Changeset 2384440
- Timestamp:
- 09/18/2020 12:46:06 PM (5 years ago)
- Location:
- onwebchat
- Files:
-
- 2 edited
- 4 copied
-
tags/3.2.0 (copied) (copied from onwebchat/trunk)
-
tags/3.2.0/images/onwebchat-logo.png (copied) (copied from onwebchat/trunk/images/onwebchat-logo.png)
-
tags/3.2.0/onwebchat.php (copied) (copied from onwebchat/trunk/onwebchat.php) (7 diffs)
-
tags/3.2.0/readme.txt (copied) (copied from onwebchat/trunk/readme.txt) (2 diffs)
-
trunk/onwebchat.php (modified) (7 diffs)
-
trunk/readme.txt (modified) (2 diffs)
Legend:
- Unmodified
- Added
- Removed
-
onwebchat/tags/3.2.0/onwebchat.php
r2336842 r2384440 5 5 Description: onWebChat is a live chat system, that helps you communicate with your website's visitors. 6 6 Author: onWebChat 7 Version: 3. 1.07 Version: 3.2.0 8 8 Author URI: https://www.onwebchat.com 9 9 */ … … 71 71 *****************************************************************/ 72 72 if ( isset( $_POST["action"] ) && $_POST["action"] == "login" ) { 73 74 75 // the following lines are added to verify a correct security nonce(token) by using "wp_verify_nonce()" 76 if (! isset($_POST['_wpnonce']) 77 || ! wp_verify_nonce( $_POST['_wpnonce'], 'on_web_chat_nonce')){ 78 print 'Sorry, your nonce did not verify.'; 79 exit; 80 } 73 81 74 82 $options = get_option('onwebchat_plugin_option'); … … 226 234 <?php 227 235 236 //create nonce(token) 237 wp_nonce_field('on_web_chat_nonce'); 238 228 239 // Login Page 229 240 if($isConnected != true) { … … 274 285 // display user email 275 286 if($options!=''){ 287 //sanitize user-provided parameter 288 $email = esc_html($options); 276 289 $html = '<br><h3 class="header-1-p2">Activated for onWebChat account: </h3>'; 277 $html .= "<strong class='account-id'>$ options</strong> ";290 $html .= "<strong class='account-id'>$email</strong> "; 278 291 } 279 292 … … 314 327 315 328 <div id="onwc_show_on_pages_div" style="display:none"> 316 <input id="showonpages" name="showonpages" class="showhidepages" type="text" value="<?php echo get_option( 'onwebchat_plugin_option_show_pages'); ?>" /><a href="#" style="text-decoration: none;" onmouseover="document.getElementById('help').style.visibility = 'visible'"; ONMOUSEOUT="document.getElementById('help').style.visibility = 'hidden'"><strong><font size="4" face="Arial"> ? </font></strong></a>329 <input id="showonpages" name="showonpages" class="showhidepages" type="text" value="<?php echo esc_attr(get_option( 'onwebchat_plugin_option_show_pages' )); ?>" /><a href="#" style="text-decoration: none;" onmouseover="document.getElementById('help').style.visibility = 'visible'"; ONMOUSEOUT="document.getElementById('help').style.visibility = 'hidden'"><strong><font size="4" face="Arial"> ? </font></strong></a> 317 330 </div> 318 331 <div id="onwc_hide_on_pages_div" style="display:none"> 319 <input id="hideonpages" name="hideonpages" class="showhidepages" type="text" value="<?php echo get_option( 'onwebchat_plugin_option_hide_pages'); ?>" /><a href="#" style="text-decoration: none;" onmouseover="document.getElementById('help').style.visibility = 'visible'"; ONMOUSEOUT="document.getElementById('help').style.visibility = 'hidden'"><strong><font size="4" face="Arial"> ? </font></strong></a>332 <input id="hideonpages" name="hideonpages" class="showhidepages" type="text" value="<?php echo esc_attr(get_option( 'onwebchat_plugin_option_hide_pages' )); ?