Support

Home Forums Event Espresso Premium Minor Bug Registration -> Questions Groupings: showing backslashesin apostrophes

Minor Bug Registration -> Questions Groupings: showing backslashesin apostrophes

Posted: July 11, 2012 at 9:35 am


rjones

July 11, 2012 at 9:35 am

I found this issue in the following file:

wp-content\plugins\event-espresso.3.1.21.P\includes\functions\main.php

Line 660 just lists the $question->group_name without taking into account apostrophes.

I modified the line to read:
$html .= $question->show_group_name != 0 ? “” . stripslashes($question->group_name) . “” : ”;

This fixes it.

You really should sanitize all output before displaying it. I haven’t seen this else where so I think it’s one that just slipped through the cracks.


Josh

  • Support Staff

July 11, 2012 at 12:34 pm

Thanks. It might be, there was some more work done on escaping apostrophes since 3.1.21, but this one might’ve slipped through. I’ll let the dev team know.


rjones

July 11, 2012 at 1:21 pm

Thanks for the response. I just noticed that the same issue occurs in the admin section as well – but it’s not quite as important there.


rjones

July 11, 2012 at 1:23 pm

Oh – and the same issue occurs in event-espresso.3.1.24.1.P as well – Just an FYI.

All that being said, the plugin is still a very great product.


Josh

  • Support Staff

July 11, 2012 at 1:38 pm

I’ve created a ticket for this.

The support post ‘Minor Bug Registration -> Questions Groupings: showing backslashesin apostrophes’ is closed to new replies.

Have a question about this support post? Create a new support post in our support forums and include a link to this existing support post so we can help you.

Support forum for Event Espresso 3 and Event Espresso 4.
Documentation for EE3 and EE4
Documentation for Event Espresso 3

Documentation for Event Espresso 4

Status: closed

Updated by  Josh 7 years, 4 months ago ago

Topic Tags

Notifications

This topic is: resolved
Do NOT follow this link or you will be banned from the site!
[for="input_96_5_3"]
[for="input_96_5_3"]
[gravityform id=96 title=false description=false]
  • This field is for validation purposes and should be left unchanged.
[i]
[i]
[gravityform id=69 title=false description=false]
  • This field is for validation purposes and should be left unchanged.