@@ -191,7 +191,8 @@ |
||
191 | 191 | if ( in_array( $_sScreenID, $this->aScreenIDs ) ) { |
192 | 192 | return apply_filters( get_class( $this ) . '-' . $_sScreenID, array() ); |
193 | 193 | } |
194 | - if ( isset( $_GET[ 'page' ] ) ) { // sanitization unnecessary |
|
194 | + if ( isset( $_GET[ 'page' ] ) ) { |
|
195 | +// sanitization unnecessary |
|
195 | 196 | return apply_filters( get_class( $this ) . '-' . $this->getHTTPQueryGET( 'page' ), array() ); |
196 | 197 | } |
197 | 198 | return array(); |
@@ -210,10 +210,12 @@ |
||
210 | 210 | */ |
211 | 211 | protected function _shouldProceedValidation() { |
212 | 212 | |
213 | - if ( ! isset( $_POST[ $this->oProp->sClassHash ] ) ) { // sanitization unnecessary |
|
213 | + if ( ! isset( $_POST[ $this->oProp->sClassHash ] ) ) { |
|
214 | +// sanitization unnecessary |
|
214 | 215 | return false; |
215 | 216 | } |
216 | - if ( ! wp_verify_nonce( $_POST[ $this->oProp->sClassHash ], $this->oProp->sClassHash ) ) { // sanitization unnecessary |
|
217 | + if ( ! wp_verify_nonce( $_POST[ $this->oProp->sClassHash ], $this->oProp->sClassHash ) ) { |
|
218 | +// sanitization unnecessary |
|
217 | 219 | return false; |
218 | 220 | } |
219 | 221 | return true; |
@@ -66,7 +66,8 @@ |
||
66 | 66 | return false; |
67 | 67 | } |
68 | 68 | |
69 | - if ( isset( $_GET[ 'taxonomy' ] ) && ! in_array( $_GET[ 'taxonomy' ], $this->oProp->aTaxonomySlugs ) ) { // sanitization unnecessary |
|
69 | + if ( isset( $_GET[ 'taxonomy' ] ) && ! in_array( $_GET[ 'taxonomy' ], $this->oProp->aTaxonomySlugs ) ) { |
|
70 | +// sanitization unnecessary |
|
70 | 71 | return false; |
71 | 72 | } |
72 | 73 |
@@ -123,7 +123,8 @@ |
||
123 | 123 | |
124 | 124 | // 3.7.9+ Limitation: If the `page` argument is set in the query url, |
125 | 125 | // this factory will not be loaded to make the overall responses lighter. |
126 | - if ( isset( $_GET[ 'page' ] ) ) { // sanitization unnecessary |
|
126 | + if ( isset( $_GET[ 'page' ] ) ) { |
|
127 | +// sanitization unnecessary |
|
127 | 128 | return false; |
128 | 129 | } |
129 | 130 |
@@ -26,8 +26,9 @@ discard block |
||
26 | 26 | */ |
27 | 27 | public static function instantiate( $oProp, $oMsg ) { |
28 | 28 | |
29 | - if ( in_array( $oProp->sClassName, self::$aClassNames ) ) |
|
30 | - return self::$_oInstance; |
|
29 | + if ( in_array( $oProp->sClassName, self::$aClassNames ) ) { |
|
30 | + return self::$_oInstance; |
|
31 | + } |
|
31 | 32 | |
32 | 33 | self::$aClassNames[] = $oProp->sClassName; |
33 | 34 | self::$_oInstance = new AdminPageFramework_PageLoadInfo_post_type( $oProp, $oMsg ); |
@@ -43,7 +44,8 @@ discard block |
||
43 | 44 | public function _replyToSetPageLoadInfoInFooter() { |
44 | 45 | |
45 | 46 | // Some users set `$_GET[ 'post_type' ]` element even in regular admin pages. In that case, do not load the style to avoid duplicates. |
46 | - if ( isset( $_GET[ 'page' ] ) && $_GET[ 'page' ] ) { // sanitization unnecessary |
|
47 | + if ( isset( $_GET[ 'page' ] ) && $_GET[ 'page' ] ) { |
|
48 | +// sanitization unnecessary |
|
47 | 49 | return; |
48 | 50 | } |
49 | 51 |
@@ -26,7 +26,8 @@ |
||
26 | 26 | parent::__construct( $oProp, $oMsg ); |
27 | 27 | |
28 | 28 | // For post type posts listing table page ( edit.php ) |
29 | - if ( isset( $_GET[ 'post_type' ] ) && $_GET[ 'post_type' ] === $this->oProp->sPostType ) { // sanitization unnecessary |
|
