WordPress.org
Get WordPress

Plugin Directory

Changeset 3270159


Ignore:
Timestamp:
04/10/2025 07:12:48 AM (8 months ago)
Author:
flippercode
Message:

security issues fixed

Location:
wp-google-map-plugin
Files:
859 added
5 edited

Legend:

Unmodified
Added
Removed

  • wp-google-map-plugin/trunk/assets/css/backend.css

    r3108077 r3270159  
    13481348    font-size: 16px;
    13491349}
     1350
     1351#wpgmp_extentions_listing .fc-row{margin-bottom:20px;}

  • wp-google-map-plugin/trunk/modules/extentions/views/manage.php

    r3168237 r3270159  
    1111    $extentions = array();
    1212
    13     $listing = array('url' => 'https://www.wpmapspro.com/product/listing-designs-for-google-maps', 'thumb' => 'listing-designs-on-google-maps.png', 'demo_url' => 'https://www.wpmapspro.com/listing-designs-for-google-maps/');
    14     $search_widget = array('url' => 'https://www.wpmapspro.com/product/search-widget-for-google-maps', 'thumb' => 'search-widget-for-google-maps.png', 'demo_url' => 'https://www.wpmapspro.com/search-widget-with-google-map/');
    15     $filter_by_viewport = array('url' => 'https://www.wpmapspro.com/product/filter-map-listing-by-viewport', 'thumb' => 'filter-map-listing-by-viewport.png', 'demo_url' => 'https://www.wpmapspro.com/filter-map-listing-by-viewport/');
    16     $frontend_submissions = array('url' => 'https://www.wpmapspro.com/product/frontend-submissions-on-google-maps', 'thumb' => 'frontend-submission-thumb.png', 'demo_url' => 'https://www.wpmapspro.com/frontend-submissions-on-google-maps/');
    17     $user_location = array('url' => 'https://www.wpmapspro.com/product/user-location-on-google-maps', 'thumb' => 'User-Location-on-Google-Maps.png', 'demo_url' => 'https://www.wpmapspro.com/user-location-on-google-maps/');
    18     $skin_color = array('url' => 'https://www.wpmapspro.com/product/google-maps-skin-color', 'thumb' => 'google-maps-skin-color.png', 'demo_url' => 'https://www.wpmapspro.com/google-maps-skin-color/');
    19     $migration = array('url' => 'https://www.wpmapspro.com/product/wp-google-maps-migration', 'thumb' => 'wp-google-maps-migration.png', 'demo_url' => '#');
    20     $mysql = array('url' => 'https://www.wpmapspro.com/product/mysql-to-google-maps', 'thumb' => 'mysql-to-google-maps.png', 'demo_url' => 'https://www.wpmapspro.com/mysql-data-on-google-maps/');
    21     $excel = array('url' => 'https://www.wpmapspro.com/product/excel-to-google-maps', 'thumb' => 'excel-to-google-maps.png', 'demo_url' => 'https://www.wpmapspro.com/excelsheet-to-google-maps/');
    22     $airtable = array('url' => 'https://www.wpmapspro.com/product/airtable-data-on-google-maps', 'thumb' => 'airtable-to-googlemaps.png', 'demo_url' => 'https://www.wpmapspro.com/airtable-data-on-google-map/');
    23     $gravity = array('url' => 'https://www.wpmapspro.com/product/gravity-form-submissions-on-google-maps/', 'thumb' => 'gravity-form-thumb.png', 'demo_url' => 'https://www.wpmapspro.com/gravity-form-entries-googlemaps/');
    24     $buddypress = array('url' => 'https://www.wpmapspro.com/product/buddypress-members-on-google-maps', 'thumb' => 'buddypress-thumb.png', 'demo_url' => 'https://www.wpmapspro.com/display-buddypress-users-on-google-maps/');
    25     $cf7 = array('url' => 'https://www.wpmapspro.com/product/cf7-submissions-to-google-maps/', 'thumb' => 'cf7-thumb.png', 'demo_url' => 'https://www.wpmapspro.com/cf7-to-googlemaps/');
    26     $bookmark = array('url' => 'https://www.wpmapspro.com/product/bookmarks-locations-on-googlemaps', 'thumb' => 'Bookmark-Locations-On-Google-Maps.png', 'demo_url' => 'https://www.wpmapspro.com/locations-bookmark-for-google-maps/');
    27     $Itinerary = array('url' => 'https://www.wpmapspro.com/product/customer-itinerary-on-google-maps', 'thumb' => 'Customer-Itinerary-On-Google-Maps.png', 'demo_url' => 'https://www.wpmapspro.com/customer-itinerary-on-map/');
    28     $json = array('url' => 'https://www.wpmapspro.com/product/json-to-google-maps', 'thumb' => 'JSON-To-Google-Maps.png', 'demo_url' => 'https://www.wpmapspro.com/json-to-google-maps/');
    29     $wpusers = array('url' => 'https://www.wpmapspro.com/product/wordpress-users-on-google-maps', 'thumb' => 'wordpress-users-thumb.png', 'demo_url' => 'https://www.wpmapspro.com/wordpress-users/');
    30     $request = array('url' => 'https://www.wpmapspro.com/contact/', 'thumb' => 'request-customisation.png', 'demo_url' => '');
     13    $wp_maps_templates = array('url' => 'https://weplugins.com/product/wp-maps-templates/',
     14                     'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2024/12/wp-maps-templates.jpg',
     15                    'demo_url' => 'https://weplugins.com/wp-maps-templates/');
     16    $listing = array('url' => 'https://weplugins.com/product/listing-designs-for-google-maps',
     17                     'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2024/02/Listing-Design-for-Google-Maps.png',
     18                    'demo_url' => 'https://weplugins.com/wp-maps-extentions/maps-addon-demos/listing-designs-on-google-maps/');
     19    $search_widget = array('url' => 'https://weplugins.com/product/search-widget-for-google-maps/',
     20                           'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2024/02/Search-Widget-for-Google-Maps.png',
     21                           'demo_url' => 'https://weplugins.com/wp-maps-extentions/maps-addon-demos/search-widget-for-google-maps/');
     22    $filter_by_viewport = array('url' => 'https://weplugins.com/product/filter-map-listing-by-viewport/',
     23                                         'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2024/02/Markers-Filter-by-Viewport-on-Google-Maps.png', 'demo_url' => 'https://weplugins.com/wp-maps-extentions/maps-addon-demos/markers-filter-by-viewport-on-google-maps');
    3124
     25    $frontend_submissions = array('url' => 'https://weplugins.com/product/frontend-submissions-on-google-maps/',
     26                                 'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2014/12/Frontend-Submissions-on-Google-Maps.png',
     27                                 'demo_url' => 'https://weplugins.com/wp-maps-extentions/maps-addon-demos/frontend-submissions-on-google-maps/');
     28    $user_location = array('url' => 'https://weplugins.com/product/user-locations-on-google-maps/',
