Changeset 13994 for trunk/src/bp-xprofile/bp-xprofile-filters.php
- Timestamp:
- 08/07/2024 01:46:38 AM (23 months ago)
- File:
-
- 1 edited
-
trunk/src/bp-xprofile/bp-xprofile-filters.php (modified) (15 diffs)
Legend:
- Unmodified
- Added
- Removed
-
trunk/src/bp-xprofile/bp-xprofile-filters.php
r13878 r13994 13 13 defined( 'ABSPATH' ) || exit; 14 14 15 add_filter( 'bp_get_the_profile_group_name', 'wp_filter_kses', 1 );15 add_filter( 'bp_get_the_profile_group_name', 'wp_filter_kses', 1 ); 16 16 add_filter( 'bp_get_the_profile_group_description', 'wp_filter_kses', 1 ); 17 add_filter( 'bp_get_the_profile_field_name', 'wp_filter_kses', 1 );18 add_filter( 'bp_get_the_profile_field_edit_value', 'xprofile_sanitize_data_value_before_display', 1, 3 );17 add_filter( 'bp_get_the_profile_field_name', 'wp_filter_kses', 1 ); 18 add_filter( 'bp_get_the_profile_field_edit_value', 'xprofile_sanitize_data_value_before_display', 1, 3 ); 19 19 add_filter( 'bp_get_the_profile_field_description', 'wp_filter_kses', 1 ); 20 add_filter( 'bp_get_the_profile_field_value', 'xprofile_sanitize_data_value_before_display', 1, 3 );21 22 add_filter( 'bp_get_the_profile_field_value', 'wptexturize');23 add_filter( 'bp_get_the_profile_field_value', 'convert_chars');24 add_filter( 'bp_get_the_profile_field_value', 'wpautop');25 add_filter( 'bp_get_the_profile_field_value', 'force_balance_tags' );26 add_filter( 'bp_get_the_profile_field_value', 'make_clickable');27 add_filter( 'bp_get_the_profile_field_value', 'bp_xprofile_escape_field_data', 8, 3 );28 add_filter( 'bp_get_the_profile_field_value', 'convert_smilies', 9 );29 add_filter( 'bp_get_the_profile_field_value', 'xprofile_filter_format_field_value',1, 2 );30 add_filter( 'bp_get_the_profile_field_value', 'xprofile_filter_format_field_value_by_type', 8, 3 );31 add_filter( 'bp_get_the_profile_field_value', 'xprofile_filter_link_profile_data',9, 3 );32 33 add_filter( 'bp_get_the_profile_field_edit_value', 'force_balance_tags' );34 add_filter( 'bp_get_the_profile_field_edit_value', 'bp_xprofile_escape_field_data', 10, 3 );35 36 add_filter( 'bp_get_the_profile_group_name', 'stripslashes' );37 add_filter( 'bp_get_the_profile_group_description', 'stripslashes' );38 add_filter( 'bp_get_the_profile_field_value', 'stripslashes' );39 add_filter( 'bp_get_the_profile_field_edit_value', 'stripslashes' );40 add_filter( 'bp_get_the_profile_field_name', 'stripslashes' );41 add_filter( 'bp_get_the_profile_field_description', 'stripslashes' );42 43 add_filter( 'xprofile_get_field_data', 'xprofile_sanitize_data_value_before_display_from_get_field_data', 1, 2 );44 add_filter( 'xprofile_field_name_before_save', 'wp_filter_kses', 1 );45 add_filter( 'xprofile_field_description_before_save', 'wp_filter_kses', 1 );46 47 add_filter( 'xprofile_get_field_data', 'force_balance_tags' );48 add_filter( 'xprofile_field_name_before_save', 'force_balance_tags' );49 add_filter( 'xprofile_field_description_before_save', 'force_balance_tags' );50 51 add_filter( 'xprofile_get_field_data', 'stripslashes' );52 add_filter( 'xprofile_get_field_data', 'xprofile_filter_format_field_value_by_field_id', 5, 2 );53 54 add_filter( 'bp_xprofile_set_field_data_pre_validate', 'xprofile_filter_pre_validate_value_by_field_type', 10, 3 );55 add_filter( 'xprofile_data_value_before_save', 'xprofile_sanitize_data_value_before_save', 1, 4 );20 add_filter( 'bp_get_the_profile_field_value', 'xprofile_sanitize_data_value_before_display', 1, 3 ); 21 22 add_filter( 'bp_get_the_profile_field_value', 'wptexturize' ); 23 add_filter( 'bp_get_the_profile_field_value', 'convert_chars' ); 24 add_filter( 'bp_get_the_profile_field_value', 'wpautop' ); 25 add_filter( 'bp_get_the_profile_field_value', 'force_balance_tags' ); 