Edit File by line

<?php

[0] Fix | Delete

/**

[1] Fix | Delete

* WooCommerce Admin Settings Class

[2] Fix | Delete

[3] Fix | Delete

* @package WooCommerce\Admin

[4] Fix | Delete

* @version 3.4.0

[5] Fix | Delete

[6] Fix | Delete

[7] Fix | Delete

use Automattic\Jetpack\Constants;

[8] Fix | Delete

use Automattic\WooCommerce\Internal\Features\FeaturesController;

[9] Fix | Delete

use Automattic\WooCommerce\Utilities\FeaturesUtil;

[10] Fix | Delete

[11] Fix | Delete

if ( ! defined( 'ABSPATH' ) ) {

[12] Fix | Delete

exit;

[13] Fix | Delete

}

[14] Fix | Delete

[15] Fix | Delete

if ( ! class_exists( 'WC_Admin_Settings', false ) ) :

[16] Fix | Delete

[17] Fix | Delete

/**

[18] Fix | Delete

* WC_Admin_Settings Class.

[19] Fix | Delete

[20] Fix | Delete

class WC_Admin_Settings {

[21] Fix | Delete

[22] Fix | Delete

/**

[23] Fix | Delete

* Setting pages.

[24] Fix | Delete

[25] Fix | Delete

* @var array

[26] Fix | Delete

[27] Fix | Delete

private static $settings = array();

[28] Fix | Delete

[29] Fix | Delete

/**

[30] Fix | Delete

* Error messages.

[31] Fix | Delete

[32] Fix | Delete

* @var array

[33] Fix | Delete

[34] Fix | Delete

private static $errors = array();

[35] Fix | Delete

[36] Fix | Delete

/**

[37] Fix | Delete

* Update messages.

[38] Fix | Delete

[39] Fix | Delete

* @var array

[40] Fix | Delete

[41] Fix | Delete

private static $messages = array();

[42] Fix | Delete

[43] Fix | Delete

/**

[44] Fix | Delete

* Include the settings page classes.

[45] Fix | Delete

[46] Fix | Delete

public static function get_settings_pages() {

[47] Fix | Delete

if ( empty( self::$settings ) ) {

[48] Fix | Delete

$settings = array();

[49] Fix | Delete

[50] Fix | Delete

include_once __DIR__ . '/settings/class-wc-settings-page.php';

[51] Fix | Delete

[52] Fix | Delete

$settings[] = include_once __DIR__ . '/settings/class-wc-settings-general.php';

[53] Fix | Delete

$settings[] = include_once __DIR__ . '/settings/class-wc-settings-products.php';

[54] Fix | Delete

$settings[] = include_once __DIR__ . '/settings/class-wc-settings-tax.php';

[55] Fix | Delete

$settings[] = include_once __DIR__ . '/settings/class-wc-settings-shipping.php';

[56] Fix | Delete

$settings[] = include_once __DIR__ . '/settings/class-wc-settings-payment-gateways.php';

[57] Fix | Delete

$settings[] = include_once __DIR__ . '/settings/class-wc-settings-accounts.php';

[58] Fix | Delete

$settings[] = include_once __DIR__ . '/settings/class-wc-settings-emails.php';

[59] Fix | Delete

$settings[] = include_once __DIR__ . '/settings/class-wc-settings-integrations.php';

[60] Fix | Delete

if ( \Automattic\WooCommerce\Admin\Features\Features::is_enabled( 'launch-your-store' ) ) {

[61] Fix | Delete

$settings[] = include_once __DIR__ . '/settings/class-wc-settings-site-visibility.php';

[62] Fix | Delete

}

[63] Fix | Delete

if ( FeaturesUtil::feature_is_enabled( 'point_of_sale' ) ) {

[64] Fix | Delete

$settings[] = include_once __DIR__ . '/settings/class-wc-settings-point-of-sale.php';

[65] Fix | Delete

}

[66] Fix | Delete

$settings[] = include_once __DIR__ . '/settings/class-wc-settings-advanced.php';

[67] Fix | Delete

[68] Fix | Delete

self::$settings = apply_filters( 'woocommerce_get_settings_pages', $settings );

