diff --git a/includes/Admin/Actions.php b/includes/Admin/Actions.php index 9a96dbf..57a3042 100644 --- a/includes/Admin/Actions.php +++ b/includes/Admin/Actions.php @@ -37,7 +37,7 @@ public static function add_campaign() { $referer = wp_get_referer(); $name = isset( $_POST['name'] ) ? sanitize_text_field( wp_unslash( $_POST['name'] ) ) : ''; - $cause = isset( $_POST['cause'] ) ? sanitize_textarea_field( wp_unslash( $_POST['cause'] ) ) : ''; + $cause = isset( $_POST['cause'] ) ? wp_kses_post( wp_unslash( $_POST['cause'] ) ) : ''; $goal_amount = isset( $_POST['goal_amount'] ) ? floatval( wp_unslash( $_POST['goal_amount'] ) ) : floatval( '0' ); $end_date = isset( $_POST['end_date'] ) ? sanitize_text_field( wp_unslash( $_POST['end_date'] ) ) : ''; $status = isset( $_POST['status'] ) ? sanitize_key( wp_unslash( $_POST['status'] ) ) : 'pending'; @@ -47,7 +47,7 @@ public static function add_campaign() { 'ID' => $id, 'post_type' => 'wcdm_campaigns', 'post_title' => wp_strip_all_tags( $name ), - 'post_content' => wp_kses_post( $cause ), + 'post_content' => $cause, 'post_status' => $status, 'meta_input' => array( 'wcdm_goal_amount' => $goal_amount, @@ -83,7 +83,7 @@ public static function edit_campaign() { $referer = wp_get_referer(); $name = isset( $_POST['name'] ) ? sanitize_text_field( wp_unslash( $_POST['name'] ) ) : ''; - $cause = isset( $_POST['cause'] ) ? sanitize_textarea_field( wp_unslash( $_POST['cause'] ) ) : ''; + $cause = isset( $_POST['cause'] ) ? wp_kses_post( wp_unslash( $_POST['cause'] ) ) : ''; $goal_amount = isset( $_POST['goal_amount'] ) ? floatval( wp_unslash( $_POST['goal_amount'] ) ) : floatval( '0' ); $end_date = isset( $_POST['end_date'] ) ? sanitize_text_field( wp_unslash( $_POST['end_date'] ) ) : ''; $status = isset( $_POST['status'] ) ? sanitize_key( wp_unslash( $_POST['status'] ) ) : 'pending'; diff --git a/includes/Admin/views/campaigns/add.php b/includes/Admin/views/campaigns/add.php index d7f9f26..4da3a78 100644 --- a/includes/Admin/views/campaigns/add.php +++ b/includes/Admin/views/campaigns/add.php @@ -30,7 +30,21 @@
diff --git a/includes/Admin/views/campaigns/edit.php b/includes/Admin/views/campaigns/edit.php index cdcfb12..38d89ef 100644 --- a/includes/Admin/views/campaigns/edit.php +++ b/includes/Admin/views/campaigns/edit.php @@ -43,7 +43,21 @@