Escape and absint

the-events-calendar · Dec 3, 2021 · fb9dcae · fb9dcae
1 parent 9c2d338
commit fb9dcae
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/output/gigpress_sidebar.php b/output/gigpress_sidebar.php
@@ -168,7 +168,7 @@ function form( $instance ) {
 
 		<p>
 			<label for="<?php echo esc_attr( $this->get_field_id( 'related' ) ); ?>">
-				<?php _e( 'Only display shows related to this post', 'gigpress' ); ?>
+				<?php esc_html_e( 'Only display shows related to this post', 'gigpress' ); ?>
 			</label>
 			<select style="width:100%;" id="<?php echo esc_attr( $this->get_field_id( 'related' ) ); ?>" name="<?php echo esc_attr( $this->get_field_name( 'related' ) ); ?>">
 				<option value="">--</option>
@@ -177,7 +177,7 @@ function form( $instance ) {
 				if ( $posts != false ) :
 					foreach ( $posts as $this_post ) :
 						?>
-						<option value="<?php echo absint( $this_post->ID ); ?>" <?php echo ( $related == $this_post->ID ) ? 'selected="selected"' : ''; ?>>
+						<option value="<?php echo absint( $this_post->ID ); ?>" <?php echo ( absint( $related ) === $this_post->ID ) ? 'selected="selected"' : ''; ?>>
 							<?php echo esc_html( get_the_title( $this_post ) ); ?>
 						</option>
 					<?php endforeach; ?>