[69] Fix | Delete

add_action(

[70] Fix | Delete

'admin_head',

[71] Fix | Delete

function () {

[72] Fix | Delete

if ( function_exists( 'get_current_screen' ) ) {

[73] Fix | Delete

$screen = get_current_screen();

[74] Fix | Delete

if ( 'woocommerce_page_wc-settings' === $screen->id ) {

[75] Fix | Delete

$screen->remove_help_tabs();

[76] Fix | Delete

}

[77] Fix | Delete

}

[78] Fix | Delete

}

[79] Fix | Delete

);

[80] Fix | Delete

[81] Fix | Delete

// Reset settings when features that affect settings are toggled.

[82] Fix | Delete

add_action( FeaturesController::FEATURE_ENABLED_CHANGED_ACTION, array( __CLASS__, 'reset_settings_pages_on_feature_change' ), 10, 2 );

[83] Fix | Delete

}

[84] Fix | Delete

[85] Fix | Delete

return self::$settings;

[86] Fix | Delete

}

[87] Fix | Delete

[88] Fix | Delete

/**

[89] Fix | Delete

* Reset settings when features that affect settings are toggled.

[90] Fix | Delete

[91] Fix | Delete

* @param string $feature_id The feature ID.

[92] Fix | Delete

* @param bool $is_enabled Whether the feature is enabled.

[93] Fix | Delete

[94] Fix | Delete

* @internal For exclusive usage within this class, backwards compatibility not guaranteed.

[95] Fix | Delete

[96] Fix | Delete

public static function reset_settings_pages_on_feature_change( $feature_id, $is_enabled ) {

[97] Fix | Delete

if ( 'point_of_sale' === $feature_id && $is_enabled ) {

[98] Fix | Delete

self::$settings = array();

[99] Fix | Delete

self::get_settings_pages();

[100] Fix | Delete

}

[101] Fix | Delete

}

[102] Fix | Delete

[103] Fix | Delete

/**

[104] Fix | Delete

* Save the settings.

[105] Fix | Delete

[106] Fix | Delete

public static function save() {

[107] Fix | Delete

global $current_tab;

[108] Fix | Delete

[109] Fix | Delete

if ( ! current_user_can( 'manage_woocommerce' ) ) {

[110] Fix | Delete

wp_die( esc_html__( 'You do not have permission to save settings.', 'woocommerce' ), 403 );

[111] Fix | Delete

}

[112] Fix | Delete

[113] Fix | Delete

check_admin_referer( 'woocommerce-settings' );

[114] Fix | Delete

[115] Fix | Delete

// Trigger actions.

[116] Fix | Delete

do_action( 'woocommerce_settings_save_' . $current_tab );

[117] Fix | Delete

do_action( 'woocommerce_update_options_' . $current_tab );

[118] Fix | Delete

do_action( 'woocommerce_update_options' );

[119] Fix | Delete

[120] Fix | Delete

self::add_message( __( 'Your settings have been saved.', 'woocommerce' ) );

[121] Fix | Delete

self::check_download_folder_protection();

[122] Fix | Delete

[123] Fix | Delete

// Clear any unwanted data and flush rules.

[124] Fix | Delete

update_option( 'woocommerce_queue_flush_rewrite_rules', 'yes' );

[125] Fix | Delete

WC()->query->init_query_vars();

[126] Fix | Delete

WC()->query->add_endpoints();

[127] Fix | Delete

[128] Fix | Delete

do_action( 'woocommerce_settings_saved' );

[129] Fix | Delete

}

[130] Fix | Delete

[131] Fix | Delete

/**

[132] Fix | Delete

* Add a message.

[133] Fix | Delete

[134] Fix | Delete

* @param string $text Message.

[135] Fix | Delete

[136] Fix | Delete

public static function add_message( $text ) {

[137] Fix | Delete

self::$messages[] = $text;

[138] Fix | Delete

}

[139] Fix | Delete

[140] Fix | Delete

/**

[141] Fix | Delete

* Add an error.

[142] Fix | Delete

[143] Fix | Delete

* @param string $text Message.

