Surbma | Booking.com Shortcode

A simple shortcode to include Booking.com search box into WordPress. This is a very useful plugin if your user don't have a permission to embed javascript in the content. The shortcode: [surbma-bookingcom param="ALL_THE_PARAMETERS"] Where param is the parameter, you can find in the Booking.com embed code. You need to find the src field, where you have to copy all the parameters after the https://www.booking.com/general.html? url. You can find the parameters at the end of your Booking.com script's url: <script type="text/javascript" src="https://www.booking.com/general.html?ALL_THE_PARAMETERS"></script>

2.1.1 Release date: 2026-04-12

• SECURITY - Shortcode param is stripped of HTML, the script URL is built safely, and esc_url() is used on output (addresses stored XSS reports for contributor-level shortcode use).

2.1 Release date: 2024-01-01 FIX

• Changed textdomain hook to init.
• Security fix for shortcode: parameters are properly escaped.

OTHER

• Code optimizations.

2.0 Release date: 2020-02-10

• TWEAK - Tested with WordPress 5.3 version.
• TWEAK - Updated to use a new way to deploy it to wp.org repo.

1.1.0

• Changed shortcode name to surbma-bookingcom from booking_com. The old shortcode is still working, but it's deprecated and it will be removed from the next version.

1.0.3

• Tested up to WordPress 4.9 version.

1.0.2

• Changed some texts, text domain and function names.

1.0.1

• Fix localization.
• Prevent direct access to the plugin.

1.0.0

• Initial release.