WordPress.org
Get WordPress

Plugin Directory

Changeset 3085209


Ignore:
Timestamp:
05/12/2024 10:42:05 AM (23 months ago)
Author:
kaminsky.m
Message:

2.24 release 1

Location:
ajax-login-and-registration-modal-popup/trunk
Files:
1 added
9 edited

Legend:

Unmodified
Added
Removed

  • ajax-login-and-registration-modal-popup/trunk/ajax-login-registration-modal-popup.php

    r2892256 r3085209  
    44    Plugin URI:     https://maxim-kaminsky.com/shop/product/ajax-login-and-registration-modal-popup-pro/
    55    Description:    Easy to integrate modal with Login and Registration features + inline form using shortcode.
    6     Version:        2.23
     6    Version:        2.24
    77    Author URI:     http://maxim-kaminsky.com/
    88    Author:         Maxim K
    … …  
    3434}
    3535
    36 define("LRM_VERSION", '2.23');
     36define("LRM_VERSION", '2.24');
    3737
    38 define("LRM_ASSETS_VER", 57);
     38define("LRM_ASSETS_VER", 56);
    3939
    4040//define('LRM_LOAD_ASSETS_ONLY_FOR_INLINE', 1); //- if no modal used - only inline form

  • ajax-login-and-registration-modal-popup/trunk/includes/class-ajax.php

    r2892257 r3085209  
    775775            //setcookie( $rp_cookie, ' ', time() - YEAR_IN_SECONDS, $rp_path, COOKIE_DOMAIN, is_ssl(), true );
    776776            if ( $user && $user->get_error_code() === 'expired_key' ) {
    777                 $errors->add('invalidkey', __('Your password reset link appears to be invalid.') . $request_msg);
     777                $errors->add( 'expiredkey', __( '<strong>Error</strong>: Your password reset link has expired. Please request a new link below.' ) );
     778                //$errors->add('invalidkey', __('Your password reset link appears to be invalid.') . $request_msg);
    778779                //wp_redirect( site_url( 'wp-login.php?action=lostpassword&error=expiredkey' ) );
    779780            } else {
    780                 $errors->add('expiredkey', __('Your password reset link has expired.') . $request_msg);
     781                $errors->add( 'invalidkey', __( '<strong>Error</strong>: Your password reset link appears to be invalid. Please request a new link below.' ) );
     782                //$errors->add('expiredkey', __('Your password reset link has expired.') . $request_msg);
    781783                //wp_redirect( site_url( 'wp-login.php?action=lostpassword&error=invalidkey' ) );
    782784            }
    … …  
    784786
    785787        return [$rp_key, $rp_login, $rp_path, $user];
    786 
    787788    }
    788789

  • ajax-login-and-registration-modal-popup/trunk/includes/class-core.php

    r2892257 r3085209  
    8686
    8787        if ( !is_customize_preview() && is_user_logged_in() ) {
    88             return $atts['logged_in_message'];
     88            return esc_html($atts['logged_in_message']);
    8989        }
    9090
    … …  
    9292
    9393        if ( !$redirect_to && !empty( $_GET['redirect_to'] ) ) {
    94             $redirect_to = urldecode($_GET['redirect_to']);
    95         }
     94            $redirect_to = urldecode($_GET['redirect_to']);
     95        }
     96
     97        $redirect_to = wp_validate_redirect( $redirect_to, apply_filters( 'wp_safe_redirect_fallback', home_url(), 200 ) );
    9698
    9799        ob_start();
    98             $this->render_form( true, $atts['default_tab'], $atts['role'], $atts['role_silent'], $atts['redirect_to'] );
     100            $this->render_form( true, $atts['default_tab'], $atts['role'], $atts['role_silent'], $redirect_to );
    99101        return ob_get_clean(  );
    100102    }
    … …  
    108110
    109111        if ( !is_customize_preview() && is_user_logged_in() ) {
    110             return $atts['logged_in_message'];
     112            return esc_html($atts['logged_in_message']);
    111113        }
    112114

  • ajax-login-and-registration-modal-popup/trunk/includes/class-wpml.php

    r2892257 r3085209  
    127127
    128128        $section_name = 'messages';
    129         $option_name = str_replace('lrm_', $option_name);
     129        $option_name = str_replace('lrm_', '', $option_name);
    130130        if ( false !== strpos($option_name, 'mails') ) {
    131131            $section_name = 'mails';
    132         } elseif ( false !== strpos($option_name, 'mails') ) {
     132        } elseif ( false !== strpos($option_name, 'messages_pro') ) {
    133133            $section_name = 'messages_pro';
    134134        }

