Secure filter_by attribute using esc_attr

blockonomics · Jun 1, 2021 · d2059d9 · d2059d9
1 parent ca55fa3
commit d2059d9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/blockonomics-woocommerce.php b/blockonomics-woocommerce.php
@@ -75,7 +75,7 @@ function filter_orders() {
 		global $typenow;
 		if ( 'shop_order' === $typenow ) {
 			?>
-			<input size='26' value="<?php if(isset( $_GET['filter_by'] )) echo(sanitize_text_field($_GET['filter_by'])); ?>" type='name' placeholder='Filter by crypto address/txid' name='filter_by'>
+			<input size='26' value="<?php if(isset( $_GET['filter_by'] )) echo(esc_attr($_GET['filter_by'])); ?>" type='name' placeholder='Filter by crypto address/txid' name='filter_by'>
 			<?php
 		}
 	}