[144] Fix | Delete

[145] Fix | Delete

public static function add_error( $text ) {

[146] Fix | Delete

self::$errors[] = $text;

[147] Fix | Delete

}

[148] Fix | Delete

[149] Fix | Delete

/**

[150] Fix | Delete

* Output messages + errors.

[151] Fix | Delete

[152] Fix | Delete

public static function show_messages() {

[153] Fix | Delete

if ( count( self::$errors ) > 0 ) {

[154] Fix | Delete

foreach ( self::$errors as $error ) {

[155] Fix | Delete

echo '<div id="message" class="error inline"><p><strong>' . esc_html( $error ) . '</strong></p></div>';

[156] Fix | Delete

}

[157] Fix | Delete

} elseif ( count( self::$messages ) > 0 ) {

[158] Fix | Delete

foreach ( self::$messages as $message ) {

[159] Fix | Delete

echo '<div id="message" class="updated inline"><p><strong>' . esc_html( $message ) . '</strong></p></div>';

[160] Fix | Delete

}

[161] Fix | Delete

}

[162] Fix | Delete

}

[163] Fix | Delete

[164] Fix | Delete

/**

[165] Fix | Delete

* Settings page.

[166] Fix | Delete

[167] Fix | Delete

* Handles the display of the main woocommerce settings page in admin.

[168] Fix | Delete

[169] Fix | Delete

public static function output() {

[170] Fix | Delete

global $current_section, $current_tab;

[171] Fix | Delete

[172] Fix | Delete

$suffix = Constants::is_true( 'SCRIPT_DEBUG' ) ? '' : '.min';

[173] Fix | Delete

[174] Fix | Delete

do_action( 'woocommerce_settings_start' );

[175] Fix | Delete

[176] Fix | Delete

wp_enqueue_script( 'woocommerce_settings', WC()->plugin_url() . '/assets/js/admin/settings' . $suffix . '.js', array( 'jquery', 'wp-util', 'jquery-ui-datepicker', 'jquery-ui-sortable', 'iris', 'selectWoo' ), WC()->version, true );

[177] Fix | Delete

[178] Fix | Delete

wp_localize_script(

[179] Fix | Delete

'woocommerce_settings',

[180] Fix | Delete

'woocommerce_settings_params',

[181] Fix | Delete

array(

[182] Fix | Delete

'i18n_nav_warning' => __( 'The changes you made will be lost if you navigate away from this page.', 'woocommerce' ),

[183] Fix | Delete

'i18n_moved_up' => __( 'Item moved up', 'woocommerce' ),

[184] Fix | Delete

'i18n_moved_down' => __( 'Item moved down', 'woocommerce' ),

[185] Fix | Delete

'i18n_no_specific_countries_selected' => __( 'Selecting no country / region to sell to prevents from completing the checkout. Continue anyway?', 'woocommerce' ),

[186] Fix | Delete

)

[187] Fix | Delete

);

[188] Fix | Delete

[189] Fix | Delete

// Get tabs for the settings page.

[190] Fix | Delete

$tabs = apply_filters( 'woocommerce_settings_tabs_array', array() );

[191] Fix | Delete

[192] Fix | Delete

include __DIR__ . '/views/html-admin-settings.php';

[193] Fix | Delete

}

[194] Fix | Delete

[195] Fix | Delete

/**

[196] Fix | Delete

* Get a setting from the settings API.

[197] Fix | Delete

[198] Fix | Delete

* @param string $option_name Option name.

[199] Fix | Delete

* @param mixed $default Default value.

[200] Fix | Delete

* @return mixed

[201] Fix | Delete

[202] Fix | Delete

public static function get_option( $option_name, $default = '' ) {

[203] Fix | Delete

if ( ! $option_name ) {

[204] Fix | Delete

return $default;

[205] Fix | Delete

}

[206] Fix | Delete

[207] Fix | Delete

// Array value.

[208] Fix | Delete

if ( strstr( $option_name, '[' ) ) {

[209] Fix | Delete

[210] Fix | Delete

parse_str( $option_name, $option_array );

[211] Fix | Delete

[212] Fix | Delete

// Option name is first key.

