From 24c6963f2a0b19d28f22236c8c736d33b9bff917 Mon Sep 17 00:00:00 2001 From: Towfiqul Islam <43319312+towfiq1997@users.noreply.github.com> Date: Wed, 3 Jun 2026 17:54:36 +0600 Subject: [PATCH] Fixes #84 & Cause Editor Update --- includes/Admin/Actions.php | 6 +++--- includes/Admin/views/campaigns/add.php | 16 +++++++++++++++- includes/Admin/views/campaigns/edit.php | 16 +++++++++++++++- 3 files changed, 33 insertions(+), 5 deletions(-) diff --git a/includes/Admin/Actions.php b/includes/Admin/Actions.php index 9a96dbf..57a3042 100644 --- a/includes/Admin/Actions.php +++ b/includes/Admin/Actions.php @@ -37,7 +37,7 @@ public static function add_campaign() { $referer = wp_get_referer(); $name = isset( $_POST['name'] ) ? sanitize_text_field( wp_unslash( $_POST['name'] ) ) : ''; - $cause = isset( $_POST['cause'] ) ? sanitize_textarea_field( wp_unslash( $_POST['cause'] ) ) : ''; + $cause = isset( $_POST['cause'] ) ? wp_kses_post( wp_unslash( $_POST['cause'] ) ) : ''; $goal_amount = isset( $_POST['goal_amount'] ) ? floatval( wp_unslash( $_POST['goal_amount'] ) ) : floatval( '0' ); $end_date = isset( $_POST['end_date'] ) ? sanitize_text_field( wp_unslash( $_POST['end_date'] ) ) : ''; $status = isset( $_POST['status'] ) ? sanitize_key( wp_unslash( $_POST['status'] ) ) : 'pending'; @@ -47,7 +47,7 @@ public static function add_campaign() { 'ID' => $id, 'post_type' => 'wcdm_campaigns', 'post_title' => wp_strip_all_tags( $name ), - 'post_content' => wp_kses_post( $cause ), + 'post_content' => $cause, 'post_status' => $status, 'meta_input' => array( 'wcdm_goal_amount' => $goal_amount, @@ -83,7 +83,7 @@ public static function edit_campaign() { $referer = wp_get_referer(); $name = isset( $_POST['name'] ) ? sanitize_text_field( wp_unslash( $_POST['name'] ) ) : ''; - $cause = isset( $_POST['cause'] ) ? sanitize_textarea_field( wp_unslash( $_POST['cause'] ) ) : ''; + $cause = isset( $_POST['cause'] ) ? wp_kses_post( wp_unslash( $_POST['cause'] ) ) : ''; $goal_amount = isset( $_POST['goal_amount'] ) ? floatval( wp_unslash( $_POST['goal_amount'] ) ) : floatval( '0' ); $end_date = isset( $_POST['end_date'] ) ? sanitize_text_field( wp_unslash( $_POST['end_date'] ) ) : ''; $status = isset( $_POST['status'] ) ? sanitize_key( wp_unslash( $_POST['status'] ) ) : 'pending'; diff --git a/includes/Admin/views/campaigns/add.php b/includes/Admin/views/campaigns/add.php index d7f9f26..4da3a78 100644 --- a/includes/Admin/views/campaigns/add.php +++ b/includes/Admin/views/campaigns/add.php @@ -30,7 +30,21 @@
diff --git a/includes/Admin/views/campaigns/edit.php b/includes/Admin/views/campaigns/edit.php index cdcfb12..38d89ef 100644 --- a/includes/Admin/views/campaigns/edit.php +++ b/includes/Admin/views/campaigns/edit.php @@ -43,7 +43,21 @@