26 add_filter( 'bp_get_the_profile_field_value', 'make_clickable' ); 27 add_filter( 'bp_get_the_profile_field_value', 'bp_xprofile_escape_field_data', 8, 3 ); 28 add_filter( 'bp_get_the_profile_field_value', 'convert_smilies', 9 ); 29 add_filter( 'bp_get_the_profile_field_value', 'xprofile_filter_format_field_value', 1, 2 ); 30 add_filter( 'bp_get_the_profile_field_value', 'xprofile_filter_format_field_value_by_type', 8, 3 ); 31 add_filter( 'bp_get_the_profile_field_value', 'xprofile_filter_link_profile_data', 9, 3 ); 32 33 add_filter( 'bp_get_the_profile_field_edit_value', 'force_balance_tags' ); 34 add_filter( 'bp_get_the_profile_field_edit_value', 'bp_xprofile_escape_field_data', 10, 3 ); 35 36 add_filter( 'bp_get_the_profile_group_name', 'stripslashes' ); 37 add_filter( 'bp_get_the_profile_group_description', 'stripslashes' ); 38 add_filter( 'bp_get_the_profile_field_value', 'stripslashes' ); 39 add_filter( 'bp_get_the_profile_field_edit_value', 'stripslashes' ); 40 add_filter( 'bp_get_the_profile_field_name', 'stripslashes' ); 41 add_filter( 'bp_get_the_profile_field_description', 'stripslashes' ); 42 43 add_filter( 'xprofile_get_field_data', 'xprofile_sanitize_data_value_before_display_from_get_field_data', 1, 2 ); 44 add_filter( 'xprofile_field_name_before_save', 'wp_filter_kses', 1 ); 45 add_filter( 'xprofile_field_description_before_save', 'wp_filter_kses', 1 ); 46 47 add_filter( 'xprofile_get_field_data', 'force_balance_tags' ); 48 add_filter( 'xprofile_field_name_before_save', 'force_balance_tags' ); 49 add_filter( 'xprofile_field_description_before_save', 'force_balance_tags' ); 50 51 add_filter( 'xprofile_get_field_data', 'stripslashes' ); 52 add_filter( 'xprofile_get_field_data', 'xprofile_filter_format_field_value_by_field_id', 5, 2 ); 53 54 add_filter( 'bp_xprofile_set_field_data_pre_validate', 'xprofile_filter_pre_validate_value_by_field_type', 10, 3 ); 55 add_filter( 'xprofile_data_value_before_save', 'xprofile_sanitize_data_value_before_save', 1, 4 ); 56 56 add_filter( 'xprofile_filtered_data_value_before_save', 'trim', 2 ); 57 57 58 58 // Save field groups. 59 add_filter( 'xprofile_group_name_before_save', 'wp_filter_kses' );59 add_filter( 'xprofile_group_name_before_save', 'wp_filter_kses' ); 60 60 add_filter( 'xprofile_group_description_before_save', 'wp_filter_kses' ); 61 61 62 add_filter( 'xprofile_group_name_before_save', 'stripslashes' );63 add_filter( 'xprofile_group_description_before_save', 'stripslashes' );62 add_filter( 'xprofile_group_name_before_save', 'stripslashes' ); 63 add_filter( 'xprofile_group_description_before_save', 'stripslashes' ); 64 64 65 65 // Save fields. 66 add_filter( 'xprofile_field_name_before_save', 'wp_filter_kses' );67 add_filter( 'xprofile_field_type_before_save', 'wp_filter_kses' );68 add_filter( 'xprofile_field_description_before_save', 'wp_filter_kses' );69 add_filter( 'xprofile_field_order_by_before_save', 'wp_filter_kses' );70 71 add_filter( 'xprofile_field_is_required_before_save', 'absint' );72 add_filter( 'xprofile_field_field_order_before_save', 'absint' );66 add_filter( 'xprofile_field_name_before_save', 'wp_filter_kses' ); 67 add_filter( 'xprofile_field_type_before_save', 'wp_filter_kses' ); 68 add_filter( 'xprofile_field_description_before_save', 'wp_filter_kses' ); 69 add_filter( 'xprofile_field_order_by_before_save', 'wp_filter_kses' ); 70 71 add_filter( 'xprofile_field_is_required_before_save', 'absint' ); 72 add_filter( 'xprofile_field_field_order_before_save', 'absint' ); 73 73 add_filter( 'xprofile_field_option_order_before_save', 'absint' ); 74 add_filter( 'xprofile_field_can_delete_before_save', 'absint' );74 add_filter( 'xprofile_field_can_delete_before_save', 'absint' ); 