[213] Fix | Delete

$option_name = current( array_keys( $option_array ) );

[214] Fix | Delete

[215] Fix | Delete

// Get value.

[216] Fix | Delete

$option_values = get_option( $option_name, '' );

[217] Fix | Delete

[218] Fix | Delete

$key = key( $option_array[ $option_name ] );

[219] Fix | Delete

[220] Fix | Delete

if ( isset( $option_values[ $key ] ) ) {

[221] Fix | Delete

$option_value = $option_values[ $key ];

[222] Fix | Delete

} else {

[223] Fix | Delete

$option_value = null;

[224] Fix | Delete

}

[225] Fix | Delete

} else {

[226] Fix | Delete

// Single value.

[227] Fix | Delete

$option_value = get_option( $option_name, null );

[228] Fix | Delete

}

[229] Fix | Delete

[230] Fix | Delete

if ( is_array( $option_value ) ) {

[231] Fix | Delete

$option_value = wp_unslash( $option_value );

[232] Fix | Delete

} elseif ( ! is_null( $option_value ) ) {

[233] Fix | Delete

$option_value = stripslashes( $option_value );

[234] Fix | Delete

}

[235] Fix | Delete

[236] Fix | Delete

return ( null === $option_value ) ? $default : $option_value;

[237] Fix | Delete

}

[238] Fix | Delete

[239] Fix | Delete

/**

[240] Fix | Delete

* Output admin fields.

[241] Fix | Delete

[242] Fix | Delete

* Loops through the woocommerce options array and outputs each field.

[243] Fix | Delete

[244] Fix | Delete

* @param array[] $options Opens array to output.

[245] Fix | Delete

[246] Fix | Delete

public static function output_fields( $options ) {

[247] Fix | Delete

foreach ( $options as $value ) {

[248] Fix | Delete

if ( ! isset( $value['type'] ) ) {

[249] Fix | Delete

continue;

[250] Fix | Delete

}

[251] Fix | Delete

if ( ! isset( $value['id'] ) ) {

[252] Fix | Delete

$value['id'] = '';

[253] Fix | Delete

}

[254] Fix | Delete

[255] Fix | Delete

// The 'field_name' key can be used when it is useful to specify an input field name that is different

[256] Fix | Delete

// from the input field ID. We use the key 'field_name' because 'name' is already in use for a different

[257] Fix | Delete

// purpose.

[258] Fix | Delete

if ( ! isset( $value['field_name'] ) ) {

[259] Fix | Delete

$value['field_name'] = $value['id'];

[260] Fix | Delete

}

[261] Fix | Delete

if ( ! isset( $value['title'] ) ) {

[262] Fix | Delete

$value['title'] = isset( $value['name'] ) ? $value['name'] : '';

[263] Fix | Delete

}

[264] Fix | Delete

if ( ! isset( $value['class'] ) ) {

[265] Fix | Delete

$value['class'] = '';

[266] Fix | Delete

}

[267] Fix | Delete

if ( ! isset( $value['css'] ) ) {

[268] Fix | Delete

$value['css'] = '';

[269] Fix | Delete

}

[270] Fix | Delete

if ( ! isset( $value['default'] ) ) {

[271] Fix | Delete

$value['default'] = '';

[272] Fix | Delete

}

[273] Fix | Delete

if ( ! isset( $value['desc'] ) ) {

[274] Fix | Delete

$value['desc'] = '';

[275] Fix | Delete

}

[276] Fix | Delete

if ( ! isset( $value['desc_tip'] ) ) {

[277] Fix | Delete

$value['desc_tip'] = false;

[278] Fix | Delete

}

[279] Fix | Delete

if ( ! isset( $value['placeholder'] ) ) {

[280] Fix | Delete

$value['placeholder'] = '';

[281] Fix | Delete

}

[282] Fix | Delete

if ( ! isset( $value['row_class'] ) ) {

[283] Fix | Delete

$value['row_class'] = '';

[284] Fix | Delete

}

[285] Fix | Delete

if ( ! empty( $value['row_class'] ) && substr( $value['row_class'], 0, 16 ) !== 'wc-settings-row-' ) {

[286] Fix | Delete

$value['row_class'] = 'wc-settings-row-' . $value['row_class'];

