diff --git a/includes/admin/class-sp-admin-dashboard.php b/includes/admin/class-sp-admin-dashboard.php index cd7b2eaa..bafd2ddd 100644 --- a/includes/admin/class-sp-admin-dashboard.php +++ b/includes/admin/class-sp-admin-dashboard.php @@ -79,7 +79,7 @@ class SP_Admin_Dashboard {
  • %s until next event', 'sportspress' ), $interval->days . ' ' . __( 'days', 'sportspress' ) . ' ' . sprintf( '%02s:%02s:%02s', $interval->h, $interval->i, $interval->s ) ); ?> - (post_title ); ?>) + (post_title ); ?>)
    • @@ -113,7 +113,7 @@ class SP_Admin_Dashboard {
    diff --git a/includes/admin/class-sp-admin-setup-wizard.php b/includes/admin/class-sp-admin-setup-wizard.php index a3b9c55b..27433d3b 100644 --- a/includes/admin/class-sp-admin-setup-wizard.php +++ b/includes/admin/class-sp-admin-setup-wizard.php @@ -140,7 +140,7 @@ class SP_Admin_Setup_Wizard { - <?php _e( 'SportsPress', 'sportspress' ); ?> › <?php echo esc_attr( $this->steps[ $this->step ]['name'] ); ?> + <?php _e( 'SportsPress', 'sportspress' ); ?> › <?php echo esc_html( $this->steps[ $this->step ]['name'] ); ?> @@ -264,7 +264,7 @@ class SP_Admin_Setup_Wizard { $val ) { ?> - + @@ -604,7 +604,7 @@ class SP_Admin_Setup_Wizard { if ( ! is_object( $obj ) ) continue; ?> - labels->singular_name ); ?> + labels->singular_name ); ?> @@ -779,7 +779,7 @@ class SP_Admin_Setup_Wizard {
    $step ) { ?>
    -

