Changeset 9681 for trunk/src/bp-xprofile/bp-xprofile-filters.php

Timestamp:

04/02/2015 12:51:51 AM (10 years ago)

Author:

johnjamesjacoby

Message:

XProfile: Move field save() sanitization into filters for consistency between save method & saving via the admin UI. See #6340.

File:

• trunk/src/bp-xprofile/bp-xprofile-filters.php (modified) (1 diff)

trunk/src/bp-xprofile/bp-xprofile-filters.php

@@ -56 +56 @@
 add_filter( 'xprofile_filtered_data_value_before_save', 'trim', 2 );
 
-// Save filters
+// Save field groups
 add_filter( 'xprofile_group_name_before_save',        'wp_filter_kses' );
 add_filter( 'xprofile_group_description_before_save', 'wp_filter_kses' );
+
+// Save fields
+add_filter( 'xprofile_field_name_before_save',         'wp_filter_kses' );
+add_filter( 'xprofile_field_type_before_save',         'wp_filter_kses' );
+add_filter( 'xprofile_field_description_before_save',  'wp_filter_kses' );
+add_filter( 'xprofile_field_order_by_before_save',     'wp_filter_kses' );
+add_filter( 'xprofile_field_is_required_before_save',  'absint' );
+add_filter( 'xprofile_field_field_order_before_save',  'absint' );
+add_filter( 'xprofile_field_option_order_before_save', 'absint' );
+add_filter( 'xprofile_field_can_delete_before_save',   'absint' );
 
 /**