security changes

changed $category_id to be absint in save-data.functions.php. Also changed width and
height to int in save-data.functions.php. Used
esc_url when $return_url is echoed out in API.php.
Sorry about that, that's left over from when I was using wp_kses, but
decided that was overkill. I thought I set that $categoryid to an absint.
Thank you for your feedback. I hope these suggested updates are helpful.
Would you like me to make all the changes you proposed and make another
pull request?


On Sat, Aug 2, 2014 at 12:12 AM, JustinSainton <notifications@github.com>
wrote:

> In wpsc-admin/includes/save-data.functions.php:
>
> > @@ -180,7 +180,10 @@ function wpsc_admin_category_forms_add() {
> >  	<?php
> >  		$category_id = '';
> >  		if ( isset( $_GET["tag_ID"] ) )
> > -			$category_id = $_GET["tag_ID"];
> > +		{
> > +		 $allowed_protocols = array('http','https');
>
> This variable is defined but never used...
>
> —
> Reply to this email directly or view it on GitHub
> <https://github.com/wp-e-commerce/WP-e-Commerce/pull/1493/files#r15727783>
> .
>



-- 
Sincerely,
Ryan Satterfield