     29                                    'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2024/02/User-Location-Mapping-on-Google-Maps.png',
     30                                    'demo_url' => 'https://weplugins.com/wp-maps-extentions/maps-addon-demos/user-location-mapping-on-google-maps/');
     31    $skin_color = array('url' => 'https://weplugins.com/product/google-maps-skin-color/',
     32                        'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2014/12/Custom-Map-Colors-for-Google-Maps.png',
     33                        'demo_url' => 'https://weplugins.com/wp-maps-extentions/maps-addon-demos/custom-map-colors-for-google-maps/');
     34    $migration = array('url' => 'https://weplugins.com/product/wp-google-maps-migration/', 'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2024/02/WP-Maps-Pro-Data-Migration.png', 'demo_url' => '#');
     35    $mysql = array('url' => 'https://weplugins.com/product/mysql-to-googlemaps/', 'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2024/02/MySQL-Data-on-Google-Maps.png', 'demo_url' => 'https://weplugins.com/wp-maps-extentions/maps-addon-demos/mysql-data-on-google-maps/');
     36    $excel = array('url' => 'https://weplugins.com/product/excel-to-googlemaps/', 'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2014/12/Excel-Data-on-Google-Maps.png', 'demo_url' => 'https://weplugins.com/wp-maps-extentions/maps-addon-demos/excel-data-on-google-maps/');
     37    $airtable = array('url' => 'https://weplugins.com/product/airtable-to-google-maps/', 'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2024/02/Airtable-Data-on-Google-Maps.png', 'demo_url' => 'https://weplugins.com/wp-maps-extentions/maps-addon-demos/airtable-data-on-google-maps/');
     38    $gravity = array('url' => 'https://weplugins.com/product/gravity-submissions-to-googlemaps/', 'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2014/12/Gravity-Form-Submissions-on-Google-Maps-New.png', 'demo_url' => 'https://weplugins.com/wp-maps-extentions/maps-addon-demos/gravity-form-submissions-on-google-maps/');
     39    $buddypress = array('url' => 'https://weplugins.com/product/buddypress-members-google-maps/', 'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2024/02/BuddyPress-Members-on-Google-Maps.png', 'demo_url' => 'https://weplugins.com/wp-maps-extentions/maps-addon-demos/buddypress-members-on-google-maps/');
     40    $cf7 = array('url' => 'https://weplugins.com/product/cf7-submissions-to-googlemaps/', 'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2024/02/Contact-Form-7-Submissions-on-Google-Maps.png', 'demo_url' => 'https://weplugins.com/wp-maps-extentions/maps-addon-demos/contact-form-7-submissions-on-google-maps/');
     41    $bookmark = array('url' => 'https://weplugins.com/product/bookmark-locations-for-google-maps/', 'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2024/02/Location-Bookmarking-for-Google-Maps.png', 'demo_url' => 'https://weplugins.com/wp-maps-extentions/maps-addon-demos/location-bookmarking-for-google-maps/');
     42    $Itinerary = array('url' => 'https://weplugins.com/product/customer-itinerary-on-google-maps/', 'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2024/02/Customer-Itinerary-Planner-for-Google-Maps.png', 'demo_url' => 'https://weplugins.com/wp-maps-extentions/maps-addon-demos/customer-itinerary-planner-for-google-maps/');
     43    $json = array('url' => 'https://weplugins.com/product/json-to-google-maps/', 'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2024/02/JSON-Data-on-Google-Maps.png', 'demo_url' => 'https://weplugins.com/wp-maps-extentions/maps-addon-demos/json-data-on-google-maps/');
     44    $wpusers = array('url' => 'https://weplugins.com/product/wp-users-on-google-maps/', 'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2024/02/WordPress-Users-on-Google-Maps.png', 'demo_url' => 'https://weplugins.com/wp-content/uploads/2024/02/WordPress-Users-on-Google-Maps.png');
     45    $amenities = array('url' => 'https://weplugins.com/product/nearby-amenities-listing-on-google-maps/', 'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2024/02/Nearby-Amenities-Listing-on-Google-Maps.png', 'demo_url' => 'https://weplugins.com/wp-maps-extentions/maps-addon-demos/nearby-amenities-listing-on-google-maps/');
     46    $html_markers = array('url' => 'https://weplugins.com/product/html-markers-for-google-maps/', 'thumbnail_url' => 'https://weplugins.com/wp-content/uploads/2024/02/HTML-Marker-For-Google-Maps.png', 'demo_url' => 'https://weplugins.com/wp-maps-extentions/maps-addon-demos/html-markers-for-google-maps/');
     47   
     48    $extentions[] =  $wp_maps_templates;
    3249    $extentions[] =  $listing;
    3350    $extentions[] =  $buddypress;
     51    $extentions[] =  $filter_by_viewport;
    3452    $extentions[] =  $search_widget;
    35     $extentions[] =  $filter_by_viewport;
    3653    $extentions[] =  $frontend_submissions;
     54    $extentions[] =  $Itinerary;
    3755    $extentions[] =  $user_location;
    3856    $extentions[] =  $skin_color;
     57   
     58   
    3959    $extentions[] =  $migration;
    4060    $extentions[] =  $mysql;
    … …  
    4262    $extentions[] =  $airtable;
    4363    $extentions[] =  $gravity;
     64    $extentions[] =  $cf7;
    4465    $extentions[] =  $bookmark;
    45     $extentions[] =  $cf7;
    46     $extentions[] =  $Itinerary;
     66   
    4767    $extentions[] =  $json;
    4868    $extentions[] =  $wpusers;
    49     $extentions[] =  $request;
     69    $extentions[] =  $amenities;
     70    $extentions[] =  $html_markers;
     71
    5072
    5173    $html = '<div class="fc-row">';
    … …  
    5476    foreach($extentions as $key => $addon){
    5577
    56         if($key != 0 && $key % 4 == 0){ $html .= '</div><div class="fc-row">';  }
     78        if($key != 0 && $key % 3 == 0){ $html .= '</div><div class="fc-row">';  }
    5779
    5880        if($key == $count -1) {
    … …  
    6789        }
    6890
    69         $html .= '<div class="fc-3">
     91        $html .= '<div class="fc-4">
    7092            <div class="addon_block">
    7193            <div class="addon_block_overlay">
    7294                '.$links.'
    7395            </div>
    74             <img src="http://img.flippercode.com/new-addons-thumbnails/'.$addon['thumb'].'"/>
     96            <img src="'.$addon['thumbnail_url'].'"/>
    7597            </div>
    7698        </div>';

