From: Steve Sutton <steve@gaslightmedia.com>
Date: Thu, 18 Oct 2018 20:27:54 +0000 (-0400)
Subject: More fields in event admin edit that need escaping
X-Git-Tag: v1.7.2^2
X-Git-Url: http://cvs2.gaslightmedia.com/gitweb/?a=commitdiff_plain;h=8a387338a74161304069a35a21b7f568e6839ab7;p=WP-Plugins%2Fglm-member-db-events.git

More fields in event admin edit that need escaping

Applying the |escape to the input values in the edit event form.
---

diff --git a/index.php b/index.php
index 21a34f2..17dc957 100644
--- a/index.php
+++ b/index.php
@@ -3,7 +3,7 @@
  * Plugin Name: GLM Associate - Events Add-On
  * Plugin URI: http://www.gaslightmedia.com/
  * Description: Gaslight Media Members Database.
- * Version: 1.7.1
+ * Version: 1.7.2
  * Author: Chuck Scott
  * Author URI: http://www.gaslightmedia.com/
  * License: GPL2
@@ -19,7 +19,7 @@
  * @package glmMembersDatabaseEventsAddOn
  * @author Chuck Scott <cscott@gaslightmedia.com>
  * @license http://www.gaslightmedia.com Gaslightmedia
- * @version 1.7.1
+ * @version 1.7.2
  */
 
 // Check that we're being called by WordPress.
@@ -43,7 +43,7 @@ if (!defined('ABSPATH')) {
  *  so that we're sure the other add-ons see an up to date
  *  version from this plugin.
  */
-define('GLM_MEMBERS_EVENTS_PLUGIN_VERSION', '1.7.1');
+define('GLM_MEMBERS_EVENTS_PLUGIN_VERSION', '1.7.2');
 define('GLM_MEMBERS_EVENTS_PLUGIN_DB_VERSION', '0.1.7');
 
 // This is the minimum version of the GLM Members DB plugin require for this plugin.
diff --git a/views/admin/events/editStatus.html b/views/admin/events/editStatus.html
index 3d1ce8a..57fd231 100644
--- a/views/admin/events/editStatus.html
+++ b/views/admin/events/editStatus.html
@@ -308,13 +308,13 @@
                             <tr>
                                 <th>Contact Phone:</th>
                                 <td>
-                                    <input type="text" name="contact_phone" value="{$event.fieldData.contact_phone}" class="glm-form-text-input-medium glm-phone-input">
+                                    <input type="text" name="contact_phone" value="{$event.fieldData.contact_phone|escape}" class="glm-form-text-input-medium glm-phone-input">
                                 </td>
                             </tr>
                             <tr>
                                 <th>Contact Email:</th>
                                 <td>
-                                    <input type="text" name="contact_email" value="{$event.fieldData.contact_email}" class="glm-form-text-input-medium">
+                                    <input type="text" name="contact_email" value="{$event.fieldData.contact_email|escape}" class="glm-form-text-input-medium">
                                 </td>
                             </tr>
 
@@ -331,7 +331,7 @@
         <tr id="descriptionOfCostField" {if $event.fieldData.free.value}class="glm-hidden"{/if}>
             <th {if $event.fieldRequired.cost}class="glm-required"{/if}>Description of Cost:</th>
             <td {if $event.fieldFail.cost}class="glm-form-bad-input" data-tabid="glm-event-descr"{/if}>
-                <input type="text" name="cost" value="{$event.fieldData.cost}" class="glm-form-text-input-medium">
+                <input type="text" name="cost" value="{$event.fieldData.cost|escape}" class="glm-form-text-input-medium">
                 {if $event.fieldFail.cost}<p>{$event.fieldFail.cost}</p>{/if}<br>
             </td>
         </tr>
@@ -356,20 +356,20 @@
                     <tr>
                         <th>Admin Contact Organization:</th>
                         <td>
-                            <input type="text" name="admin_org" value="{$event.fieldData.admin_org}" class="glm-form-text-input-medium">
+                            <input type="text" name="admin_org" value="{$event.fieldData.admin_org|escape}" class="glm-form-text-input-medium">
                         </td>
                     </tr>
                     <tr>
                         <th {if $event.fieldRequired.admin_email}class="glm-required"{/if}>Admin Contact E-Mail:</th>
                         <td {if $event.fieldFail.admin_email}class="glm-form-bad-input" data-tabid="glm-event-admin"{/if}>
-                            <input type="text" name="admin_email" value="{$event.fieldData.admin_email}" class="glm-form-text-input-medium">
+                            <input type="text" name="admin_email" value="{$event.fieldData.admin_email|escape}" class="glm-form-text-input-medium">
                             {if $event.fieldFail.admin_email}<p>{$event.fieldFail.admin_name}</p>{/if}<br>
                         </td>
                     </tr>
                     <tr>
                         <th {if $event.fieldRequired.admin_phone}class="glm-required"{/if}>Admin Contact Phone:</th>
                         <td {if $event.fieldFail.admin_phone}class="glm-form-bad-input" data-tabid="glm-event-admin"{/if}>
-                            <input type="text" name="admin_phone" value="{$event.fieldData.admin_phone}" class="glm-form-text-input-medium glm-phone-input">
+                            <input type="text" name="admin_phone" value="{$event.fieldData.admin_phone|escape}" class="glm-form-text-input-medium glm-phone-input">
                             {if $event.fieldFail.admin_phone}<p>{$event.fieldFail.admin_phone}</p>{/if}<br>
                         </td>
                     </tr>