WordPress.org
Get WordPress

Plugin Directory

Changeset 3171538


Ignore:
Timestamp:
10/18/2024 02:36:46 PM (14 months ago)
Author:
10web
Message:

Fixed: Security fix

Location:
photo-gallery/trunk
Files:
5 edited

Legend:

Unmodified
Added
Removed

  • photo-gallery/trunk/admin/controllers/Widget.php

    r2743247 r3171538  
    7676   */
    7777    public function update($new_instance, $old_instance) {
    78         $instance['title'] = isset($new_instance['title']) ? strip_tags($new_instance['title']) : '';
    79         $instance['type'] = isset($new_instance['type']) ? $new_instance['type'] : 'gallery';
    80         $instance['gallery_id'] = isset($new_instance['gallery_id']) ? $new_instance['gallery_id'] : 0;
    81         $instance['album_id'] = isset($new_instance['album_id']) ? $new_instance['album_id'] : 0;
    82         $instance['show'] = isset($new_instance['show']) ? $new_instance['show'] : 'random';
    83         $instance['count'] = isset($new_instance['count']) ? $new_instance['count'] : 4;
    84         $instance['width'] = isset($new_instance['width']) ? $new_instance['width'] : 100;
    85         $instance['height'] = isset($new_instance['height']) ? $new_instance['height'] : 100;
    86         $instance['theme_id'] = isset($new_instance['theme_id']) ? $new_instance['theme_id'] : 1;
    87         $instance['view_type'] = isset($new_instance['view_type']) ? $new_instance['view_type'] : 'thumbnails';
     78        $instance['title'] = isset($new_instance['title']) ? strip_tags(esc_html($new_instance['title'])) : '';
     79        $instance['type'] = isset($new_instance['type']) ? esc_html($new_instance['type']) : 'gallery';
     80        $instance['gallery_id'] = isset($new_instance['gallery_id']) ? intval($new_instance['gallery_id']) : 0;
     81        $instance['album_id'] = isset($new_instance['album_id']) ? intval($new_instance['album_id']) : 0;
     82        $instance['show'] = isset($new_instance['show']) ? esc_html($new_instance['show']) : 'random';
     83        $instance['count'] = isset($new_instance['count']) ? intval($new_instance['count']) : 4;
     84        $instance['width'] = isset($new_instance['width']) ? intval($new_instance['width']) : 100;
     85        $instance['height'] = isset($new_instance['height']) ? intval($new_instance['height']) : 100;
     86        $instance['theme_id'] = isset($new_instance['theme_id']) ? intval($new_instance['theme_id']) : 1;
     87        $instance['view_type'] = isset($new_instance['view_type']) ? esc_html($new_instance['view_type']) : 'thumbnails';
    8888        return $instance;
    8989    }

  • photo-gallery/trunk/admin/controllers/WidgetSlideshow.php

    r2743247 r3171538  
    9393    // Update Settings.
    9494    public function update($new_instance, $old_instance) {
    95         $instance['title'] = isset($new_instance['title']) ? strip_tags($new_instance['title']) : '';
    96         $instance['gallery_id'] = isset($new_instance['gallery_id']) ? $new_instance['gallery_id'] : 0;
    97         $instance['width'] = isset($new_instance['width']) ? $new_instance['width'] : 200;
    98         $instance['height'] = isset($new_instance['height']) ? $new_instance['height'] : 200;
    99         $instance['filmstrip_height'] = isset($new_instance['filmstrip_height']) ? $new_instance['filmstrip_height'] : 40;
    100         $instance['effect'] = isset($new_instance['effect']) ? $new_instance['effect'] : 'fade';
    101         $instance['interval'] = isset($new_instance['interval']) ? $new_instance['interval'] : 5;
    102         $instance['shuffle'] = isset($new_instance['shuffle']) ? $new_instance['shuffle'] : 0;
    103         $instance['theme_id'] = isset($new_instance['theme_id']) ? $new_instance['theme_id'] : 1;
    104         $instance['enable_ctrl_btn'] = isset($new_instance['enable_ctrl_btn']) ? $new_instance['enable_ctrl_btn'] : 0;
    105         $instance['enable_autoplay'] = isset($new_instance['enable_autoplay']) ? $new_instance['enable_autoplay'] : 0;
     95        $instance['title'] = isset($new_instance['title']) ? strip_tags(esc_html($new_instance['title'])) : '';
     96        $instance['gallery_id'] = isset($new_instance['gallery_id']) ? intval($new_instance['gallery_id']) : 0;
     97        $instance['width'] = isset($new_instance['width']) ? intval($new_instance['width']) : 200;
     98        $instance['height'] = isset($new_instance['height']) ? intval($new_instance['height']) : 200;
     99        $instance['filmstrip_height'] = isset($new_instance['filmstrip_height']) ? intval($new_instance['filmstrip_height']) : 40;
     100        $instance['effect'] = isset($new_instance['effect']) ? esc_html($new_instance['effect']) : 'fade';
     101        $instance['interval'] = isset($new_instance['interval']) ? intval($new_instance['interval']) : 5;
     102        $instance['shuffle'] = isset($new_instance['shuffle']) ? intval($new_instance['shuffle']) : 0;
     103        $instance['theme_id'] = isset($new_instance['theme_id']) ? intval($new_instance['theme_id']) : 1;
     104        $instance['enable_ctrl_btn'] = isset($new_instance['enable_ctrl_btn']) ? intval($new_instance['enable_ctrl_btn']) : 0;
     105        $instance['enable_autoplay'] = isset($new_instance['enable_autoplay']) ? intval($new_instance['enable_autoplay']) : 0;
    106106        return $instance;
    107107    }

