Changeset 3250906

Timestamp:

03/05/2025 08:10:54 AM (12 months ago)

Author:

mykiot

Message:

CVSS: SQLi N XSSi

Location:

kiotvietsync/trunk

Files:

• admin/views/options.php (modified) (1 diff)
• includes/class-kiotviet-sync.php (modified) (1 diff)
• includes/services/class-kiotviet-sync-services-categories.php (modified) (1 diff)
• kiotviet-sync.php (modified) (2 diffs)
• readme.txt (modified) (1 diff)

kiotvietsync/trunk/admin/views/options.php

@@ -17 +17 @@
 
     if(!empty($_POST['kv_timeautosyncorder'])) {
-        update_option('kv_timeautosyncorder', $_POST['kv_timeautosyncorder']);
+        update_option('kv_timeautosyncorder', intval($_POST['kv_timeautosyncorder']));
     }
 

kiotvietsync/trunk/includes/class-kiotviet-sync.php

@@ -25 +25 @@
             $this->version = KIOTVIET_PLUGIN_VERSION;
         } else {
-            $this->version = '1.8.3';
+            $this->version = '1.8.4';
         }
 

kiotvietsync/trunk/includes/services/class-kiotviet-sync-services-categories.php

@@ -48 +48 @@
 
         foreach ($categories as $category) {
-            $categoryKvId[] = $category['categoryKvId'];
+            $categoryKvId[] = intval($category['categoryKvId']);
         }
 
         $categoryMap = $this->getCategoryIdMap($categoryKvId);
         foreach ($categories as $category) {
-            if (empty($categoryMap[$category["categoryKvId"]])) {
+            if (empty($categoryMap[intval($category["categoryKvId"])])) {
                 $category_id = $this->KiotvietWcCategory->add_category($category);
                 if (!is_wp_error($category_id)) {
                     $insert = [
                         'category_id' => $category_id,
-                        'category_kv_id' => $category["categoryKvId"],
+                        'category_kv_id' => intval($category["categoryKvId"]),
                         'data_raw' => $category["dataRaw"],
                         'retailer' => $this->retailer,

kiotvietsync/trunk/kiotviet-sync.php

@@ -7 +7 @@
  * Plugin URI:        https://kiotviet.vn
  * Description:       Plugin hỗ trợ đồng bộ sản phẩm, đơn hàng giữa website Wordpress với KiotViet.
- * Version:           1.8.3
+ * Version:           1.8.4
  * Author:            KiotViet
  * Author URI:        https://kiotviet.vn
@@ -24 +24 @@
 define('KIOTVIET_PLUGIN_PATH', plugin_dir_path( __FILE__ ));
 define('KIOTVIET_PLUGIN_URL', plugin_dir_url( __FILE__ ));
-define('KIOTVIET_PLUGIN_VERSION', '1.8.3');
+define('KIOTVIET_PLUGIN_VERSION', '1.8.4');
 
 include_once "bootstrap.php";

kiotvietsync/trunk/readme.txt

@@ -54 +54 @@
 
 == Changelog ==
+= 1.8.4 =
+* 05/03/2025
+* CVSS: SQLi N XSSi
 = 1.8.3 =
 * 26/11/2024