Sanitize, not escape.

This commit is contained in:
Jason Cosper 2023-01-05 17:35:16 -08:00
parent b76c6cafe7
commit 009419a826

View File

@ -67,7 +67,7 @@ function biscotti_login_cookie_expiration_form_fields_update( $user_id )
if (! current_user_can('edit_user', $user_id) ) { if (! current_user_can('edit_user', $user_id) ) {
return; return;
} }
update_user_meta($user_id, 'biscotti_login_cookie_expiration', esc_attr($_POST['biscotti_login_cookie_expiration'])); update_user_meta($user_id, 'biscotti_login_cookie_expiration', sanitize_text_field($_POST['biscotti_login_cookie_expiration']));
} }
// Save the chosen login cookie expiration date when the user profile is updated. // Save the chosen login cookie expiration date when the user profile is updated.