Changeset 3247300

Timestamp:

02/26/2025 05:29:53 PM (11 months ago)

Author:

Hakik

Message:

v1.1.8: * Check: Codebase update based on PCP (Plugin Check Plugin). * Security update: CSRF Vulnerability issue resolved.

Location:

ideal-wp-login-logo-changer/trunk

Files:

• ideal-wp-login-logo-changer.php (modified) (4 diffs)
• readme.txt (modified) (3 diffs)

ideal-wp-login-logo-changer/trunk/ideal-wp-login-logo-changer.php

@@ -3 +3 @@
 Plugin Name: Custom Login Logo
 description: Change the default WordPress logo by uploading your site logo for the login page.
-Version: 1.1.7
+Version: 1.1.8
 Author: Hakik Zaman
 Author URI: https://github.com/hakikz
@@ -23 +23 @@
 
 /*Defining Constant*/
-define("IWLLC_VERSION", '1.1.7');
+define("IWLLC_VERSION", '1.1.8');
 
 /*Add body class for options page*/
@@ -69 +69 @@
 function iwllc_register_custom_logo_settings() 
 {
-   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_logo_url');
-   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_set_bg');
-   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_bg_color');
-   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_bg_img_url');
-   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_logo_link');
-   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_link_color');
-   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_link_hover_color');
-   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_logo_width');
-   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_logo_height');
+   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_logo_url', 'sanitize_url');
+   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_set_bg', 'sanitize_text_field');
+   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_bg_color', 'sanitize_hex_color');
+   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_bg_img_url', 'sanitize_url');
+   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_logo_link', 'sanitize_url');
+   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_link_color', 'sanitize_hex_color');
+   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_link_hover_color', 'sanitize_hex_color');
+   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_logo_width', 'sanitize_text_field');
+   register_setting( 'iwllc_change_login_options_group', 'iwllc_wp_logo_height', 'sanitize_text_field');
 }
 add_action( 'admin_init', 'iwllc_register_custom_logo_settings' );
@@ -96 +96 @@
 
     do_action('iwllc_settings_start');
+
+    // Checking current user can manage options
+    if (!current_user_can('manage_options')) {
+        exit;
+    }
+
+    // Checking Nonce
+    if ( isset($_POST['action']) && !wp_verify_nonce( sanitize_key( wp_unslash( 'action', 'action' ) ) ) 
+    ) {
+        exit;
+    }
 
     ?>

ideal-wp-login-logo-changer/trunk/readme.txt

@@ -5 +5 @@
 Tested up to: 6.7
 Requires PHP: 5.2.4
-Stable tag: 1.1.7
+Stable tag: 1.1.8
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -64 +64 @@
 == Changelog ==
 
+= 1.1.8 [26-02-2025] =
+* Check: Codebase update based on PCP (Plugin Check Plugin).
+* Security update: CSRF Vulnerability issue resolved.
+
 = 1.1.7 [24-11-2024] =
 * Security: Codebase update based on PCP (Plugin Check Plugin).
@@ -113 +117 @@
 == Upgrade Notice ==
 
-= 1.1.0 =
-* Setting link redirect issue fixed in this release.
-
-= 1.0 =
-* Initial version.
+= 1.1.8 [26-02-2025] =
+* Check: Codebase update based on PCP (Plugin Check Plugin).
+* Security update: CSRF Vulnerability issue resolved.