@@ -191,7 +191,8 @@ |
||
| 191 | 191 | if ( in_array( $_sScreenID, $this->aScreenIDs ) ) { |
| 192 | 192 | return apply_filters( get_class( $this ) . '-' . $_sScreenID, array() ); |
| 193 | 193 | } |
| 194 | - if ( isset( $_GET[ 'page' ] ) ) { // sanitization unnecessary |
|
| 194 | + if ( isset( $_GET[ 'page' ] ) ) { |
|
| 195 | +// sanitization unnecessary |
|
| 195 | 196 | return apply_filters( get_class( $this ) . '-' . $this->getHTTPQueryGET( 'page' ), array() ); |
| 196 | 197 | } |
| 197 | 198 | return array(); |
@@ -210,10 +210,12 @@ |
||
| 210 | 210 | */ |
| 211 | 211 | protected function _shouldProceedValidation() { |
| 212 | 212 | |
| 213 | - if ( ! isset( $_POST[ $this->oProp->sClassHash ] ) ) { // sanitization unnecessary |
|
| 213 | + if ( ! isset( $_POST[ $this->oProp->sClassHash ] ) ) { |
|
| 214 | +// sanitization unnecessary |
|
| 214 | 215 | return false; |
| 215 | 216 | } |
| 216 | - if ( ! wp_verify_nonce( $_POST[ $this->oProp->sClassHash ], $this->oProp->sClassHash ) ) { // sanitization unnecessary |
|
| 217 | + if ( ! wp_verify_nonce( $_POST[ $this->oProp->sClassHash ], $this->oProp->sClassHash ) ) { |
|
| 218 | +// sanitization unnecessary |
|
| 217 | 219 | return false; |
| 218 | 220 | } |
| 219 | 221 | return true; |
@@ -66,7 +66,8 @@ |
||
| 66 | 66 | return false; |
| 67 | 67 | } |
| 68 | 68 | |
| 69 | - if ( isset( $_GET[ 'taxonomy' ] ) && ! in_array( $_GET[ 'taxonomy' ], $this->oProp->aTaxonomySlugs ) ) { // sanitization unnecessary |
|
| 69 | + if ( isset( $_GET[ 'taxonomy' ] ) && ! in_array( $_GET[ 'taxonomy' ], $this->oProp->aTaxonomySlugs ) ) { |
|
| 70 | +// sanitization unnecessary |
|
| 70 | 71 | return false; |
| 71 | 72 | } |
| 72 | 73 | |
@@ -123,7 +123,8 @@ |
||
| 123 | 123 | |
| 124 | 124 | // 3.7.9+ Limitation: If the `page` argument is set in the query url, |
| 125 | 125 | // this factory will not be loaded to make the overall responses lighter. |
| 126 | - if ( isset( $_GET[ 'page' ] ) ) { // sanitization unnecessary |
|
| 126 | + if ( isset( $_GET[ 'page' ] ) ) { |
|
| 127 | +// sanitization unnecessary |
|
| 127 | 128 | return false; |
| 128 | 129 | } |
| 129 | 130 | |
@@ -26,8 +26,9 @@ discard block |
||
| 26 | 26 | */ |
| 27 | 27 | public static function instantiate( $oProp, $oMsg ) { |
| 28 | 28 | |
| 29 | - if ( in_array( $oProp->sClassName, self::$aClassNames ) ) |
|
| 30 | - return self::$_oInstance; |
|
| 29 | + if ( in_array( $oProp->sClassName, self::$aClassNames ) ) { |
|
| 30 | + return self::$_oInstance; |
|
| 31 | + } |
|
| 31 | 32 | |
| 32 | 33 | self::$aClassNames[] = $oProp->sClassName; |
| 33 | 34 | self::$_oInstance = new AdminPageFramework_PageLoadInfo_post_type( $oProp, $oMsg ); |
@@ -43,7 +44,8 @@ discard block |
||
| 43 | 44 | public function _replyToSetPageLoadInfoInFooter() { |
| 44 | 45 | |
| 45 | 46 | // Some users set `$_GET[ 'post_type' ]` element even in regular admin pages. In that case, do not load the style to avoid duplicates. |
| 46 | - if ( isset( $_GET[ 'page' ] ) && $_GET[ 'page' ] ) { // sanitization unnecessary |
|
| 47 | + if ( isset( $_GET[ 'page' ] ) && $_GET[ 'page' ] ) { |
|
| 48 | +// sanitization unnecessary |
|
| 47 | 49 | return; |
| 48 | 50 | } |
| 49 | 51 | |
@@ -26,7 +26,8 @@ |
||
| 26 | 26 | parent::__construct( $oProp, $oMsg ); |
| 27 | 27 | |
| 28 | 28 | // For post type posts listing table page ( edit.php ) |
| 29 | - if ( isset( $_GET[ 'post_type' ] ) && $_GET[ 'post_type' ] === $this->oProp->sPostType ) { // sanitization unnecessary |
|
