Changeset 3226484

Timestamp:

01/21/2025 08:36:27 PM (13 months ago)

Author:

flexmls

Message:

Flexmls WordPress plugin 3.14.27

Location:

flexmls-idx/trunk

Files:

• Admin/Settings.php (modified) (1 diff)
• README.txt (modified) (2 diffs)
• flexmls_connect.php (modified) (2 diffs)
• lib/flexmlsAPI/Core.php (modified) (1 diff)
• views/admin-intro-api.php (modified) (2 diffs)

flexmls-idx/trunk/Admin/Settings.php

@@ -267 +267 @@
             $old_api_secret = $fmc_settings[ 'api_secret' ];
 
-            $new_api_key = esc_html( sanitize_text_field( $_POST[ 'fmc_settings' ][ 'api_key' ] ) );
-            $new_api_secret = esc_html( sanitize_text_field( $_POST[ 'fmc_settings' ][ 'api_secret' ] ) );
+            $new_api_key = sanitize_text_field( $_POST[ 'fmc_settings' ][ 'api_key' ] );
+            $new_api_secret = sanitize_text_field( $_POST[ 'fmc_settings' ][ 'api_secret' ] );
 
             $fmc_settings[ 'api_key' ] = $new_api_key;

flexmls-idx/trunk/README.txt

@@ -5 +5 @@
 Tested up to: 6.7.1
 Requires PHP: 7.4
-Stable tag: 3.14.26
+Stable tag: 3.14.27
 
 Add Flexmls® IDX listings, market statistics, IDX searches, and a contact form on your web site.
@@ -86 +86 @@
 
 == Changelog ==
+= 3.14.27 =
+* More Security Improvements For Plugin Settings Pages
+
 = 3.14.26 =
 Efficiency Update

flexmls-idx/trunk/flexmls_connect.php

@@ -6 +6 @@
 Description: Provides Flexmls&reg; Customers with Flexmls&reg; IDX features on their WordPress websites. <strong>Tips:</strong> <a href="admin.php?page=fmc_admin_settings">Activate your Flexmls&reg; IDX plugin</a> on the settings page; <a href="widgets.php">add widgets to your sidebar</a> using the Widgets Admin under Appearance; and include widgets on your posts or pages using the Flexmls&reg; IDX Widget Short-Code Generator on the Visual page editor.
 Author: FBS
-Version: 3.14.26
+Version: 3.14.27
 Author URI:  https://www.flexmls.com
 Requires at least: 5.0
@@ -17 +17 @@
 const FMC_API_BASE = 'sparkapi.com';
 const FMC_API_VERSION = 'v1';
-const FMC_PLUGIN_VERSION = '3.14.26';
+const FMC_PLUGIN_VERSION = '3.14.27';
 
 define( 'FMC_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );

flexmls-idx/trunk/lib/flexmlsAPI/Core.php

@@ -44 +44 @@
         'Accept-Encoding' => "gzip,deflate",
         'Content-Type' => "application/json",
-        'User-Agent' => "FlexMLS WordPress Plugin/3.14.26",
-        'X-SparkApi-User-Agent' => "flexmls-WordPress-Plugin/3.14.26"
+        'User-Agent' => "FlexMLS WordPress Plugin/3.14.27",
+        'X-SparkApi-User-Agent' => "flexmls-WordPress-Plugin/3.14.27"
     );
 

flexmls-idx/trunk/views/admin-intro-api.php

@@ -20 +20 @@
                 </th>
                 <td>
-                    <input type="text" class="regular-text" name="fmc_settings[api_key]" id="api_key" value="<?php echo $fmc_settings[ 'api_key' ]; ?>" autocomplete="off" required>
+                    <input type="text" class="regular-text" name="fmc_settings[api_key]" id="api_key" value="<?php echo esc_attr($fmc_settings[ 'api_key' ]); ?>" autocomplete="off" required>
                 </td>
             </tr>
@@ -28 +28 @@
                 </th>
                 <td>
-                    <input type="<?php if( $auth_token ): ?>password<?php else: ?>text<?php endif; ?>" class="regular-text" name="fmc_settings[api_secret]" id="api_secret" value="<?php echo $fmc_settings[ 'api_secret' ]; ?>" autocomplete="off" required>
+                    <input type="<?php if( $auth_token ): ?>password<?php else: ?>text<?php endif; ?>" class="regular-text" name="fmc_settings[api_secret]" id="api_secret" value="<?php echo esc_attr($fmc_settings[ 'api_secret' ]); ?>" autocomplete="off" required>
                 </td>
             </tr>