[287] Fix | Delete

}

[288] Fix | Delete

if ( ! isset( $value['suffix'] ) ) {

[289] Fix | Delete

$value['suffix'] = '';

[290] Fix | Delete

}

[291] Fix | Delete

if ( ! isset( $value['value'] ) ) {

[292] Fix | Delete

$value['value'] = self::get_option( $value['id'], $value['default'] );

[293] Fix | Delete

}

[294] Fix | Delete

[295] Fix | Delete

if ( ! is_null( $value['fixed_value'] ?? null ) ) {

[296] Fix | Delete

$value['value'] = $value['fixed_value'];

[297] Fix | Delete

}

[298] Fix | Delete

[299] Fix | Delete

// Custom attribute handling.

[300] Fix | Delete

$custom_attributes = array();

[301] Fix | Delete

[302] Fix | Delete

if ( ! empty( $value['custom_attributes'] ) && is_array( $value['custom_attributes'] ) ) {

[303] Fix | Delete

foreach ( $value['custom_attributes'] as $attribute => $attribute_value ) {

[304] Fix | Delete

$custom_attributes[] = esc_attr( $attribute ) . '="' . esc_attr( $attribute_value ) . '"';

[305] Fix | Delete

}

[306] Fix | Delete

}

[307] Fix | Delete

[308] Fix | Delete

// Description handling.

[309] Fix | Delete

$field_description = self::get_field_description( $value );

[310] Fix | Delete

$description = $field_description['description'];

[311] Fix | Delete

$tooltip_html = $field_description['tooltip_html'];

[312] Fix | Delete

[313] Fix | Delete

// Switch based on type.

[314] Fix | Delete

switch ( $value['type'] ) {

[315] Fix | Delete

[316] Fix | Delete

// Section Titles.

[317] Fix | Delete

case 'title':

[318] Fix | Delete

if ( ! empty( $value['title'] ) ) {

[319] Fix | Delete

echo '<h2>' . esc_html( $value['title'] ) . '</h2>';

[320] Fix | Delete

}

[321] Fix | Delete

if ( ! empty( $value['desc'] ) ) {

[322] Fix | Delete

echo '<div id="' . esc_attr( sanitize_title( $value['id'] ) ) . '-description">';

[323] Fix | Delete

echo wp_kses_post( wpautop( wptexturize( $value['desc'] ) ) );

[324] Fix | Delete

echo '</div>';

[325] Fix | Delete

}

[326] Fix | Delete

echo '<table class="form-table">' . "\n\n";

[327] Fix | Delete

if ( ! empty( $value['id'] ) ) {

[328] Fix | Delete

do_action( 'woocommerce_settings_' . sanitize_title( $value['id'] ) );

[329] Fix | Delete

}

[330] Fix | Delete

break;

[331] Fix | Delete

[332] Fix | Delete

case 'info':

[333] Fix | Delete

?><tr class="<?php echo esc_attr( $value['row_class'] ); ?>">

[334] Fix | Delete

[335] Fix | Delete

[336] Fix | Delete

<?php

[337] Fix | Delete

echo wp_kses_post( wpautop( wptexturize( $value['text'] ) ) );

[338] Fix | Delete

echo '</td></tr>';

[339] Fix | Delete

break;

[340] Fix | Delete

[341] Fix | Delete

// Notice.

[342] Fix | Delete

case 'notice':

[343] Fix | Delete

$notice_type = $value['notice_type'] ?? 'info';

[344] Fix | Delete

$notice_text = $value['text'] ?? '';

[345] Fix | Delete

[346] Fix | Delete

[347] Fix | Delete

</table>

[348] Fix | Delete

<div class="notice notice-<?php echo esc_attr( $notice_type ); ?> inline">

[349] Fix | Delete

[350] Fix | Delete

</div>

[351] Fix | Delete

[352] Fix | Delete

<?php

[353] Fix | Delete

break;

[354] Fix | Delete

[355] Fix | Delete

// Section Ends.

