Changeset 3255595

Timestamp:

03/13/2025 08:04:45 PM (9 months ago)

Author:

numeeja

Message:

bug fixes

Location:

audio-album

Files:

• tags/1.5.1 (added)
• tags/1.5.1/audio-album.php (added)
• tags/1.5.1/css (added)
• tags/1.5.1/css/audioalbum-popup.css (added)
• tags/1.5.1/css/audioalbum.css (added)
• tags/1.5.1/includes (added)
• tags/1.5.1/includes/customizer.php (added)
• tags/1.5.1/includes/sanitize.php (added)
• tags/1.5.1/js (added)
• tags/1.5.1/js/audiotrackpopup.js (added)
• tags/1.5.1/js/customizer-preview.js (added)
• tags/1.5.1/js/customizer-showhide.js (added)
• tags/1.5.1/languages (added)
• tags/1.5.1/languages/audio-album-de_DE.mo (added)
• tags/1.5.1/languages/audio-album-de_DE.po (added)
• tags/1.5.1/languages/audio-album-en_GB.mo (added)
• tags/1.5.1/languages/audio-album-en_GB.po (added)
• tags/1.5.1/languages/audio-album-fr_FR.mo (added)
• tags/1.5.1/languages/audio-album-fr_FR.po (added)
• tags/1.5.1/languages/audio-album.pot (added)
• tags/1.5.1/readme.txt (added)
• tags/1.5.1/templates (added)
• tags/1.5.1/templates/genesis-audioalbum-popup.php (added)
• tags/1.5.1/uninstall.php (added)
• trunk/audio-album.php (modified) (5 diffs)
• trunk/includes/customizer.php (modified) (1 diff)
• trunk/readme.txt (modified) (4 diffs)

audio-album/trunk/audio-album.php

@@ -5 +5 @@
 Description: Provides shortcodes to format native WordPress audio players as an album of tracks with additional info
 Author: cubecolour
-Version: 1.5.0
+Version: 1.5.1
 Text Domain: audio-album
 Domain Path: /languages/
@@ -11 +11 @@
 License: GPLv2
 
-  Copyright 2013-2023 Michael Atkins
+  Copyright 2013-2025 Michael Atkins
 
   [email protected]
@@ -356 +356 @@
 
     if ( $args['songwriter']  !== '') {
-        $args['songwriter'] = '<span class="songwriter">(' . $args['songwriter'] . ')</span>';
+        $args['songwriter'] = '<span class="songwriter">(' . sanitize_text_field( $args['songwriter'] ) . ')</span>';
     }
 
@@ -396 +396 @@
 
     if ( $args['buttonlink']  !== '#') {
-        $popupbutton = '<a href="'. $cc_siteurl .'/?p=' . esc_attr( $args['buttonlink'] ) . '&pop=yes" class="info-popup" data-width="' . esc_attr( $args['width'] ) . '" data-height="' . esc_attr( $args['height']) . '">' . esc_attr( $args['buttontext']) . '</a>';
+        $nonce = wp_create_nonce( 'cc_audioalbum_popup' ); // Generate a nonce
+        $popupbutton = '<a href="'. $cc_siteurl .'/?p=' . esc_attr( $args['buttonlink'] ) . '&pop=yes&_wpnonce=' . $nonce . '" class="info-popup" data-width="' . esc_attr( $args['width'] ) . '" data-height="' . esc_attr( $args['height']) . '">' . esc_attr( $args['buttontext']) . '</a>';
+
     }
 
@@ -420 +422 @@
 
 function cc_popup_audioalbum_template( $template ) {
-    if( isset( $_GET['pop']) && 'yes' == $_GET['pop'] )
-        $template = plugin_dir_path( __FILE__ ) . 'templates/genesis-audioalbum-popup.php';
+if ( isset( $_GET['pop'] ) && 'yes' === $_GET['pop'] ) {
+    if ( isset( $_GET['_wpnonce'] ) && wp_verify_nonce( sanitize_text_field( wp_unslash( $_GET['_wpnonce'] ) ), 'cc_audioalbum_popup' ) ) {
+        $template = plugin_dir_path( __FILE__ ) . 'templates/genesis-audioalbum-popup.php';
+    } else {
+        wp_die( esc_html__( 'Invalid request.', 'audio-album' ) ); // Prevent unauthorized access
+    }
+}
 
     return $template;

audio-album/trunk/includes/customizer.php

@@ -24 +24 @@
             'title'             => __( 'Audio Album', 'audio-album' ),
             'capability'        => 'edit_theme_options',
-            'description'       =>  __( '', 'audio-album' ),
         )
     );

audio-album/trunk/readme.txt

@@ -2 +2 @@
 Contributors: numeeja
 Donate link: https://cubecolour.co.uk/wp
-Tags: audio, album, playlist, music, mp3, ogg, m4a, wma, wav, media
+Tags: audio, album, playlist, music, mp3
 Requires at least: 4.9
-Tested up to: 6.5
-Stable tag: 1.5.0
+Tested up to: 6.7
+Stable tag: 1.5.1
 License: GPLv2
 
@@ -170 +170 @@
 
 == Changelog ==
+
+= 1.5.1 =
+* Various bugfixes
 
 = 1.5.0 =
@@ -244 +247 @@
 == Upgrade Notice ==
 
+= 1.5.1 =
+* Various bugfixes
+
 = 1.5.0 =
 * Removed jQuery as dependency on the front end (although mediaelement still requires jQuery)
@@ -270 +276 @@
 = 1.2.0 =
 
-* improve delimiting for comments
-* add default value for preload shortcode param: metadata so total track time appears in player
-* improved parameter value sanitization
-* use array for shortcode parameters instead of extract
-* use constant for plugin version
-* use visibility instead of display for delaying appearance of tracks
+* various fixes, see changelog
 
 = 1.1.0 =