Changeset 2863405

Timestamp:

02/10/2023 06:41:59 PM (2 years ago)

Author:

digitalblue

Message:

1.5.0

• SEO improvements for Lighthouse report,
• Fix Cross Site Scripting vulnerability in admin (thanks to ​https://patchstack.com/)

Location:

click-to-call-or-chat-buttons/trunk

Files:

• ctcocb.php (modified) (4 diffs)
• readme.txt (modified) (2 diffs)

click-to-call-or-chat-buttons/trunk/ctcocb.php

@@ -4 +4 @@
 Plugin URI: https://www.digitalblue.ro/click-to-call-or-chat-buttons/
 Description: Mobile visitors will see a call or chat button in your website 
-Version: 1.4.0
+Version: 1.5.0
 Author: DIGITALBLUE
 Author URI: https://www.digitalblue.ro
@@ -30 +30 @@
 
 
-define('CTCOCB_VERSION','1.4.0');
+define('CTCOCB_VERSION','1.5.0');
 define('CTCOCB_BASENAME', plugin_basename( __FILE__ ) );
 define('CTCOCB_BASEFOLDER', plugin_basename( dirname( __FILE__ ) ) );
@@ -456 +456 @@
                 if($ctcocb_options['text']!='')$ctcocb_text='<div class="ctcocb-text">'.$ctcocb_options['text'].'</div>';
                 if($ctcocb_options['textWapp']!='')$ctcocb_textWapp='<div class="ctcocb-wapp">'.$ctcocb_options['textWapp'].'</div>';
-                if($ctcocb_options['displayPhone']) $ButtonPhone=   '<div class="ctcocb-cols-'.$ctcocb_cols.'"><a  href="tel:'.$ctcocb_options['numberPhone'].'" '.$trackingcode_Phone.'><div class="ctcocb-img" ><img src="data:image/svg+xml;base64,'.ctcocb_get_svg('iconPhone',$colorsp,100).'"/></div>'.$ctcocb_textPhone.'</a></div>';
+                if($ctcocb_options['displayPhone']) $ButtonPhone=   '<div class="ctcocb-cols-'.$ctcocb_cols.'"><a  href="tel:'.$ctcocb_options['numberPhone'].'" '.$trackingcode_Phone.'><div class="ctcocb-img" ><img alt="Phone icon"  src="data:image/svg+xml;base64,'.ctcocb_get_svg('iconPhone',$colorsp,100).'"/></div>'.$ctcocb_textPhone.'</a></div>';
                 if($ctcocb_options['displayText'])  $ButtonText=    '<div class="ctcocb-cols-'.$ctcocb_cols.'">'.$ctcocb_text.'</div>';
-                if($ctcocb_options['displayWapp'])  $ButtonWapp=    '<div class="ctcocb-cols-'.$ctcocb_cols.'"><a  href="https://wa.me/'.$ctcocb_options['numberWapp'].'" '.$trackingcode_WApp.'><div class="ctcocb-img" ><img src="data:image/svg+xml;base64,'.ctcocb_get_svg('iconWapp',$colorsw,100).'"/></div>'.$ctcocb_textWapp.'</a></div>';
+                if($ctcocb_options['displayWapp'])  $ButtonWapp=    '<div class="ctcocb-cols-'.$ctcocb_cols.'"><a  href="https://wa.me/'.$ctcocb_options['numberWapp'].'" '.$trackingcode_WApp.'><div class="ctcocb-img" ><img alt="WhatsApp icon" src="data:image/svg+xml;base64,'.ctcocb_get_svg('iconWapp',$colorsw,100).'"/></div>'.$ctcocb_textWapp.'</a></div>';
                 $Button=$ButtonPhone.$ButtonText.$ButtonWapp;
                 if($ctcocb_options['appearanceOrder']==1)$Button=$ButtonPhone.$ButtonText.$ButtonWapp;
@@ -566 +566 @@
 }
 function ctcocb_options_init() {
-    register_setting('ctcocb_options','ctcocb');
+    register_setting(
+        'ctcocb_options',
+        'ctcocb',        
+        'ctcocb_sanitize' 
+    );
+}
+
+function ctcocb_sanitize($input) {
+        foreach ($input as $key=>$value) {
+            $input[$key]= esc_html(sanitize_text_field($value));
+        }
+    return $input;
 }
 

click-to-call-or-chat-buttons/trunk/readme.txt

@@ -3 +3 @@
 Tags: click to call chat, call us button, call now button, contact bottom button, phone whatsapp button
 Requires at least: 5.2
-Tested up to: 5.7
+Tested up to: 6.1
 Requires PHP: 7.0
-Stable tag: 1.4.0
+Stable tag: 1.5.0
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -102 +102 @@
 = 1.4.0 =
 * Small corrections.
+
+= 1.5.0 =
+* SEO improvements for Lighthouse report, 
+* Fix Cross Site Scripting vulnerability in admin (thanks to https://patchstack.com/)