75 75 76 76 // Save field options. … … 138 138 if ( $field_id && bp_xprofile_is_richtext_enabled_for_field( $field_id ) ) { 139 139 $richtext_tags = array( 140 'img' => array( 'src' => 1, 'alt' => 1, 'width' => 1, 'height' => 1 ), 140 'img' => array( 141 'src' => 1, 142 'alt' => 1, 143 'width' => 1, 144 'height' => 1, 145 ), 141 146 'ul' => array(), 142 147 'ol' => array(), … … 237 242 $filtered_field_value = apply_filters( 'xprofile_filtered_data_value_before_save', $filtered_field_value, $field_value, $data_obj ); 238 243 239 // Sanitize multiple individual option values.244 // Sanitize multiple individual option values. 240 245 } else { 241 246 $filtered_values = array(); … … 426 431 $values = explode( ';', $field_value ); 427 432 428 array_walk( $values, function ( &$value, $key ) use ( $field_type, $field ) { 429 $value = bp_xprofile_escape_field_data( $value, $field_type, $field->id ); 430 } ); 433 array_walk( 434 $values, 435 function ( &$value, $key ) use ( $field_type, $field ) { 436 $value = bp_xprofile_escape_field_data( $value, $field_type, $field->id ); 437 } 438 ); 431 439 } 432 440 … … 439 447 $new_values[] = make_clickable( $value ); 440 448 441 // Is not clickable.449 // Is not clickable. 442 450 } else { 443 451 … … 446 454 $new_values[] = $value; 447 455 448 // Less than 5 spaces.456 // Less than 5 spaces. 449 457 } else { 450 458 $query_arg = bp_core_get_component_search_query_arg( 'members' ); … … 516 524 * @since 1.7.0 517 525 * 518 * @param BP_User_Query $user_query User query to filter. 519 * @param string $user_ids_sql SQL statement to use. 520 */ 521 function bp_xprofile_filter_user_query_populate_extras( BP_User_Query $user_query, $user_ids_sql = '' ) { 526 * @param BP_User_Query $user_query The BP_User_Query object. 527 */ 528 function bp_xprofile_filter_user_query_populate_extras( $user_query ) { 522 529 523 530 if ( ! bp_is_active( 'xprofile' ) ) { … … 534 541 } 535 542 } 536 add_ filter( 'bp_user_query_populate_extras', 'bp_xprofile_filter_user_query_populate_extras', 2, 2 );543 add_action( 'bp_user_query_populate_extras', 'bp_xprofile_filter_user_query_populate_extras', 2 ); 537 544 538 545 /** … … 541 548 * @since 2.2.0 542 549 * 543 * @param BP_User_Query $q User query object.544 */ 545 function bp_xprofile_add_xprofile_query_to_user_query( BP_User_Query$q ) {550 * @param BP_User_Query $q The BP_User_Query object. 551 */ 552 function bp_xprofile_add_xprofile_query_to_user_query( $q ) { 546 553 547 554 // Bail if no `xprofile_query` clause. … … 555 562 if ( ! empty( $sql['join'] ) ) { 556 563 $q->uid_clauses['select'] .= $sql['join']; 557 $q->uid_clauses['where'] .= $sql['where'];564 $q->uid_clauses['where'] .= $sql['where']; 558 565 } 559 566 } … … 609 616 * - append the 'object type' WHERE clause 610 617 */ 611 case 'SELECT' :618 case 'SELECT': 612 619 $q = str_replace( 613 620 array( … … 630 637 * - append the 'object type' WHERE clause 631 638 */ 632 case 'UPDATE' :633 case 'DELETE' :639 case 'UPDATE': 640 case 'DELETE': 634 641 $q = str_replace( 635 642 array( … … 650 657 * - ensure that the object_type field gets filled in 651 658 */ 652 case 'INSERT' :659 case 'INSERT': 653 660 $q = str_replace( 654 661 array( … … 658 665 array( 659 666 '`object_type`,`object_id`', 660 $wpdb->prepare( "VALUES (%s,", $matches[1] ),667 $wpdb->prepare( 'VALUES (%s,', $matches[1] ), 661 668 ), 662 669 $q … … 669 676 for ( $i = 0; $i < count( $quoted_matches[0] ); $i++ ) { 670 677 $quote_pos = strpos( $q, '__QUOTE__' ); 671 $q = substr_replace( $q, $quoted_matches[0][ $i ], $quote_pos, 9 );678 $q = substr_replace( $q, $quoted_matches[0][ $i ], $quote_pos, 9 ); 672 679 } 673 680 }
Note: See TracChangeset
for help on using the changeset viewer.