  • photo-gallery/trunk/admin/controllers/WidgetTags.php

    r2743247 r3171538  
    7878   */
    7979    public function update($new_instance, $old_instance) {
    80         $instance['title'] = isset($new_instance['title']) ? strip_tags($new_instance['title']) : '';
    81         $instance['type'] = isset($new_instance['type']) ? $new_instance['type'] : 'text';
    82         $instance['show_name'] = isset($new_instance['show_name']) ? $new_instance['show_name'] : 0;
    83         $instance['open_option'] = isset($new_instance['open_option']) ? $new_instance['open_option'] : 'gallery';
    84         $instance['count'] = isset($new_instance['count']) ? $new_instance['count'] : 0;
    85         $instance['width'] = isset($new_instance['width']) ? $new_instance['width'] : 250;
    86         $instance['height'] = isset($new_instance['height']) ? $new_instance['height'] : 250;
    87         $instance['background_transparent'] = isset($new_instance['background_transparent']) ? $new_instance['background_transparent'] : 1;
    88         $instance['background_color'] = isset($new_instance['background_color']) ? $new_instance['background_color'] : '000000';
    89         $instance['text_color'] = isset($new_instance['text_color']) ? $new_instance['text_color'] : 'eeeeee';
    90         $instance['theme_id'] = isset($new_instance['theme_id']) ? $new_instance['theme_id'] : 1;
     80        $instance['title'] = isset($new_instance['title']) ? strip_tags(esc_html($new_instance['title'])) : '';
     81        $instance['type'] = isset($new_instance['type']) ? esc_html($new_instance['type']) : 'text';
     82        $instance['show_name'] = isset($new_instance['show_name']) ? intval($new_instance['show_name']) : 0;
     83        $instance['open_option'] = isset($new_instance['open_option']) ? esc_html($new_instance['open_option']) : 'gallery';
     84        $instance['count'] = isset($new_instance['count']) ? intval($new_instance['count']) : 0;
     85        $instance['width'] = isset($new_instance['width']) ? intval($new_instance['width']) : 250;
     86        $instance['height'] = isset($new_instance['height']) ? intval($new_instance['height']) : 250;
     87        $instance['background_transparent'] = isset($new_instance['background_transparent']) ? esc_html($new_instance['background_transparent']) : 1;
     88        $instance['background_color'] = isset($new_instance['background_color']) ? esc_html($new_instance['background_color']) : '000000';
     89        $instance['text_color'] = isset($new_instance['text_color']) ? esc_html($new_instance['text_color']) : 'eeeeee';
     90        $instance['theme_id'] = isset($new_instance['theme_id']) ? intval($new_instance['theme_id']) : 1;
    9191        return $instance;
    9292    }

  • photo-gallery/trunk/photo-gallery.php

    r3155264 r3171538  
    44 * Plugin URI: https://10web.io/plugins/wordpress-photo-gallery/?utm_source=photo_gallery&utm_medium=free_plugin
    55 * Description: This plugin is a fully responsive gallery plugin with advanced functionality.  It allows having different image galleries for your posts and pages. You can create unlimited number of galleries, combine them into albums, and provide descriptions and tags.
    6  * Version: 1.8.29
     6 * Version: 1.8.30
    77 * Author: Photo Gallery Team
    88 * Author URI: https://10web.io/plugins/?utm_source=photo_gallery&utm_medium=free_plugin
    … …  
    109109    $this->front_url = $this->plugin_url;
    110110    $this->main_file = plugin_basename(__FILE__);
    111     $this->plugin_version = '1.8.29';
    112     $this->db_version = '1.8.29';
     111    $this->plugin_version = '1.8.30';
     112    $this->db_version = '1.8.30';
    113113    $this->prefix = 'bwg';
    114114    $this->nicename = __('Photo Gallery', 'photo-gallery');

  • photo-gallery/trunk/readme.txt

    r3155264 r3171538  
    44Requires at least: 4.6
    55Tested up to: 6.6
    6 Stable tag: 1.8.29
     6Stable tag: 1.8.30
    77License: GPLv2 or later
    88License URI: http://www.gnu.org/licenses/gpl-2.0.html
    … …  
    273273
    274274== Changelog ==
     275
     276= 1.8.30 =
     277* Fixed: Security fix.
    275278
    276279= 1.8.29 =
Note: See TracChangeset for help on using the changeset viewer.