Changeset 2879142

Timestamp:

03/13/2023 02:05:10 PM (3 years ago)

Author:

pixelgrade

Message:

Security fixes

Location:

customify/trunk

Files:

• customify.php (modified) (2 diffs)
• includes/admin-settings/views/admin.php (modified) (2 diffs)
• includes/class-customify-settings.php (modified) (1 diff)
• readme.txt (modified) (2 diffs)

customify/trunk/customify.php

@@ -4 +4 @@
  * Plugin URI:  https://wordpress.org/plugins/customify/
  * Description: A Theme Customizer Booster to easily and consistently customize Fonts, Colors, and other options for your site.
- * Version: 2.10.4
+ * Version: 2.10.5
  * Author: Pixelgrade
  * Author URI: https://pixelgrade.com
@@ -13 +13 @@
  * Domain Path: /languages/
  * Requires at least: 4.9.14
- * Tested up to: 5.5.3
- * Requires PHP: 5.4.0
+ * Tested up to: 5.9.5
+ * Requires PHP: 5.6.40
  */
 

customify/trunk/includes/admin-settings/views/admin.php

@@ -13 +13 @@
  */
 
-$config = Customify_Settings::get_plugin_config();
-
-// invoke processor
-$processor = pixcustomify::processor( $config );
-$status    = $processor->status();
-$errors    = $processor->errors(); ?>
+/**
+ * @var $config
+ * @var $processor
+ * @var $status
+ * @var $errors
+ */
+ ?>
 
 <div class="wrap" id="pixcustomify_form">
@@ -50 +51 @@
         echo $f->field( 'typography' )->render();
         echo $f->field( 'tools' )->render(); ?>
+        <?php wp_nonce_field( 'customify_settings_save', '_wpnonce-customify-settings' ); ?>
         <button type="submit" class="button button-primary">
             <?php esc_html_e( 'Save Changes', 'customify' ); ?>

customify/trunk/includes/class-customify-settings.php

@@ -92 +92 @@
      */
     function display_plugin_admin_page() {
+        // Check the nonce, in case the form was submitted.
+        if ( $_SERVER['REQUEST_METHOD'] === 'POST' ) {
+            check_admin_referer( 'customify_settings_save', '_wpnonce-customify-settings' );
+        }
+
+        $config = Customify_Settings::get_plugin_config();
+
+        // Invoke the processor.
+        /**
+         * @var PixCustomifyProcessorImpl $processor
+         */
+        $processor = pixcustomify::processor( $config );
+        $status    = $processor->status();
+        $errors    = $processor->errors();
+
+        // Do the saving and display the form.
         include_once plugin_dir_path( $this->file ) . 'includes/admin-settings/views/admin.php';
     }

customify/trunk/readme.txt

@@ -3 +3 @@
 Tags: design, customizer, fonts, colors, gutenberg, font palettes, color palettes
 Requires at least: 4.9.14
-Tested up to: 5.7.2
-Stable tag: 2.10.4
+Tested up to: 5.9.5
+Stable tag: 2.10.5
 Requires PHP: 5.6.40
 License: GPLv2 or later
@@ -30 +30 @@
 
 == Changelog ==
+
+= 2.10.5 =
+* Security fixes.
 
 = 2.10.4 =