Changeset 3047500

Timestamp:

03/07/2024 10:10:39 PM (12 months ago)

Author:

CodeBard

Message:

2.2.1

• Sanitized various inputs against xss attacks

Location:

patron-button-and-widgets-by-codebard/trunk

Files:

• index.php (modified) (6 diffs)
• plugin/includes/default_internal_vars.php (modified) (1 diff)
• plugin/plugin.php (modified) (2 diffs)
• readme.txt (modified) (3 diffs)

patron-button-and-widgets-by-codebard/trunk/index.php

@@ -4 +4 @@
     Plugin URI: https://wordpress.org/plugins/patron-button-and-widgets-by-codebard/
     Description: Patreon Patron Buttons, Widgets and Patreon Functions
-    Version: 2.2.0
+    Version: 2.2.1
     Author: CodeBard
-    Author URI: http://codebard.com
+    Author URI: https://codebard.com
     Text Domain: cb_p6
     Domain Path: /lang
@@ -53 +53 @@
         require_once($this->internal['plugin_path'].'plugin/includes/hardcoded_vars.php');
         
-        if(isset($_REQUEST[$this->internal['prefix'].'action']))
-        {
-            $this->internal['requested_action'] = $_REQUEST[$this->internal['prefix'].'action'];
+        if(isset($_REQUEST[$this->internal['prefix'].'action'] ))
+        {
+            $this->internal['requested_action'] = filter_var( $_REQUEST[$this->internal['prefix'].'action'], FILTER_SANITIZE_STRING);
         }
         else
@@ -686 +686 @@
         if(isset($_REQUEST[$this->internal['prefix'].'tab']))
         {
-            $tab=$_REQUEST[$this->internal['prefix'].'tab'];
+            $tab = filter_var( $_REQUEST[$this->internal['prefix'].'tab'], FILTER_SANITIZE_STRING ) ;
         }
 
@@ -806 +806 @@
         if(isset($_REQUEST[$this->internal['prefix'] . 'tab']))
         {
-            $tab = sanitize_text_field($_REQUEST[$this->internal['prefix'].'tab']);
+            $tab = filter_var( $_REQUEST[$this->internal['prefix'].'tab'], FILTER_SANITIZE_STRING );
         }
         else
@@ -855 +855 @@
         if(isset($_REQUEST[$this->internal['prefix'] . 'tab']))
         {
-            $tab = sanitize_text_field( $_REQUEST[$this->internal['prefix'] . 'tab'] );
+            $tab = filter_var( $_REQUEST[$this->internal['prefix'] . 'tab'], FILTER_SANITIZE_STRING );
             
         }
@@ -884 +884 @@
         if(isset($_REQUEST['tab']))
         {
-            $tab=$_REQUEST['tab'];
+            $tab = filter_var( $_REQUEST['tab'], FILTER_SANITIZE_STRING );
             
         }

patron-button-and-widgets-by-codebard/trunk/plugin/includes/default_internal_vars.php

@@ -11 +11 @@
         'plugin_id' => 'patron-button-and-widgets-by-codebard',
         'prefix' => 'cb_p6_',
-        'version' => '2.2.0',
+        'version' => '2.2.1',
         'plugin_name' => 'CodeBard\'s Patron Button and Widgets for Patreon',
         

patron-button-and-widgets-by-codebard/trunk/plugin/plugin.php

@@ -209 +209 @@
         $current_screen=get_current_screen();
 
-        if($current_screen->base=='toplevel_page_settings_'.$this->internal['id'] OR ( isset( $_REQUEST['page']) AND $_REQUEST['page']== 'cb_p6_install_pw' ) )
+        if($current_screen->base=='toplevel_page_settings_'.$this->internal['id'] OR ( isset( $_REQUEST['page']) AND $_REQUEST['page'] == 'cb_p6_install_pw' ) )
         {
             wp_enqueue_style( $this->internal['id'].'-css-admin', $this->internal['plugin_url'].'plugin/includes/css/admin.css' );
@@ -1342 +1342 @@
             
             if ( isset( $_REQUEST['cb_p6_admin_message_title'] ) ) {
-                $heading = $this->lang[ $_REQUEST['cb_p6_admin_message_title'] ];
+                $heading = $this->lang[ filter_var( $_REQUEST['cb_p6_admin_message_title'], FILTER_SANITIZE_STRING) ];
             }
             if ( isset( $_REQUEST['cb_p6_admin_message_content'] ) ) {
-                $content = $this->lang[ $_REQUEST['cb_p6_admin_message_content'] ];
+                $content = $this->lang[ filter_var( $_REQUEST['cb_p6_admin_message_content'], FILTER_SANITIZE_STRING) ];
             }
             

patron-button-and-widgets-by-codebard/trunk/readme.txt

@@ -7 +7 @@
 License: GPL
 Requires at least: 4.0
-Tested up to: 6.4.1
-Stable Tag: 2.2.0
+Tested up to: 6.4.3
+Stable Tag: 2.2.1
 
 Patron Button and Plugin allows you to add Patreon Buttons to your content and sidebars, along with offering other Patreon functions. Upgradable to Patron Plugin Pro with patron-only posts and powerful features.
@@ -61 +61 @@
 == Upgrade Notice ==
 
+= 2.2.1 =
+
+* Sanitized various inputs against xss attacks
+
 = 2.2.0 =
 
@@ -203 +207 @@
 == Changelog ==
 
+= 2.2.1 =
+
+* Sanitized various inputs against xss attacks
+
 = 2.2.0 =