WordPress.org
Get WordPress

Plugin Directory

Changeset 2672747


Ignore:
Timestamp:
02/04/2022 08:39:41 AM (4 years ago)
Author:
Sygnoos
Message:

New version 4.0.9 released

Location:
popup-builder
Files:
358 added
18 edited

Legend:

Unmodified
Added
Removed

  • popup-builder/trunk/com/classes/Actions.php

    r2664345 r2672747  
    14351435                    exit();
    14361436                }
    1437                 $query .= ' ORDER BY '.$orderBy.' '.$_GET['order'];
     1437                $query .= ' ORDER BY '.$orderBy.' '.sanitize_text_field($_GET['order']);
    14381438            }
    14391439        }

  • popup-builder/trunk/com/classes/ConditionCreator.php

    r2664345 r2672747  
    438438        }
    439439        else if(!empty($_GET['post'])) {
    440             $popupId = $_GET['post'];
     440            $popupId = sanitize_text_field($_GET['post']);
    441441        }
    442442

  • popup-builder/trunk/com/classes/PopupLoader.php

    r2584791 r2672747  
    5656            $args = array();
    5757            $previewPopups = array();
    58             $getterId = isset($_GET['sg_popup_id']) ? (int)$_GET['sg_popup_id'] : 0;
    59             $previewedPopupId = isset($_GET['sg_popup_preview_id']) ? (int)$_GET['sg_popup_preview_id'] : 0;
     58            $getterId = isset($_GET['sg_popup_id']) ? (int)sanitize_text_field($_GET['sg_popup_id']) : 0;
     59            $previewedPopupId = isset($_GET['sg_popup_preview_id']) ? (int)sanitize_text_field($_GET['sg_popup_preview_id']) : 0;
    6060            if (isset($_GET['sg_popup_preview_id'])) {
    6161                $getterId = $previewedPopupId;
    … …  
    6868                $getterId = $previewedPopupId;
    6969                if (isset($_GET['preview_id'])) {
    70                     $getterId = (int)$_GET['preview_id'];
     70                    $getterId = (int)sanitize_text_field($_GET['preview_id']);
    7171                }
    7272            }

  • popup-builder/trunk/com/classes/RegisterPostType.php

    r2578665 r2672747  
    144144
    145145        if (!empty($_GET['post'])) {
    146             $popupId = (int)$_GET['post'];
     146            $popupId = (int)sanitize_text_field($_GET['post']);
    147147        }
    148148
    … …  
    163163         */
    164164        if (!empty($_GET['post'])) {
    165             $popupId = (int)$_GET['post'];
     165            $popupId = (int)sanitize_text_field($_GET['post']);
    166166            $popupOptionsData = SGPopup::getPopupOptionsById($popupId);
    167167            if (!empty($popupOptionsData['sgpb-type'])) {

  • popup-builder/trunk/com/classes/Updates.php

    r2634590 r2672747  
    165165    {
    166166        if (isset($_GET['sl_activation']) && !empty($_GET['message'])) {
    167             switch ($_GET['sl_activation']) {
     167            switch (sanitize_text_field($_GET['sl_activation'])) {
    168168                case 'false':
    169169                    $message = urldecode($_GET['message']);

  • popup-builder/trunk/com/classes/components/Menu.php

    r2664345 r2672747  
    226226        delete_post_meta($item_id, '_menu_sgpb_popup_id');
    227227        if (isset($_POST['menu-item-pb'][$item_id]['popup'])) {
    228             $popupId = (int)$_POST['menu-item-pb'][$item_id]['popup'];
     228            $popupId = (int)sanitize_text_field($_POST['menu-item-pb'][$item_id]['popup']);
    229229            update_post_meta($item_id, '_menu_sgpb_popup_id', $popupId);
    230230        }

  • popup-builder/trunk/com/classes/dataTable/Subscribers.php

    r2664345 r2672747  
    9898
    9999        if (isset($_GET['sgpb-subscription-popup-id'])) {
    100             $selectedPopup = (int)$_GET['sgpb-subscription-popup-id'];
     100            $selectedPopup = (int)sanitize_text_field($_GET['sgpb-subscription-popup-id']);
    101101        }
    102102

  • popup-builder/trunk/com/config/configPackage.php

    r2664345 r2672747  
    44}
    55
    6 define('SG_POPUP_VERSION', '4.0.8');
     6define('SG_POPUP_VERSION', '4.0.9');
    77define('SGPB_POPUP_PKG', SGPB_POPUP_PKG_FREE);
    88define('POPUP_BUILDER_BASENAME', 'popupbuilder-platinum/popup-builder.php');

