Grunion_Contact_Form_Plugin::esc_csv PHP Method

Grunion_Contact_Form_Plugin Class Documentation Mostrar archivo Open project: automattic/jetpack

esc_csv() public method

Malicious input can inject formulas into CSV files, opening up the possibility for phishing attacks and disclosure of sensitive information. Additionally, Excel exposes the ability to launch arbitrary commands through the DDE protocol.

See also: http://www.contextis.com/resources/blog/comma-separated-vulnerabilities/

public esc_csv ( string $field ) : string
$field	string
return	string

    function esc_csv($field)
    {
        $active_content_triggers = array('=', '+', '-', '@');
        if (in_array(mb_substr($field, 0, 1), $active_content_triggers, true)) {
            $field = "'" . $field;
        }
        return $field;
    }

Grunion_Contact_Form_Plugin

__construct

add_shortcode

ajax_request

akismet_submit

allow_feedback_rest_api_type

daily_akismet_meta_cleanup

download_feedback_as_csv

esc_csv

export_form

get_export_data_for_posts

get_feedbacks_as_options