[356] Fix | Delete

case 'sectionend':

[357] Fix | Delete

if ( ! empty( $value['id'] ) ) {

[358] Fix | Delete

do_action( 'woocommerce_settings_' . sanitize_title( $value['id'] ) . '_end' );

[359] Fix | Delete

}

[360] Fix | Delete

echo '</table>';

[361] Fix | Delete

if ( ! empty( $value['id'] ) ) {

[362] Fix | Delete

do_action( 'woocommerce_settings_' . sanitize_title( $value['id'] ) . '_after' );

[363] Fix | Delete

}

[364] Fix | Delete

break;

[365] Fix | Delete

[366] Fix | Delete

// Standard text inputs and subtypes like 'number'.

[367] Fix | Delete

case 'text':

[368] Fix | Delete

case 'password':

[369] Fix | Delete

case 'datetime':

[370] Fix | Delete

case 'datetime-local':

[371] Fix | Delete

case 'date':

[372] Fix | Delete

case 'month':

[373] Fix | Delete

case 'time':

[374] Fix | Delete

case 'week':

[375] Fix | Delete

case 'number':

[376] Fix | Delete

case 'email':

[377] Fix | Delete

case 'url':

[378] Fix | Delete

case 'tel':

[379] Fix | Delete

$option_value = $value['value'];

[380] Fix | Delete

[381] Fix | Delete

[382] Fix | Delete

[383] Fix | Delete

[384] Fix | Delete

[385] Fix | Delete

</th>

[386] Fix | Delete

[387] Fix | Delete

<input

[388] Fix | Delete

name="<?php echo esc_attr( $value['field_name'] ); ?>"

[389] Fix | Delete

id="<?php echo esc_attr( $value['id'] ); ?>"

[390] Fix | Delete

type="<?php echo esc_attr( $value['type'] ); ?>"

[391] Fix | Delete

style="<?php echo esc_attr( $value['css'] ); ?>"

[392] Fix | Delete

value="<?php echo esc_attr( $option_value ); ?>"

[393] Fix | Delete

class="<?php echo esc_attr( $value['class'] ); ?>"

[394] Fix | Delete

placeholder="<?php echo esc_attr( $value['placeholder'] ); ?>"

[395] Fix | Delete

<?php echo implode( ' ', $custom_attributes ); // WPCS: XSS ok. ?>

[396] Fix | Delete

/><?php echo esc_html( $value['suffix'] ); ?> <?php echo $description; // WPCS: XSS ok. ?>

[397] Fix | Delete

</td>

[398] Fix | Delete

</tr>

[399] Fix | Delete

<?php

[400] Fix | Delete

break;

[401] Fix | Delete

[402] Fix | Delete

// Color picker.

[403] Fix | Delete

case 'color':

[404] Fix | Delete

$option_value = $value['value'];

[405] Fix | Delete

[406] Fix | Delete

[407] Fix | Delete

[408] Fix | Delete

[409] Fix | Delete

[410] Fix | Delete

</th>

[411] Fix | Delete

<td class="forminp forminp-<?php echo esc_attr( sanitize_title( $value['type'] ) ); ?>">&lrm;

[412] Fix | Delete

[413] Fix | Delete

<input

[414] Fix | Delete

name="<?php echo esc_attr( $value['field_name'] ); ?>"

[415] Fix | Delete

id="<?php echo esc_attr( $value['id'] ); ?>"

[416] Fix | Delete

type="text"

[417] Fix | Delete

dir="ltr"

[418] Fix | Delete

style="<?php echo esc_attr( $value['css'] ); ?>"

[419] Fix | Delete

value="<?php echo esc_attr( $option_value ); ?>"

[420] Fix | Delete

class="<?php echo esc_attr( $value['class'] ); ?>colorpick"

[421] Fix | Delete

placeholder="<?php echo esc_attr( $value['placeholder'] ); ?>"

[422] Fix | Delete

<?php echo implode( ' ', $custom_attributes ); // WPCS: XSS ok. ?>

[423] Fix | Delete

/>&lrm; <?php echo $description; // WPCS: XSS ok. ?>

[424] Fix | Delete

<div id="colorPickerDiv_<?php echo esc_attr( $value['id'] ); ?>" class="colorpickdiv" style="z-index: 100;background:#eee;border:1px solid #ccc;position:absolute;display:none;"></div>

[425] Fix | Delete

</td>

[426] Fix | Delete

</tr>

[427] Fix | Delete

<?php

[428] Fix | Delete

break;

[429] Fix | Delete

[430] Fix | Delete

// Textarea.