  • popup-builder/trunk/com/helpers/AdminHelper.php

    r2664345 r2672747  
    346346
    347347        if (isset($_GET['sgpb-subscription-popup-id']) && !empty($_GET['sgpb-subscription-popup-id'])) {
    348             $filterCriteria = esc_sql($_GET['sgpb-subscription-popup-id']);
     348            $filterCriteria = sanitize_text_field($_GET['sgpb-subscription-popup-id']);
    349349            if ($filterCriteria != 'all') {
    350350                $searchQuery .= " AND (subscriptionType = $filterCriteria)";
    … …  
    355355        }
    356356        if (isset($_GET['s']) && !empty($_GET['s'])) {
    357             $searchCriteria = esc_sql($_GET['s']);
     357            $searchCriteria = sanitize_text_field($_GET['s']);
    358358            $lastPartOfTheQuery = substr($searchQuery, -5);
    359359            if (strpos($lastPartOfTheQuery, 'AND') <= 0) {
    … …  
    363363        }
    364364        if (isset($_GET['sgpb-subscribers-date']) && !empty($_GET['sgpb-subscribers-date'])) {
    365             $filterCriteria = esc_sql($_GET['sgpb-subscribers-date']);
     365            $filterCriteria = sanitize_text_field($_GET['sgpb-subscribers-date']);
    366366            if ($filterCriteria != 'all') {
    367367                if ($searchQuery != '') {
    … …  
    787787        $type = '';
    788788        if (!empty($_GET['sgpb_type'])) {
    789             $type  = $_GET['sgpb_type'];
     789            $type  = sanitize_text_field($_GET['sgpb_type']);
    790790        }
    791791
    … …  
    793793
    794794        if ($currentPostType == SG_POPUP_POST_TYPE && !empty($_GET['post'])) {
    795             $popupObj = SGPopup::find($_GET['post']);
     795            $popupObj = SGPopup::find(sanitize_text_field($_GET['post']));
    796796            if (is_object($popupObj)) {
    797797                $type = $popupObj->getType();
    … …  
    818818
    819819        if (empty($currentPostType) && !empty($_GET['post'])) {
    820             $currentPostType = get_post_type($_GET['post']);
     820            $currentPostType = get_post_type(sanitize_text_field($_GET['post']));
    821821        }
    822822

  • popup-builder/trunk/com/libs/Importer.php

    r2664345 r2672747  
    6464                check_admin_referer('import-wordpress');
    6565                $this->fetch_attachments = (!empty($_POST['fetch_attachments']) && $this->allow_fetch_attachments());
    66                 $this->id = (int) $_POST['import_id'];
     66                $this->id = (int) sanitize_text_field($_POST['import_id']);
    6767                $file = get_attached_file($this->id);
    6868                set_time_limit(0);

  • popup-builder/trunk/com/libs/ListTable.php

    r2664345 r2672747  
    552552            return;
    553553
    554         $m = isset( $_GET['m'] ) ? (int) $_GET['m'] : 0;
     554        $m = isset( $_GET['m'] ) ? (int) sanitize_text_field($_GET['m']) : 0;
    555555?>
    556556        <label for="filter-by-date" class="screen-reader-text"><?php _e( 'Filter by date' ); ?></label>

  • popup-builder/trunk/com/libs/Table.php

    r2664345 r2672747  
    121121        }
    122122
    123         $paged = isset($_GET["paged"]) ? (int)$_GET["paged"] : '';
     123        $paged = isset($_GET["paged"]) ? (int)sanitize_text_field($_GET["paged"]) : '';
    124124
    125125        if (empty($paged) || !is_numeric($paged) || $paged <= 0) {

  • popup-builder/trunk/popup-builder.php

    r2664345 r2672747  
    44* Plugin URI: https://popup-builder.com
    55* Description: The most complete popup plugin. Html, image, iframe, shortcode, video and many other popup types. Manage popup dimensions, effects, themes and more.
    6 * Version: 4.0.8
     6* Version: 4.0.9
    77* Author: Sygnoos
    88* Author URI: https://sygnoos.com

  • popup-builder/trunk/public/views/customEditor.php

    r2664345 r2672747  
    11<?php
    2 $popupId = !empty($_GET['post']) ? (int)$_GET['post'] : 0;
     2$popupId = !empty($_GET['post']) ? (int)sanitize_text_field($_GET['post']) : 0;
    33$editorModeJs = htmlentities('text/javascript');
    44$editorModeCss = htmlentities('text/css');

  • popup-builder/trunk/public/views/htmlCustomButtonElement.php

    r2664345 r2672747  
    22use sgpb\AdminHelper;
    33
    4 $excludePostId = !empty($_GET['post']) ? (int)$_GET['post'] : 0;
     4$excludePostId = !empty($_GET['post']) ? (int)sanitize_text_field($_GET['post']) : 0;
    55$excludedPopups = array($excludePostId);
    66$allPopups = AdminHelper::getPopupsIdAndTitle($excludedPopups);

  • popup-builder/trunk/public/views/mediaButton.php

    r2578665 r2672747  
    44    $excludePostId = 0;
    55    if (isset($_GET['post']) && !empty($_GET['post'])) {
    6         $excludePostId = $_GET['post'];
     6        $excludePostId = sanitize_text_field($_GET['post']);
    77    }
    88    $excludedPopups = array($excludePostId);

  • popup-builder/trunk/public/views/options/subscription.php

    r2664345 r2672747  
    88
    99    if (!empty($_GET['post'])) {
    10         $popupId = (int)$_GET['post'];
     10        $popupId = (int)sanitize_text_field($_GET['post']);
    1111        $popupTypeObj->setSubsFormData($popupId);
    1212    }

  • popup-builder/trunk/readme.txt

    r2664345 r2672747  
    77Tags: popup, pop up, wordpress popup, popup maker, exit popup, popup builder, wordpress popup plugin
    88Requires at least: 4.2
    9 Tested up to: 5.8
     9Tested up to: 5.9
    1010Requires PHP: 5.3.3
    11 Stable tag: 4.0.8
     11Stable tag: 4.0.9
    1212License: GPLv2 or later
    1313License URI: http://www.gnu.org/licenses/gpl-2.0.html
    … …  
    146146== Changelog ==
    147147
     148= Version 4.0.9 =
     149* Security improvements and fixes.
     150
    148151= Version 4.0.8 =
    149152* Security improvements and fixes.
Note: See TracChangeset for help on using the changeset viewer.