    +

    diff --git a/includes/admin/importers/class-sp-event-importer.php b/includes/admin/importers/class-sp-event-importer.php index b297d114..79534ded 100644 --- a/includes/admin/importers/class-sp-event-importer.php +++ b/includes/admin/importers/class-sp-event-importer.php @@ -475,7 +475,7 @@ if ( class_exists( 'WP_Importer' ) ) { event as $name => $title ) { ?> -
    • +
    • diff --git a/includes/admin/importers/class-sp-importer.php b/includes/admin/importers/class-sp-importer.php index 78c91b96..7fa3a76d 100644 --- a/includes/admin/importers/class-sp-importer.php +++ b/includes/admin/importers/class-sp-importer.php @@ -101,7 +101,7 @@ if ( class_exists( 'WP_Importer' ) ) { post_title ); + echo esc_html( $team->post_title ); if ( $team_id == $current_team ): echo ''; endif; diff --git a/includes/admin/post-types/class-sp-admin-cpt-column.php b/includes/admin/post-types/class-sp-admin-cpt-column.php index 053e422b..b8003fc7 100644 --- a/includes/admin/post-types/class-sp-admin-cpt-column.php +++ b/includes/admin/post-types/class-sp-admin-cpt-column.php @@ -58,20 +58,20 @@ class SP_Admin_CPT_Column extends SP_Admin_CPT { switch ( $column ): case 'sp_key': global $post; - echo esc_attr( $post->post_name ); + echo esc_html( $post->post_name ); break; case 'sp_equation': - echo sp_get_post_equation( $post_id ); + echo esc_html( sp_get_post_equation( $post_id ) ); break; case 'sp_precision': - echo sp_get_post_precision( $post_id ); + echo esc_html( sp_get_post_precision( $post_id ) ); break; case 'sp_order': - echo sp_get_post_order( $post_id ); + echo esc_html( sp_get_post_order( $post_id ) ); break; case 'sp_description': global $post; - echo '' . $post->post_excerpt . ''; + echo '' . wp_kses_post( $post->post_excerpt ) . ''; break; endswitch; } diff --git a/includes/admin/post-types/class-sp-admin-cpt-event.php b/includes/admin/post-types/class-sp-admin-cpt-event.php index cd33a221..1e0a2db4 100644 --- a/includes/admin/post-types/class-sp-admin-cpt-event.php +++ b/includes/admin/post-types/class-sp-admin-cpt-event.php @@ -220,7 +220,7 @@ class SP_Admin_CPT_Event extends SP_Admin_CPT { echo '' . ( $team_result == '' ? '-' : apply_filters( 'sportspress_event_team_result_admin', $team_result, $post_id, $team_id ) ) . ''; echo ' '; - echo esc_attr( $team->post_title ); + echo esc_html( $team->post_title ); echo '
    '; endif; endforeach; @@ -248,7 +248,7 @@ class SP_Admin_CPT_Event extends SP_Admin_CPT { case 'sp_day': $day = get_post_meta ( $post_id, 'sp_day', true ); if ( '' === $day ) $day = __( 'Default', 'sportspress' ); - echo esc_attr( $day ); + echo esc_html( $day ); break; endswitch; } diff --git a/includes/admin/post-types/class-sp-admin-cpt-list.php b/includes/admin/post-types/class-sp-admin-cpt-list.php index 337233c5..003f9dd1 100644 --- a/includes/admin/post-types/class-sp-admin-cpt-list.php +++ b/includes/admin/post-types/class-sp-admin-cpt-list.php @@ -85,7 +85,7 @@ class SP_Admin_CPT_List extends SP_Admin_CPT { foreach( $teams as $team_id ): if ( ! $team_id ) continue; $team = get_post( $team_id ); - if ( $team ) echo esc_attr( $team->post_title ) . '
    '; + if ( $team ) echo esc_html( $team->post_title ) . '
    '; endforeach; endif; break; diff --git a/includes/admin/post-types/class-sp-admin-cpt-metric.php b/includes/admin/post-types/class-sp-admin-cpt-metric.php index 92887585..4293858a 100644 --- a/includes/admin/post-types/class-sp-admin-cpt-metric.php +++ b/includes/admin/post-types/class-sp-admin-cpt-metric.php @@ -55,11 +55,11 @@ class SP_Admin_CPT_Metric extends SP_Admin_CPT { switch ( $column ): case 'sp_key': global $post; - echo esc_attr( $post->post_name ); + echo esc_html( $post->post_name ); break; case 'sp_description': global $post; - echo '' . $post->post_excerpt . ''; + echo '' . wp_kses_post( $post->post_excerpt ) . ''; break; endswitch; } diff --git a/includes/admin/post-types/class-sp-admin-cpt-outcome.php b/includes/admin/post-types/class-sp-admin-cpt-outcome.php index e9bf8802..73fbe870 100644 --- a/includes/admin/post-types/class-sp-admin-cpt-outcome.php +++ b/includes/admin/post-types/class-sp-admin-cpt-outcome.php @@ -56,15 +56,15 @@ class SP_Admin_CPT_Outcome extends SP_Admin_CPT { switch ( $column ): case 'sp_key': global $post; - echo esc_attr( $post->post_name ); + echo esc_html( $post->post_name ); break; case 'sp_abbreviation': global $post; - echo sp_get_post_abbreviation( $post->ID ); + echo esc_html( sp_get_post_abbreviation( $post->ID ) ); break; case 'sp_description': global $post; - echo '' . $post->post_excerpt . ''; + echo '' . wp_kses_post( $post->post_excerpt ) . ''; break; endswitch; } diff --git a/includes/admin/post-types/class-sp-admin-cpt-performance.php b/includes/admin/post-types/class-sp-admin-cpt-performance.php index 58d6cc40..1425ad85 100644 --- a/includes/admin/post-types/class-sp-admin-cpt-performance.php +++ b/includes/admin/post-types/class-sp-admin-cpt-performance.php @@ -61,19 +61,19 @@ class SP_Admin_CPT_Performance extends SP_Admin_CPT { break; case 