[431] Fix | Delete

case 'textarea':

[432] Fix | Delete

$option_value = $value['value'];

[433] Fix | Delete

$show_desc_at_end = $value['desc_at_end'] ?? false;

[434] Fix | Delete

[435] Fix | Delete

[436] Fix | Delete

[437] Fix | Delete

[438] Fix | Delete

[439] Fix | Delete

</th>

[440] Fix | Delete

[441] Fix | Delete

<?php

[442] Fix | Delete

if ( ! $show_desc_at_end ) {

[443] Fix | Delete

echo wp_kses_post( $description );

[444] Fix | Delete

}

[445] Fix | Delete

[446] Fix | Delete

<textarea

[447] Fix | Delete

name="<?php echo esc_attr( $value['field_name'] ); ?>"

[448] Fix | Delete

id="<?php echo esc_attr( $value['id'] ); ?>"

[449] Fix | Delete

style="<?php echo esc_attr( $value['css'] ); ?>"

[450] Fix | Delete

class="<?php echo esc_attr( $value['class'] ); ?>"

[451] Fix | Delete

placeholder="<?php echo esc_attr( $value['placeholder'] ); ?>"

[452] Fix | Delete

<?php echo implode( ' ', $custom_attributes ); // WPCS: XSS ok. ?>

[453] Fix | Delete

><?php echo esc_textarea( $option_value ); // WPCS: XSS ok. ?></textarea>

[454] Fix | Delete

<?php

[455] Fix | Delete

if ( $show_desc_at_end ) {

[456] Fix | Delete

echo wp_kses_post( $description );

[457] Fix | Delete

}

[458] Fix | Delete

[459] Fix | Delete

</td>

[460] Fix | Delete

</tr>

[461] Fix | Delete

<?php

[462] Fix | Delete

break;

[463] Fix | Delete

[464] Fix | Delete

// Select boxes.

[465] Fix | Delete

case 'select':

[466] Fix | Delete

case 'multiselect':

[467] Fix | Delete

$option_value = $value['value'];

[468] Fix | Delete

[469] Fix | Delete

[470] Fix | Delete

[471] Fix | Delete

[472] Fix | Delete

[473] Fix | Delete

</th>

[474] Fix | Delete

[475] Fix | Delete

<select

[476] Fix | Delete

name="<?php echo esc_attr( $value['field_name'] ); ?><?php echo ( 'multiselect' === $value['type'] ) ? '[]' : ''; ?>"

[477] Fix | Delete

id="<?php echo esc_attr( $value['id'] ); ?>"

[478] Fix | Delete

style="<?php echo esc_attr( $value['css'] ); ?>"

[479] Fix | Delete

class="<?php echo esc_attr( $value['class'] ); ?>"

[480] Fix | Delete

<?php echo implode( ' ', $custom_attributes ); // WPCS: XSS ok. ?>

[481] Fix | Delete

<?php echo 'multiselect' === $value['type'] ? 'multiple="multiple"' : ''; ?>

[482] Fix | Delete

[483] Fix | Delete

<?php

[484] Fix | Delete

foreach ( $value['options'] as $key => $val ) {

[485] Fix | Delete

[486] Fix | Delete

<option value="<?php echo esc_attr( $key ); ?>"

[487] Fix | Delete

<?php

[488] Fix | Delete

[489] Fix | Delete

if ( is_array( $option_value ) ) {

[490] Fix | Delete

selected( in_array( (string) $key, $option_value, true ), true );

[491] Fix | Delete

} else {

[492] Fix | Delete

selected( $option_value, (string) $key );

[493] Fix | Delete

}

[494] Fix | Delete

[495] Fix | Delete

[496] Fix | Delete

><?php echo esc_html( $val ); ?></option>

[497] Fix | Delete

<?php

[498] Fix | Delete

}

[499] Fix | Delete

12 3