more escaping

Open-Web-Analytics · Sep 17, 2021 · b47f6d9 · b47f6d9
1 parent 2b4f3ac
commit b47f6d9
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/owa-plugin.php b/owa-plugin.php
@@ -298,7 +298,7 @@ function addFeedTrackingQueryParams() {
 		global $wp; 
 
 		// feed tracking param
-		$wp->add_query_var('owa_sid'); 
+		$wp->add_query_var( $this->getOption( 'feed_subscription_param' ) ); 
 
 	}
 
@@ -605,7 +605,7 @@ function decorateFeedEntryPermalink($link) {
 						   'owa_medium',
 						   $this->getOption( 'feed_tracking_medium' ),
 						   $this->getOption( 'feed_subscription_param' ),
-						   $_GET[ $this->getOption( 'feed_subscription_param' ) ] 
+						   esc_attr( get_query_var( $this->getOption( 'feed_subscription_param' ) ) )
 			);
 		}
 	}
@@ -840,7 +840,7 @@ function trackFeedRequest() {
 			$event->setEventType( 'base.feed_request' );
 			// determine and set the type of feed
 			$event->set( 'feed_format', get_query_var( 'feed' ) );
-			$event->set( 'feed_subscription_id', get_query_var( 'owa_sid' ) );
+			$event->set( 'feed_subscription_id', get_query_var( $this->getOption( 'feed_subscription_param' ) ) );
 			//$event->set( 'feed_subscription_id', $_GET['owa_sid'] );
 			// track
 			$owa->trackEvent( $event );