>" /><a href="#" style="text-decoration: none;" onmouseover="document.getElementById('help').style.visibility = 'visible'"; ONMOUSEOUT="document.getElementById('help').style.visibility = 'hidden'"><strong><font size="4" face="Arial"> ? </font></strong></a> 320 333 </div> 321 334 … … 328 341 <strong>onWebChat API:</strong> 329 342 <br> 330 <textarea class="chatid-text-field" style="margin-left: 0px;" rows="10" name="onwebchat-api"><?php echo $onwebchatApi; ?></textarea> 343 <!-- sanitize user-provided parameter --> 344 <textarea class="chatid-text-field" style="margin-left: 0px;" rows="10" name="onwebchat-api"><?php echo esc_html($onwebchatApi); ?></textarea> 331 345 <br> 332 346 <br> … … 338 352 339 353 <!-- hiden fields --> 340 <input class="chatid-text-field-hide" type="text" name="chatId" value="<?php echo $chatId; ?>"/>341 <input class="chatid-text-field-hide" type="text" name="onWebChatUser" value="<?php echo get_option( 'onwebchat_plugin_option_user'); ?>"/>354 <input class="chatid-text-field-hide" type="text" name="chatId" value="<?php echo esc_attr($chatId); ?>"/> 355 <input class="chatid-text-field-hide" type="text" name="onWebChatUser" value="<?php echo esc_attr(get_option( 'onwebchat_plugin_option_user' )); ?>"/> 342 356 <input class="chatid-text-field-hide" type="text" name="isSecondPage" value="1"/> 343 357 -
onwebchat/tags/3.2.0/readme.txt
r2364589 r2384440 19 19 20 20 Don't twice and start now! It takes less than a minute, to get started, just install onWebChat live chat plugin and [sign up for our service on www.onwebchat.com](https://www.onwebchat.com/signup.php "onWebChat sign up page") 21 22 [youtube https://www.youtube.com/embed/YihmL6BpEvc?rel=0] 21 23 22 24 … … 124 126 == Changelog == 125 127 128 = onWebChat Live Chat (Chat version 3.2.0) = 129 * Security bug fix 130 126 131 = onWebChat Live Chat (Chat version 3.1.0) = 127 132 * Javascript api commands support -
onwebchat/trunk/onwebchat.php
r2336842 r2384440 5 5 Description: onWebChat is a live chat system, that helps you communicate with your website's visitors. 6 6 Author: onWebChat 7 Version: 3. 1.07 Version: 3.2.0 8 8 Author URI: https://www.onwebchat.com 9 9 */ … … 71 71 *****************************************************************/ 72 72 if ( isset( $_POST["action"] ) && $_POST["action"] == "login" ) { 73 74 75 // the following lines are added to verify a correct security nonce(token) by using "wp_verify_nonce()" 76 if (! isset($_POST['_wpnonce']) 77 || ! wp_verify_nonce( $_POST['_wpnonce'], 'on_web_chat_nonce')){ 78 print 'Sorry, your nonce did not verify.'; 79 exit; 80 } 73 81 74 82 $options = get_option('onwebchat_plugin_option'); … … 226 234 <?php 227 235 236 //create nonce(token) 237 wp_nonce_field('on_web_chat_nonce'); 238 228 239 // Login Page 229 240 if($isConnected != true) { … … 274 285 // display user email 275 286 if($options!=''){ 287 //sanitize user-provided parameter 288 $email = esc_html($options); 276 289 $html = '<br><h3 class="header-1-p2">Activated for onWebChat account: </h3>'; 277 $html .= "<strong class='account-id'>$ options</strong> ";290 $html .= "<strong class='account-id'>$email</strong> "; 278 291 } 279 292 … … 314 327 315 328 <div id="onwc_show_on_pages_div" style="display:none"> 316 <input id="showonpages" name="showonpages" class="showhidepages" type="text" value="<?php echo get_option( 'onwebchat_plugin_option_show_pages'); ?