29 | + if ( isset( $_GET[ 'post_type' ] ) && $_GET[ 'post_type' ] === $this->oProp->sPostType ) { |
|
30 | +// sanitization unnecessary |
|
30 | 31 | add_action( |
31 | 32 | 'get_edit_post_link', |
32 | 33 | array( $this, '_replyToAddPostTypeQueryInEditPostLink' ), |
@@ -154,17 +154,19 @@ discard block |
||
154 | 154 | * @internal |
155 | 155 | * @return integer The found post ID. `0` if not found. |
156 | 156 | */ |
157 | - private function ___getPostID() { |
|
157 | + private function ___getPostID() { |
|
158 | 158 | |
159 | 159 | // for an editing post page. |
160 | 160 | if ( isset( $GLOBALS[ 'post' ]->ID ) ) { |
161 | 161 | return $GLOBALS[ 'post' ]->ID; |
162 | 162 | } |
163 | - if ( isset( $_GET[ 'post' ] ) ) { // sanitization unnecessary |
|
163 | + if ( isset( $_GET[ 'post' ] ) ) { |
|
164 | +// sanitization unnecessary |
|
164 | 165 | return absint( $_GET[ 'post' ] ); // sanitization done |
165 | 166 | } |
166 | 167 | // for post.php without any query key-values. |
167 | - if ( isset( $_POST[ 'post_ID' ] ) ) { // sanitization unnecessary |
|
168 | + if ( isset( $_POST[ 'post_ID' ] ) ) { |
|
169 | +// sanitization unnecessary |
|
168 | 170 | return absint( $_POST[ 'post_ID' ] ); // sanitization done |
169 | 171 | } |
170 | 172 | return 0; |
@@ -288,10 +290,12 @@ discard block |
||
288 | 290 | } |
289 | 291 | |
290 | 292 | // If our nonce isn't there, or we can't verify it, bail |
291 | - if ( ! isset( $_POST[ $this->oProp->sMetaBoxID ] ) ) { // sanitization unnecessary |
|
293 | + if ( ! isset( $_POST[ $this->oProp->sMetaBoxID ] ) ) { |
|
294 | +// sanitization unnecessary |
|
292 | 295 | return false; |
293 | 296 | } |
294 | - if ( ! wp_verify_nonce( $_POST[ $this->oProp->sMetaBoxID ], $this->oProp->sMetaBoxID ) ) { // sanitization unnecessary |
|
297 | + if ( ! wp_verify_nonce( $_POST[ $this->oProp->sMetaBoxID ], $this->oProp->sMetaBoxID ) ) { |
|
298 | +// sanitization unnecessary |
|
295 | 299 | return false; |
296 | 300 | } |
297 | 301 |
@@ -46,7 +46,8 @@ |
||
46 | 46 | static public function getInputsUnset( array $aInputs, $sFieldsType, $iSkipDepth=0 ) { |
47 | 47 | |
48 | 48 | $_sUnsetKey = '__unset_' . $sFieldsType; |
49 | - if ( ! isset( $_POST[ $_sUnsetKey ] ) ) { // sanitization unnecessary |
|
49 | + if ( ! isset( $_POST[ $_sUnsetKey ] ) ) { |
|
50 | +// sanitization unnecessary |
|
50 | 51 | return $aInputs; |
51 | 52 | } |
52 | 53 |
@@ -141,7 +141,7 @@ discard block |
||
141 | 141 | * @return void |
142 | 142 | */ |
143 | 143 | public function _replyToSaveNotices() { |
144 | - if ( empty( self::$_aNotices ) ) { |
|
144 | + if ( empty( self::$_aNotices ) ) { |
|
145 | 145 | return; |
146 | 146 | } |
147 | 147 | $_bResult = $this->setTransient( |
@@ -161,12 +161,13 @@ discard block |
||
161 | 161 | |
162 | 162 | // Retrieve the notifications set in a transient. |
163 | 163 | $_aNotices = $this->_getNotices(); |
164 | - if ( false === $_aNotices ) { |
|
164 | + if ( false === $_aNotices ) { |
|
165 | 165 | return; |
166 | 166 | } |
167 | 167 | |
168 | 168 | // By setting false to the 'settings-notice' key, it's possible to disable the notifications set with the framework. |
169 | - if ( isset( $_GET[ 'settings-notice' ] ) && ! $_GET[ 'settings-notice' ] ) { // sanitization unnecessary |
|
169 | + if ( isset( $_GET[ 'settings-notice' ] ) && ! $_GET[ 'settings-notice' ] ) { |
|
170 | +// sanitization unnecessary |
|
170 | 171 | return; |
171 | 172 | } |
172 | 173 |