'sp_key': global $post; - echo esc_attr( $post->post_name ); + echo esc_html( $post->post_name ); break; case 'sp_section': global $post; - echo sp_get_post_section( $post->ID ); + echo esc_html( sp_get_post_section( $post->ID ) ); break; case 'sp_config_format': global $post; - echo sp_get_post_format( $post->ID ); + echo esc_html( sp_get_post_format( $post->ID ) ); break; case 'sp_description': global $post; - echo '' . $post->post_excerpt . ''; + echo '' . wp_kses_post( $post->post_excerpt ) . ''; break; endswitch; } diff --git a/includes/admin/post-types/class-sp-admin-cpt-player.php b/includes/admin/post-types/class-sp-admin-cpt-player.php index 1a67ee4a..df584d6b 100755 --- a/includes/admin/post-types/class-sp-admin-cpt-player.php +++ b/includes/admin/post-types/class-sp-admin-cpt-player.php @@ -110,7 +110,7 @@ class SP_Admin_CPT_Player extends SP_Admin_CPT { if ( ! $team_id ) continue; $team = get_post( $team_id ); if ( $team ): - echo esc_attr( $team->post_title ); + echo esc_html( $team->post_title ); if ( in_array( $team_id, $current_teams ) ): echo ''; endif; @@ -257,14 +257,14 @@ class SP_Admin_CPT_Player extends SP_Admin_CPT {
    diff --git a/includes/admin/post-types/class-sp-admin-cpt-result.php b/includes/admin/post-types/class-sp-admin-cpt-result.php index 045bee9b..36173767 100644 --- a/includes/admin/post-types/class-sp-admin-cpt-result.php +++ b/includes/admin/post-types/class-sp-admin-cpt-result.php @@ -55,7 +55,7 @@ class SP_Admin_CPT_Result extends SP_Admin_CPT { switch ( $column ): case 'sp_key': global $post; - echo esc_attr( $post->post_name ) . 'for, ' . esc_attr( $post->post_name ) . 'against'; + echo esc_html( $post->post_name ) . 'for, ' . esc_html( $post->post_name ) . 'against'; break; case 'sp_description': global $post; diff --git a/includes/admin/post-types/class-sp-admin-cpt-spec.php b/includes/admin/post-types/class-sp-admin-cpt-spec.php index 668f52fe..9354fa3f 100644 --- a/includes/admin/post-types/class-sp-admin-cpt-spec.php +++ b/includes/admin/post-types/class-sp-admin-cpt-spec.php @@ -55,11 +55,11 @@ class SP_Admin_CPT_Spec extends SP_Admin_CPT { switch ( $column ): case 'sp_key': global $post; - echo esc_attr( $post->post_name ); + echo esc_html( $post->post_name ); break; case 'sp_description': global $post; - echo '' . $post->post_excerpt . ''; + echo '' . wp_kses_post( $post->post_excerpt ) . ''; break; endswitch; } diff --git a/includes/admin/post-types/class-sp-admin-cpt-staff.php b/includes/admin/post-types/class-sp-admin-cpt-staff.php index aa66079e..57e2b0ad 100644 --- a/includes/admin/post-types/class-sp-admin-cpt-staff.php +++ b/includes/admin/post-types/class-sp-admin-cpt-staff.php @@ -92,7 +92,7 @@ class SP_Admin_CPT_Staff extends SP_Admin_CPT { if ( ! $team_id ) continue; $team = get_post( $team_id ); if ( $team ): - echo esc_attr( $team->post_title ); + echo esc_html( $team->post_title ); if ( in_array( $team_id, $current_teams ) ): echo ''; endif; diff --git a/includes/admin/post-types/class-sp-admin-cpt-statistic.php b/includes/admin/post-types/class-sp-admin-cpt-statistic.php index 016b3736..aa4b7e98 100644 --- a/includes/admin/post-types/class-sp-admin-cpt-statistic.php +++ b/includes/admin/post-types/class-sp-admin-cpt-statistic.php @@ -61,13 +61,13 @@ class SP_Admin_CPT_Statistic extends SP_Admin_CPT { break; case 'sp_key': global $post; - echo esc_attr( $post->post_name ); + echo esc_html( $post->post_name ); break; case 'sp_equation': - echo sp_get_post_equation( $post_id ); + echo esc_html( sp_get_post_equation( $post_id ) ); break; case 'sp_precision': - echo sp_get_post_precision( $post_id ); + echo esc_html( sp_get_post_precision( $post_id ) ); break; case 'sp_description': global $post; diff --git a/includes/admin/post-types/meta-boxes/class-sp-meta-box-calendar-format.php b/includes/admin/post-types/meta-boxes/class-sp-meta-box-calendar-format.php index 38662710..4685a4af 100644 --- a/includes/admin/post-types/meta-boxes/class-sp-meta-box-calendar-format.php +++ b/includes/admin/post-types/meta-boxes/class-sp-meta-box-calendar-format.php @@ -24,7 +24,7 @@ class SP_Meta_Box_Calendar_Format { ?>
    formats->calendar as $key => $format ): ?> - >
    + >
    $countries ): ?> $country ): ?> - + diff --git a/includes/admin/post-types/meta-boxes/class-sp-meta-box-table-details.php b/includes/admin/post-types/meta-boxes/class-sp-meta-box-table-details.php index 42926f06..2de7249f 100644 --- a/includes/admin/post-types/meta-boxes/class-sp-meta-box-table-details.php +++ b/includes/admin/post-types/meta-boxes/class-sp-meta-box-table-details.php @@ -81,7 +81,7 @@ class SP_Meta_Box_Table_Details { do_action( 'sportspress_meta_box_table_details', $post->ID ); ?>

    - ID ); ?> + ID ) ); ?>

    >
    + >

    > post_title ); ?> post_name ); ?> - ID ); ?> - ID ); ?> + ID ) ); ?> + ID ) ); ?>

    post_excerpt ); ?>

    @@ -216,8 +216,8 @@ $columns = get_option( 'sportspress_player_columns', 'auto' ); post_title ); ?> post_name ); ?> - ID ); ?> - ID ); ?> + ID ) ); ?> + ID ) ); ?>