Changeset 7965 for trunk/bp-themes/bp-default/members/single/profile/change-avatar.php

Timestamp:

02/22/2014 03:50:03 PM (11 years ago)

Author:

djpaul

Message:

Improve string and textarea output escaping throughout BuddyPress.

File:

• trunk/bp-themes/bp-default/members/single/profile/change-avatar.php (modified) (3 diffs)

trunk/bp-themes/bp-default/members/single/profile/change-avatar.php

@@ -16 +16 @@
             <p id="avatar-upload">
                 <input type="file" name="file" id="file" />
-                <input type="submit" name="upload" id="upload" value="<?php _e( 'Upload Image', 'buddypress' ); ?>" />
+                <input type="submit" name="upload" id="upload" value="<?php esc_attr_e( 'Upload Image', 'buddypress' ); ?>" />
                 <input type="hidden" name="action" id="action" value="bp_avatar_upload" />
             </p>
@@ -22 +22 @@
             <?php if ( bp_get_user_has_avatar() ) : ?>
                 <p><?php _e( "If you'd like to delete your current avatar but not upload a new one, please use the delete avatar button.", 'buddypress' ); ?></p>
-                <p><a class="button edit" href="<?php bp_avatar_delete_link(); ?>" title="<?php _e( 'Delete Avatar', 'buddypress' ); ?>"><?php _e( 'Delete My Avatar', 'buddypress' ); ?></a></p>
+                <p><a class="button edit" href="<?php bp_avatar_delete_link(); ?>" title="<?php esc_attr_e( 'Delete Avatar', 'buddypress' ); ?>"><?php _e( 'Delete My Avatar', 'buddypress' ); ?></a></p>
             <?php endif; ?>
 
@@ -31 +31 @@
             <h5><?php _e( 'Crop Your New Avatar', 'buddypress' ); ?></h5>
 
-            <img src="<?php bp_avatar_to_crop(); ?>" id="avatar-to-crop" class="avatar" alt="<?php _e( 'Avatar to crop', 'buddypress' ); ?>" />
+            <img src="<?php bp_avatar_to_crop(); ?>" id="avatar-to-crop" class="avatar" alt="<?php esc_attr_e( 'Avatar to crop', 'buddypress' ); ?>" />
 
             <div id="avatar-crop-pane">
-                <img src="<?php bp_avatar_to_crop(); ?>" id="avatar-crop-preview" class="avatar" alt="<?php _e( 'Avatar preview', 'buddypress' ); ?>" />
+                <img src="<?php bp_avatar_to_crop(); ?>" id="avatar-crop-preview" class="avatar" alt="<?php esc_attr_e( 'Avatar preview', 'buddypress' ); ?>" />
             </div>
 
-            <input type="submit" name="avatar-crop-submit" id="avatar-crop-submit" value="<?php _e( 'Crop Image', 'buddypress' ); ?>" />
+            <input type="submit" name="avatar-crop-submit" id="avatar-crop-submit" value="<?php esc_attr_e( 'Crop Image', 'buddypress' ); ?>" />
 
             <input type="hidden" name="image_src" id="image_src" value="<?php bp_avatar_to_crop_src(); ?>" />