp_default_key'] ) : null; + if ( ! $key ) $key = isset( $_POST['sp_default_key'] ) ? sanitize_text_field( $_POST['sp_default_key'] ) : null; - if ( ! $key ) $key = sanitize_title( $_POST['post_title'] ); + if ( ! $key ) $key = sanitize_text_field( $_POST['post_title'] ); - $id = intval( sp_array_value( $_POST, 'post_ID', 'var' ) ); + $id = sp_array_value( $_POST, 'post_ID', 'var', 'text' ); $title = sp_get_eos_safe_slug( $key, $id );