| 29 | + if ( isset( $_GET[ 'post_type' ] ) && $_GET[ 'post_type' ] === $this->oProp->sPostType ) { |
|
| 30 | +// sanitization unnecessary |
|
| 30 | 31 | add_action( |
| 31 | 32 | 'get_edit_post_link', |
| 32 | 33 | array( $this, '_replyToAddPostTypeQueryInEditPostLink' ), |
@@ -154,17 +154,19 @@ discard block |
||
| 154 | 154 | * @internal |
| 155 | 155 | * @return integer The found post ID. `0` if not found. |
| 156 | 156 | */ |
| 157 | - private function ___getPostID() { |
|
| 157 | + private function ___getPostID() { |
|
| 158 | 158 | |
| 159 | 159 | // for an editing post page. |
| 160 | 160 | if ( isset( $GLOBALS[ 'post' ]->ID ) ) { |
| 161 | 161 | return $GLOBALS[ 'post' ]->ID; |
| 162 | 162 | } |
| 163 | - if ( isset( $_GET[ 'post' ] ) ) { // sanitization unnecessary |
|
| 163 | + if ( isset( $_GET[ 'post' ] ) ) { |
|
| 164 | +// sanitization unnecessary |
|
| 164 | 165 | return absint( $_GET[ 'post' ] ); // sanitization done |
| 165 | 166 | } |
| 166 | 167 | // for post.php without any query key-values. |
| 167 | - if ( isset( $_POST[ 'post_ID' ] ) ) { // sanitization unnecessary |
|
| 168 | + if ( isset( $_POST[ 'post_ID' ] ) ) { |
|
| 169 | +// sanitization unnecessary |
|
| 168 | 170 | return absint( $_POST[ 'post_ID' ] ); // sanitization done |
| 169 | 171 | } |
| 170 | 172 | return 0; |
@@ -288,10 +290,12 @@ discard block |
||
| 288 | 290 | } |
| 289 | 291 | |
| 290 | 292 | // If our nonce isn't there, or we can't verify it, bail |
| 291 | - if ( ! isset( $_POST[ $this->oProp->sMetaBoxID ] ) ) { // sanitization unnecessary |
|
| 293 | + if ( ! isset( $_POST[ $this->oProp->sMetaBoxID ] ) ) { |
|
| 294 | +// sanitization unnecessary |
|
| 292 | 295 | return false; |
| 293 | 296 | } |
| 294 | - if ( ! wp_verify_nonce( $_POST[ $this->oProp->sMetaBoxID ], $this->oProp->sMetaBoxID ) ) { // sanitization unnecessary |
|
| 297 | + if ( ! wp_verify_nonce( $_POST[ $this->oProp->sMetaBoxID ], $this->oProp->sMetaBoxID ) ) { |
|
| 298 | +// sanitization unnecessary |
|
| 295 | 299 | return false; |
| 296 | 300 | } |
| 297 | 301 | |
@@ -46,7 +46,8 @@ |
||
| 46 | 46 | static public function getInputsUnset( array $aInputs, $sFieldsType, $iSkipDepth=0 ) { |
| 47 | 47 | |
| 48 | 48 | $_sUnsetKey = '__unset_' . $sFieldsType; |
| 49 | - if ( ! isset( $_POST[ $_sUnsetKey ] ) ) { // sanitization unnecessary |
|
| 49 | + if ( ! isset( $_POST[ $_sUnsetKey ] ) ) { |
|
| 50 | +// sanitization unnecessary |
|
| 50 | 51 | return $aInputs; |
| 51 | 52 | } |
| 52 | 53 | |
@@ -141,7 +141,7 @@ discard block |
||
| 141 | 141 | * @return void |
| 142 | 142 | */ |
| 143 | 143 | public function _replyToSaveNotices() { |
| 144 | - if ( empty( self::$_aNotices ) ) { |
|
| 144 | + if ( empty( self::$_aNotices ) ) { |
|
| 145 | 145 | return; |
| 146 | 146 | } |
| 147 | 147 | $_bResult = $this->setTransient( |
@@ -161,12 +161,13 @@ discard block |
||
| 161 | 161 | |
| 162 | 162 | // Retrieve the notifications set in a transient. |
| 163 | 163 | $_aNotices = $this->_getNotices(); |
| 164 | - if ( false === $_aNotices ) { |
|
| 164 | + if ( false === $_aNotices ) { |
|
| 165 | 165 | return; |
| 166 | 166 | } |
| 167 | 167 | |
| 168 | 168 | // By setting false to the 'settings-notice' key, it's possible to disable the notifications set with the framework. |
| 169 | - if ( isset( $_GET[ 'settings-notice' ] ) && ! $_GET[ 'settings-notice' ] ) { // sanitization unnecessary |
|
| 169 | + if ( isset( $_GET[ 'settings-notice' ] ) && ! $_GET[ 'settings-notice' ] ) { |
|
| 170 | +// sanitization unnecessary |
|
| 170 | 171 | return; |
| 171 | 172 | } |
| 172 | 173 | |