Trippetchz

Thank you! ??

Hi there, not rushing you or anything, no stress, but just wondering a potential ETA on this new feature? ?? Thanks! T

Hi there,

Thanks for your reply.

I’d like that, thanks—the option to totally disallow any HTML content in the core plugin. I think I’ll wait for that to get deployed ??

Cheers,
T

Hi there,

Thanks for getting back.

Sure, the above example wasn’t dangerous, but this potentially is:

And that passed through wp_kses() (apparently?) in the same vein.

I understand you’re saying some use cases want to except HTML and other input through Participants Database, but for our use, we definitely do not want any possibility of any tags or any other input being inserted in any of our front-end (or back-end), especially in fields such as “First Name” or “Last Name” where is should never be expected/accepted.

If this isn’t going to be mainlined, are there some hooks we can use to invoke sanitize_text_field() and sanitize_textarea_field() for our own set up then, please?

Thanks!
T

Great, thank you for that insight! ??

Hi there, thanks for getting back ?? That’s great.

Just want to check the syntax for multiple attributes then. For example, how do I set maxlength and also placeholder text of "text with spaces" for example?

Thanks!

Thanks for the update.

That’s very helpful and fixed the issue. Thank you!!!

Warning: foreach() argument must be of type array|object, bool given in wp-content/plugins/participants-database/classes/PDb_Admin_Notices.php on line 193

Fatal error: Uncaught TypeError: array_filter(): Argument #1 ($array) must be of type array, bool given in wp-content/plugins/participants-database/classes/PDb_Admin_Notices.php:305 Stack trace: #0 wp-content/plugins/participants-database/classes/PDb_Admin_Notices.php(305): array_filter() #1 wp-content/plugins/participants-database/classes/PDb_Admin_Notices.php(221): PDb_Admin_Notices->purge_transient_notices() #2 wp-includes/class-wp-hook.php(308): PDb_Admin_Notices->action_admin_notices() #3 wp-includes/class-wp-hook.php(332): WP_Hook->apply_filters() #4 wp-includes/plugin.php(517): WP_Hook->do_action() #5 wp-admin/admin-header.php(303): do_action() #6 wp-admin/plugins.php(605): require_once('/home/rwriteor/...') #7 {main} thrown in wp-content/plugins/participants-database/classes/PDb_Admin_Notices.php on line 305

Ah, okay great. That’s helpful. Thank you!!!

Just a friendly bump on this thread, in case it has been overlooked. Thanks!

Great, thanks!

Is there a way to quote safely however? Because I notice placeholder text with a comma breaks things again.

For example, this breaks:

placeholder::For example, placeholder text.

Thanks,
T

• This reply was modified 1 year, 7 months ago by Trippetchz.
• This reply was modified 1 year, 7 months ago by Trippetchz.

:facepalm: Sorry, my bad syntax.

The attributes field formatting should be double colon and no quoting:

placeholder::For example placeholder text.

That works fine. Hope this helps someone!

Oh great, thanks for that. We’ll check that out. ??