[jables]

Fixed The PHP function htmlspecialchars does the trick, but needs to be applied in a few places:

eStore_button_display_helper.php, the variation option code should be changed to this <option value="'.htmlspecialchars($tmp_txt).'">'.$tmp_txt.'</option>

eStore_payment_submission.php, references to the item name should be changed to this htmlspecialchars($item)

[jables]

I prefer using the widget as it pulls through the widget title marked up as an H3. I just thought it might be a nice addition to the widget in a future version.

[jables]

There must be a fix to escape double quotes in the code. I’ll have a go at fixing.

[Author]

Posts