Changeset 2902324

Timestamp:

04/21/2023 01:50:16 PM (3 years ago)

Author:

jchristopher

Message:

Version 1.6.8

Location:

cms-tree-page-view/trunk

Files:

• functions.php (modified) (6 diffs)
• index.php (modified) (2 diffs)
• readme.txt (modified) (2 diffs)

cms-tree-page-view/trunk/functions.php

@@ -101 +101 @@
     */
 
-    $post_position  = sanitize_text_field($_POST["cms_tpv_add_type"]);
-    $post_status    = sanitize_text_field($_POST["cms_tpv_add_status"]);
+    $post_position  = esc_attr($_POST["cms_tpv_add_type"]);
+    $post_status    = esc_attr($_POST["cms_tpv_add_status"]);
     $post_names     = (array) $_POST["cms_tpv_add_new_pages_names"];
-    $ref_post_id    = (int) sanitize_text_field($_POST["ref_post_id"]);
-    $lang           = sanitize_text_field($_POST["lang"]);
+    $ref_post_id    = (int) esc_attr($_POST["ref_post_id"]);
+    $lang           = esc_attr($_POST["lang"]);
 
     for ($i = 0; $i < count($post_names); $i++) {
-        $post_names[$i] = sanitize_text_field($post_names[$i]);
+        $post_names[$i] = esc_attr($post_names[$i]);
     }
 
@@ -285 +285 @@
     global $cms_tpv_view;
     if (isset($_GET["cms_tpv_view"])) {
-        $cms_tpv_view = htmlspecialchars(sanitize_text_field($_GET["cms_tpv_view"]));
+        $cms_tpv_view = esc_attr(htmlspecialchars($_GET["cms_tpv_view"]));
     } else {
         $cms_tpv_view = "all";
@@ -895 +895 @@
     $post_type = NULL;
     if (isset($_GET["post_type"])) {
-        $post_type = sanitize_text_field($_GET["post_type"]);
+        $post_type = esc_attr($_GET["post_type"]);
     }
     if (!$post_type) {
         // no post type, happens with ozh admin drop down, so get it via page instead
-        $page = isset($_GET["page"]) ? sanitize_text_field($_GET["page"]) : "";
+        $page = isset($_GET["page"]) ? esc_attr($_GET["page"]) : "";
         $post_type = str_replace("cms-tpv-page-", "", $page);
     }
@@ -1598 +1598 @@
     check_ajax_referer('cms-tpv-ajax', 'cms-tpv-nonce');
 
-    $action = sanitize_text_field($_GET["action"]);
-    $view = sanitize_text_field($_GET["view"]); // all | public | trash
-    $post_type = (isset($_GET["post_type"])) ? sanitize_text_field($_GET["post_type"]) : null;
-    $search = (isset($_GET["search_string"])) ? sanitize_text_field(trim($_GET["search_string"])) : ""; // exits if we're doing a search
+    $action = esc_attr($_GET["action"]);
+    $view = esc_attr($_GET["view"]); // all | public | trash
+    $post_type = (isset($_GET["post_type"])) ? esc_attr($_GET["post_type"]) : null;
+    $search = (isset($_GET["search_string"])) ? esc_attr(trim($_GET["search_string"])) : ""; // exits if we're doing a search
 
     // Check if user is allowed to get the list. For example subscribers should not be allowed to
@@ -1674 +1674 @@
             // regular get
 
-            $id = (isset($_GET["id"])) ? sanitize_text_field($_GET["id"]) : null;
+            $id = (isset($_GET["id"])) ? esc_attr($_GET["id"]) : null;
             $id = (int) str_replace("cms-tpv-", "", $id);
 
@@ -1707 +1707 @@
     global $wpdb;
 
-    $node_id = sanitize_text_field($_POST["node_id"]); // the node that was moved
-    $ref_node_id = sanitize_text_field($_POST["ref_node_id"]);
-    $type = sanitize_text_field($_POST["type"]);
+    $node_id = esc_attr($_POST["node_id"]); // the node that was moved
+    $ref_node_id = esc_attr($_POST["ref_node_id"]);
+    $type = esc_attr($_POST["type"]);
 
     $node_id = str_replace("cms-tpv-", "", $node_id);

cms-tree-page-view/trunk/index.php

@@ -6 +6 @@
 Text Domain: cms-tree-page-view
 Domain Path: /languages/
-Version: 1.6.7
+Version: 1.6.8
 Author: Jon Christopher
 Author URI: https://jonchristopher.us/
@@ -30 +30 @@
 #require("functions.php");
 
-define( "CMS_TPV_VERSION", "1.6.7");
+define( "CMS_TPV_VERSION", "1.6.8");
 define( "CMS_TPV_NAME", "CMS Tree Page View");
 

cms-tree-page-view/trunk/readme.txt

@@ -6 +6 @@
 Requires at least: 3.8
 Tested up to: 6.2.0
-Stable tag: 1.6.7
+Stable tag: 1.6.8
 
 Adds a tree view of all pages & custom posts. Get a great overview + options to drag & drop to reorder & option to add multiple pages.
@@ -118 +118 @@
 == Changelog ==
 
+= 1.6.8 (April 2023) =
+
+Refactor of changes made in 1.6.7 security release
+
 = 1.6.7 (April 2023) =