Changeset 3073079

Timestamp:

04/18/2024 11:46:30 AM (22 months ago)

Author:

pinpointe

Message:

Bump up Stable Tag and version; Sanitize , and data

Location:

pinpointe-form-integration/trunk

Files:

• includes/pinpointe-service.class.php (modified) (1 diff)
• pinpointe-signup-form.php (modified) (4 diffs)
• readme.txt (modified) (1 diff)

pinpointe-form-integration/trunk/includes/pinpointe-service.class.php

@@ -101 +101 @@
                 $post_data = $dom_output->saveXML($dom_output, LIBXML_NOEMPTYTAG);
 
-                $file = WP_PLUGIN_DIR."/pinpointe-form-integration/test.xml"; 
+                $file = dirname(__FILE__, 2) . DIRECTORY_SEPARATOR. "test.xml";
                 $dom_output->save($file);
                 

pinpointe-form-integration/trunk/pinpointe-signup-form.php

@@ -108 +108 @@
 
                     // Load scripts/styles conditionally
-                    if (isset($_SERVER['QUERY_STRING']) && preg_match('/page=pinpointe/i', $_SERVER['QUERY_STRING']) && !preg_match('/page=pinpointe_lite/i', $_SERVER['QUERY_STRING'])) {
+                    $query_string = filter_input(INPUT_SERVER, 'QUERY_STRING', FILTER_SANITIZE_STRING);
+                    if (isset($query_string) && preg_match('/page=pinpointe/i', $query_string) && !preg_match('/page=pinpointe_lite/i', $query_string)) {
                         add_action('admin_enqueue_scripts', array($this, 'enqueue_admin_scripts_and_styles'));
                      }
@@ -511 +512 @@
         public function get_current_tab($is_dash = false)
         {
-            $tab = (isset($_GET['tab']) && $this->page_has_tab($_GET['tab'])) ? preg_replace('/-/', '_', $_GET['tab']) : $this->get_default_tab();
+            $tab = (isset($_GET['tab']) && $this->page_has_tab(sanitize_text_field($_GET['tab']))) ? preg_replace('/-/', '_', sanitize_text_field($_GET['tab'])) : $this->get_default_tab();
 
             return (!$is_dash) ? $tab : preg_replace('/_/', '-', $tab);
@@ -1409 +1410 @@
         public function options_validate($input)
         {
-            $current_tab = isset($_POST['current_tab']) ? $_POST['current_tab'] : 'settings';
+            $current_tab = isset($_POST['current_tab']) ? sanitize_text_field($_POST['current_tab']) : 'settings';
             $output = $original = $this->get_options();
 
@@ -4681 +4682 @@
                 }
                 else {
-                    $ip_address = $_SERVER['HTTP_X_FORWARDED_FOR'];
+                    $ip_address = sanitize_text_field($_SERVER['HTTP_X_FORWARDED_FOR']);
                 }
             }
             else {
-                $ip_address =$_SERVER['REMOTE_ADDR'];
+                $ip_address = sanitize_text_field($_SERVER['REMOTE_ADDR']);
             }
             

pinpointe-form-integration/trunk/readme.txt

@@ -4 +4 @@
 Requires at least: 3.5
 Tested up to: 6.4.2
-Stable tag: 1.5
+Stable tag: 1.6
 Requires PHP: 5.4
 License: GPLv3 or later