  • ajax-login-and-registration-modal-popup/trunk/readme.txt

    r2892257 r3085209  
    33Tags: login, registration, register, lost password, modal, popup, ajax, form
    44Requires at least: 4.1
    5 Tested up to: 6.2
     5Tested up to: 6.5.3
    66Requires PHP: 5.5
    77Stable tag: trunk
    … …  
    211211== Changelog ==
    212212
     213= VER 2.24 - 12/05/2024 =
     214
     215- XSS Vulnerability fix
     216- Tested with WordPress version to 6.5.3
     217
    213218= VER 2.23 - 02/03/2023 =
    214219

  • ajax-login-and-registration-modal-popup/trunk/views/form-parts/login.php

    r2729353 r3085209  
    6161        </div>
    6262
    63         <input type="hidden" name="redirect_to" value="<?= $redirect_to; ?>">
     63        <input type="hidden" name="redirect_to" value="<?= esc_attr($redirect_to); ?>">
    6464        <input type="hidden" name="lrm_action" value="login">
    6565        <input type="hidden" name="wp-submit" value="1">

  • ajax-login-and-registration-modal-popup/trunk/views/form-parts/lost-password.php

    r2448517 r3085209  
    88                <?php $email_label = esc_attr( lrm_setting('messages/lost_password/email', true) ); ?>
    99                <label class="image-replace lrm-email lrm-ficon-mail" title="<?= $email_label; ?>"></label>
    10                 <input class="full-width has-padding has-border" name="user_login" type="text" <?= $fields_required; ?> placeholder="<?= $email_label; ?>" data-autofocus="1" aria-label="<?= $email_label; ?>">
     10                <input class="full-width has-padding has-border" name="user_login" type="text" <?= $fields_required; ?> placeholder="<?= esc_attr($email_label); ?>" data-autofocus="1" aria-label="<?= esc_attr($email_label); ?>">
    1111                <span class="lrm-error-message"></span>
    1212            </div>

  • ajax-login-and-registration-modal-popup/trunk/views/form-parts/register.php

    r2892257 r3085209  
    110110                                    <option value=""><?php echo lrm_setting('messages/registration/user_role', true); ?></option>
    111111                                    <?php foreach ( $active_roles_list as $active_role_key => $active_role_label ) : ?>
    112                                         <option value="<?= $active_role_key; ?>" data-label="<?= esc_attr($active_role_label); ?>" <?php selected($active_role_label, $role) ?>><?= $active_role_label; ?></option>
     112                                        <option value="<?= esc_html($active_role_key); ?>" data-label="<?= esc_attr($active_role_label); ?>" <?php selected($active_role_label, $role) ?>><?= $active_role_label; ?></option>
    113113                                    <?php endforeach; ?>
    114114                                </select>
    … …  
    154154                <div class="fieldset fieldset--submit <?= esc_attr($fieldset_submit_class); ?>">
    155155                    <button class="full-width has-padding" type="submit">
    156                         <?php echo lrm_setting('messages/registration/button', true); ?>
     156                        <?php echo esc_html( lrm_setting('messages/registration/button', true) ); ?>
    157157                    </button>
    158158                </div>
    … …  
    166166                </div>
    167167
    168                 <input type="hidden" name="redirect_to" value="<?= $redirect_to; ?>">
     168                <input type="hidden" name="redirect_to" value="<?= esc_attr($redirect_to); ?>">
    169169                <input type="hidden" name="lrm_action" value="signup">
    170170                <input type="hidden" name="wp-submit" value="1">

  • ajax-login-and-registration-modal-popup/trunk/views/form.php

    r2892257 r3085209  
    3636?>
    3737-->
    38 <div class="lrm-main lrm-font-<?= $icons_class; ?> <?php echo !$is_inline ? 'lrm-user-modal' : 'lrm-inline is-visible'; ?> <?= esc_attr($extra_main_class); ?>" <?php echo !$is_inline ? 'style="visibility: hidden;"' : ''?>>
     38<div class="lrm-main lrm-font-<?= esc_attr($icons_class); ?> <?php echo !$is_inline ? 'lrm-user-modal' : 'lrm-inline is-visible'; ?> <?= esc_attr($extra_main_class); ?>" <?php echo !$is_inline ? 'style="visibility: hidden;"' : ''?>>
    3939    <!--<div class="lrm-user-modal" style="visibility: hidden;">  this is the entire modal form, including the background -->
    4040
Note: See TracChangeset for help on using the changeset viewer.