';
/** Echo or return the markup */
if( $echo ){
echo $markup;
}
else{
return $markup;
}
}
/**
* Returns the current value of the field
* fully sanatised for the datatype
*
* @return mixed The fields value
*/
private function get_value(){
return $this->sanitize_option( $this->get_raw_value( get_the_ID() ) );
}
/**
* Checks the POST data for valid data and saves /
* deletes if required
*
* @since 3.0.0
* @param int $post_id The ID of the post containing the meta data
* @return void
*/
public function save_value($post_id){
if ( $this->post_value_exists() ) {
$this->update_post_meta(
$post_id,
$this->sanitize_option( $_POST[ $this->id ] )
);
} else {
$this->delete_post_meta( $post_id);
}
}
/**
* Sanatise function for option fields
*
* @since 3.0.0
* @param string $var
* @return string Sanatised string
*/
private function sanitize_option($var){
//Sanitizes and validates a string
//$url="Is Peter & funny?";
//becomes "Is Peter <smart> & funny?"
//check something was passed in
if (!isset($var)){
return(null);
}
$sanitized_val = $var;
/** Remove any markup language */
$sanitized_val = esc_attr( $sanitized_val );
//Check type
if ( gettype( $sanitized_val ) != "string" ){
return(null);
}
//Trim
$sanitized_val = trim( $sanitized_val );
//Sanitize
$sanitized_val = filter_var( $sanitized_val, FILTER_SANITIZE_STRING);
//Now check
if ($sanitized_val===false) {
//value is not int
//not valid
return(null);
} else {
return($sanitized_val);
}
//Something not right?
return(null);
}
}