array(// on allow a tags 'href' => array() // and those anchors can only have href attribute ) ); if (isset($_POST['featured_image_size'])) update_post_meta($post_id, 'featured_image_size', esc_attr($_POST['featured_image_size'])); if (isset($_POST['sidebar_meta_box_enabled'])) update_post_meta($post_id, 'sidebar_meta_box_enabled', esc_attr($_POST['sidebar_meta_box_enabled'])); if (isset($_POST['sidebar_meta_box_sidebar'])) update_post_meta($post_id, 'sidebar_meta_box_sidebar', esc_attr($_POST['sidebar_meta_box_sidebar'])); if (isset($_POST['sidebar_enabled'])) update_post_meta($post_id, 'sidebar_enabled', esc_attr($_POST['sidebar_enabled'])); } function custom_post_meta_box_cb($post) { $values = get_post_custom($post->ID); $selectedFeaturedImageSize = isset($values['featured_image_size']) ? ($values['featured_image_size'][0]) : ""; $selectedShow = isset($values['sidebar_enabled']) ? ($values['sidebar_enabled'][0]) : ""; $selectedEnabled = isset($values['sidebar_meta_box_enabled']) ? ($values['sidebar_meta_box_enabled'][0]) : ""; $selectedSidebar = isset($values['sidebar_meta_box_sidebar']) ? ($values['sidebar_meta_box_sidebar'][0]) : ""; global $wp_registered_sidebars; wp_nonce_field('custom_post_meta_box_nonce', 'meta_box_nonce'); ?>