>" /><a href="#" style="text-decoration: none;" onmouseover="document.getElementById('help').style.visibility = 'visible'"; ONMOUSEOUT="document.getElementById('help').style.visibility = 'hidden'"><strong><font size="4" face="Arial"> ? </font></strong></a>329 <input id="showonpages" name="showonpages" class="showhidepages" type="text" value="<?php echo esc_attr(get_option( 'onwebchat_plugin_option_show_pages' )); ?>" /><a href="#" style="text-decoration: none;" onmouseover="document.getElementById('help').style.visibility = 'visible'"; ONMOUSEOUT="document.getElementById('help').style.visibility = 'hidden'"><strong><font size="4" face="Arial"> ? </font></strong></a> 317 330 </div> 318 331 <div id="onwc_hide_on_pages_div" style="display:none"> 319 <input id="hideonpages" name="hideonpages" class="showhidepages" type="text" value="<?php echo get_option( 'onwebchat_plugin_option_hide_pages'); ?>" /><a href="#" style="text-decoration: none;" onmouseover="document.getElementById('help').style.visibility = 'visible'"; ONMOUSEOUT="document.getElementById('help').style.visibility = 'hidden'"><strong><font size="4" face="Arial"> ? </font></strong></a>332 <input id="hideonpages" name="hideonpages" class="showhidepages" type="text" value="<?php echo esc_attr(get_option( 'onwebchat_plugin_option_hide_pages' )); ?>" /><a href="#" style="text-decoration: none;" onmouseover="document.getElementById('help').style.visibility = 'visible'"; ONMOUSEOUT="document.getElementById('help').style.visibility = 'hidden'"><strong><font size="4" face="Arial"> ? </font></strong></a> 320 333 </div> 321 334 … … 328 341 <strong>onWebChat API:</strong> 329 342 <br> 330 <textarea class="chatid-text-field" style="margin-left: 0px;" rows="10" name="onwebchat-api"><?php echo $onwebchatApi; ?></textarea> 343 <!-- sanitize user-provided parameter --> 344 <textarea class="chatid-text-field" style="margin-left: 0px;" rows="10" name="onwebchat-api"><?php echo esc_html($onwebchatApi); ?></textarea> 331 345 <br> 332 346 <br> … … 338 352 339 353 <!-- hiden fields --> 340 <input class="chatid-text-field-hide" type="text" name="chatId" value="<?php echo $chatId; ?>"/>341 <input class="chatid-text-field-hide" type="text" name="onWebChatUser" value="<?php echo get_option( 'onwebchat_plugin_option_user'); ?>"/>354 <input class="chatid-text-field-hide" type="text" name="chatId" value="<?php echo esc_attr($chatId); ?>"/> 355 <input class="chatid-text-field-hide" type="text" name="onWebChatUser" value="<?php echo esc_attr(get_option( 'onwebchat_plugin_option_user' )); ?>"/> 342 356 <input class="chatid-text-field-hide" type="text" name="isSecondPage" value="1"/> 343 357 -
onwebchat/trunk/readme.txt
r2364589 r2384440 19 19 20 20 Don't twice and start now! It takes less than a minute, to get started, just install onWebChat live chat plugin and [sign up for our service on www.onwebchat.com](https://www.onwebchat.com/signup.php "onWebChat sign up page") 21 22 [youtube https://www.youtube.com/embed/YihmL6BpEvc?rel=0] 21 23 22 24 … … 124 126 == Changelog == 125 127 128 = onWebChat Live Chat (Chat version 3.2.0) = 129 * Security bug fix 130 126 131 = onWebChat Live Chat (Chat version 3.1.0) = 127 132 * Javascript api commands support
Note: See TracChangeset
for help on using the changeset viewer.