Support

December 6, 2012 at 12:53 pm

Hi there,

We’re aware of the warning about wp_kses and Seth fixed it this morning. The error shouldn’t display unless the server is incorrectly configured to display errors on the front end. Errors like these should be logged and not set to display on a production site.

Usually error_display is set to ON for a server that is set up for development, with the understanding that when the site goes live, error_display will be disabled.

It’s not recommended or secure to display errors on a live site. Otherwise server info will display on public facing pages if any errors get thrown. So it’s recommend to log errors on a live site, not display them.

It may be possible to override the error display setting in php.ini by adding this line to the wp-config.php file above any require_once or include commands:

@ini_set('display_errors','Off');

http://codex.wordpress.org/Editing_wp-config.php#Configure_Error_Log

We will be releasing a hot fix later this afternoon, but here is the fix if you’d like to apply in now:

If you open event-espresso/includes/functions/email.php, you can change line 108 to read:

'event_desc' => wp_kses($data->event->event_desc, ''),