From dbc5087a4aaf89d5519b5688f373288cc5b475d0 Mon Sep 17 00:00:00 2001 From: Chuck Scott Date: Fri, 4 Jan 2019 16:07:20 -0500 Subject: [PATCH] Data Abstract now looks in $_REQUEST for all input data --- lib/GlmDataAbstract/DataAbstract.php | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/lib/GlmDataAbstract/DataAbstract.php b/lib/GlmDataAbstract/DataAbstract.php index 20861ff8..ded4f3b8 100755 --- a/lib/GlmDataAbstract/DataAbstract.php +++ b/lib/GlmDataAbstract/DataAbstract.php @@ -1033,7 +1033,7 @@ abstract class GlmDataAbstract } else { // Sanitize currently selected value - $in = filter_input(INPUT_POST, $as, FILTER_SANITIZE_STRING, FILTER_FLAG_NO_ENCODE_QUOTES); + $in = filter_var($_REQUEST[$as], FILTER_SANITIZE_STRING, FILTER_FLAG_NO_ENCODE_QUOTES); // Is it one of the available values if (isset($f['required']) && $f['required'] && trim($in) == '') { @@ -1242,7 +1242,7 @@ $forEdit = true; $this->inputFieldStatus = true; - // If a filter has been specified, use that with the php filter_input() function. + // If a filter has been specified, use that with the php filter_var() function. $filter = FILTER_SANITIZE_STRING; if (isset($f['filter'])) { if (!is_numeric($f['filter'])) { @@ -1259,14 +1259,14 @@ $forEdit = true; $filter_options = $f['filter_options']; } - $in = filter_input(INPUT_POST, $as, $filter, $filter_options); + $in = filter_var($_REQUEST[$as], $filter, $filter_options); // Otherwise, if no filter is specified. } else { // Kill slashes and use the standard WordPress wp_kses_post() function to do the filtering $in = ''; - if (isset($_POST[$as])) { - $in = wp_kses_post(stripslashes($_POST[$as])); + if (isset($_REQUEST[$as])) { + $in = wp_kses_post(stripslashes($_REQUEST[$as])); } } @@ -1354,7 +1354,7 @@ $forEdit = true; $filter = FILTER_SANITIZE_STRING; $filter_options = FILTER_FLAG_NO_ENCODE_QUOTES; - $in = filter_input(INPUT_POST, $as, $filter, $filter_options); + $in = filter_var($_REQUEST[$as], $filter, $filter_options); if (isset($f['required']) && $f['required'] && trim($in) == '') { $this->inputFieldStatus = false; $this->inputErrorReason = 'Required input not provided.'; @@ -1565,7 +1565,7 @@ $forEdit = true; $this->inputFieldStatus = true; - $in = filter_input(INPUT_POST, $as, FILTER_VALIDATE_EMAIL); + $in = filter_var($_REQUEST[$as], FILTER_VALIDATE_EMAIL); if (isset($f['required']) && $f['required'] && trim($in) == '') { $this->inputFieldStatus = false; $this->inputErrorReason = 'E-Mail address does not appear to be valid.'; -- 2.17.1