ravinderk / Give

includes/admin/views/html-admin-settings.php

<?php
/**
 * Admin View: Settings
 */
if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

// Bailout: Do not output anything if setting tab is not defined.
if ( ! empty( $tabs ) && array_key_exists( give_get_current_setting_tab(), $tabs ) ) :
	/**
	 * Filter the form action.
	 *
	 * Note: filter dynamically fire on basis of setting page slug
	 * For example: if you register a setting page with give-settings menu slug and general current tab
	 *              then filter will be give-settings_form_method_tab_general
	 *
	 * @since 1.8
	 */
	$form_method = apply_filters( self::$setting_filter_prefix . '_form_method_tab_' . $current_tab, 'post' );

	/**
	 * Filter the main form tab.
	 *
	 * Note: You can stop print main form if you want to.filter dynamically fire on basis of setting page slug
	 * For example: if you register a setting page with give-settings menu slug
	 *              then filter will be give-settings_open_form, give-settings_close_form
	 *              We are using this filter in includes/admin/tools/class-settings-data.php#L52
	 *
	 * @since 1.8
	 */
	$form_open_tag  = apply_filters( self::$setting_filter_prefix . '_open_form', '<form method="' . $form_method . '" id="give-mainform" action="" enctype="multipart/form-data">' );
	$form_close_tag = apply_filters( self::$setting_filter_prefix . '_close_form', '</form>' );

	$wrapper_class = implode( ' ',
		array(
			self::$setting_filter_prefix . '-setting-page',
			self::$setting_filter_prefix . '-' . give_get_current_setting_section() . '-section',
			self::$setting_filter_prefix . '-' . give_get_current_setting_tab() . '-tab',
		)
	);
	?>
	<div class="wrap give-settings-page <?php echo $wrapper_class; ?>">

Expected next thing to be a escaping function, not '$wrapper_class'

		<?php
		echo $form_open_tag;

Expected next thing to be a escaping function, not '$form_open_tag'

		/* @var Give_Settings_Page $current_setting_obj */
		if (
			! empty( $current_setting_obj ) &&
			method_exists( $current_setting_obj, 'get_heading_html' )
		) {
			echo $current_setting_obj->get_heading_html();

Expected next thing to be a escaping function, not '$current_setting_obj'

		} else {

			// Backward compatibility.
			echo sprintf(

Expected a sanitizing function (see Codex for 'Data Validation'), but instead saw 'sprintf'

				'<h1 class="wp-heading-inline">%s</h1><hr class="wp-header-end">',
				esc_html( $tabs[ $current_tab ] )
			);
		}

		self::show_messages();
		?>
		<div class="nav-tab-wrapper give-nav-tab-wrapper">
			<?php
			foreach ( $tabs as $name => $label ) {
				echo '<a href="' . admin_url( "edit.php?post_type=give_forms&page=" . self::$setting_filter_prefix . "&tab={$name}" ) . '" class="nav-tab ' . ( $current_tab === $name ? 'nav-tab-active' : 'give-mobile-hidden' ) . '">' . $label . '</a>';

Expected a sanitizing function (see Codex for 'Data Validation'), but instead saw 'admin_url'

The string literal edit.php?post_type=give_forms&page= does not require double quotes, as per coding-style, please use single quotes.

Expected next thing to be a escaping function, not '('

Expected next thing to be a escaping function, not '$label'

			}

			/**
			 * Trigger Action.
			 *
			 * Note: action dynamically fire on basis of setting page slug.
			 * For example: if you register a setting page with give-settings menu slug
			 *              then action will be give-settings_tabs
			 *
			 * @since 1.8
			 */
			do_action( self::$setting_filter_prefix . '_tabs' );
			?>
			<div class="give-sub-nav-tab-wrapper">
				<a href="#" id="give-show-sub-nav" class="nav-tab give-not-tab" title="<?php _e( 'View remaining setting tabs', 'give' ); ?>"><span class="dashicons dashicons-arrow-down-alt2"></span></span>
				</a>
				<nav class="give-sub-nav-tab give-hidden"></nav>
			</div>
		</div>
		<?php

		/**
		 * Trigger Action.
		 *
		 * Note: action dynamically fire on basis of setting page slug.
		 * For example: if you register a setting page with give-settings menu slug and general current tab
		 *              then action will be give-settings_sections_general_page
		 *
		 * @since 1.8
		 */
		do_action( self::$setting_filter_prefix . "_sections_{$current_tab}_page" );

		/**
		 * Trigger Action.
		 *
		 * Note: action dynamically fire on basis of setting page slug.
		 * For example: if you register a setting page with give-settings menu slug and general current tab
		 *              then action will be give-settings_settings_general_page
		 *
		 * @since 1.8
		 */
		do_action( self::$setting_filter_prefix . "_settings_{$current_tab}_page" );

		wp_nonce_field( 'give-save-settings', '_give-save-settings' );

		if ( empty( $GLOBALS['give_hide_save_button'] ) ) : ?>
			<div class="give-submit-wrap">
				<input name="save" class="button-primary give-save-button" type="submit" value="<?php _e( 'Save changes', 'give' ); ?>"/>
			</div>
		<?php endif; ?>
		<?php echo $form_close_tag; ?>

Expected next thing to be a escaping function, not '$form_close_tag'

	</div>
<?php else : echo '<div class="error"><p>' . __( 'Oops, this settings page does not exist.', 'give' ) . '</p></div>'; ?>

Expected a sanitizing function (see Codex for 'Data Validation'), but instead saw '__'

<?php endif; ?>