ensure some sanitization takes place

the-events-calendar · Jan 30, 2025 · 2b93e1c · 2b93e1c
1 parent 91eb2ed
commit 2b93e1c
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/Common/Integrations/Traits/Custom_Table_Query_Methods.php b/src/Common/Integrations/Traits/Custom_Table_Query_Methods.php
@@ -141,7 +141,10 @@ public static function fetch_first_where( string $where_clause, string $output =
 	 *
 	 * @return array The items.
 	 */
-	public static function paginate( array $args, int $per_page, int $page, string $output = OBJECT ): array {
+	public static function paginate( array $args, int $per_page = 20, int $page = 1, string $output = OBJECT ): array {
+		$per_page = min( max( 1, $per_page ), 200 );
+		$page     = max( 1, $page );
+
 		$offset = ( $page - 1 ) * $per_page;
 
 		$orderby = $args['orderby'] ?? self::uid_column();