' . __('URL', 'polldaddy') . ' *

' . __('Paste your YouTube or Google Video URL above, or use the examples below.', 'polldaddy') . '

' . sprintf( /* translators: %1$s is the URL to YouTube instructions, %2$s is the example shortcode */ __('YouTube instructions %2$s', 'polldaddy'), 'http://support.wordpress.com/videos/youtube/', '[youtube=http://www.youtube.com/watch?v=cXXm696UbKY]' ) . '
' . sprintf( /* translators: %1$s is the URL to Google Video instructions, %2$s is the example shortcode */ __('Google instructions %2$s', 'polldaddy'), 'http://support.wordpress.com/videos/google-video/', '[googlevideo=http://video.google.com/googleplayer.swf?docId=-8459301055248673864]' ) . '
' . sprintf( /* translators: %1$s is the URL to DailyMotion instructions, %2$s is the example shortcode */ __('DailyMotion instructions %2$s', 'polldaddy'), 'http://support.wordpress.com/videos/dailymotion/', '[dailymotion id=5zYRy1JLhuGlP3BGw]' ) . '

'; } function pd_audio_shortcodes_help($audio_form) { return '

' . __('Audio File URL', 'polldaddy') . ' *

'; } function pd_image_shortcodes_help($image_form) { return '

' . __('Insert an image from another web site', 'polldaddy') . '

' . __('Image URL', 'polldaddy') . ' *
' . __('Image Title', 'polldaddy') . ' *

'; } function polldaddy_popups_init() { // Only process polls_media requests if ( ! isset( $_REQUEST['polls_media'] ) ) { return; } // Security checks for CSRF vulnerability (CVE-2024-43338) // Verify admin context if ( ! is_admin() ) { return; } // Verify user capability if ( ! current_user_can( 'edit_posts' ) ) { return; } // Verify nonce for CSRF protection $nonce_action = get_polls_media_nonce(); if ( ! isset( $_REQUEST['_wpnonce'] ) || ! wp_verify_nonce( $_REQUEST['_wpnonce'], $nonce_action ) ) { return; } // All security checks passed, add the filters add_filter( 'type_url_form_video', 'pd_video_shortcodes_help' ); add_filter( 'type_url_form_audio', 'pd_audio_shortcodes_help' ); add_filter( 'type_url_form_image', 'pd_image_shortcodes_help' ); } add_action( 'admin_init', 'polldaddy_popups_init' ); ?>