  • wp-google-map-plugin/trunk/modules/map/model.map.php

    r3108077 r3270159  
    9292            }
    9393        }
     94
     95        function sanitize_custom_css($css) {
     96           
     97            // Remove all HTML and PHP tags
     98            $css = wp_strip_all_tags($css);
     99       
     100            // Allow only valid CSS properties using regex
     101            $css = preg_replace('/<\/?(script|style|iframe|object|embed|applet|meta|link|form|input|button)[^>]*>/i', '', $css);
     102       
     103            return $css;
     104        }
     105
     106        function validate_float_with_decimal( $value ) {
     107
     108            // Remove whitespace and ensure it's a string
     109            $value = trim( (string) $value );
     110       
     111            // Validate as a float
     112            if ( filter_var( $value, FILTER_VALIDATE_FLOAT ) === false ) {
     113                return false;
     114            }
     115       
     116            // Ensure it has a decimal point (i.e., not an integer)
     117            if ( strpos( $value, '.' ) === false ) {
     118                return false;
     119            }
     120       
     121            return floatval( $value );
     122        }
     123
    94124        /**
    95125         * Add or Edit Operation.
    … …  
    112142            if ( isset( $_REQUEST['_wpnonce'] ) && ! wp_verify_nonce( $_REQUEST['_wpnonce'], 'wpgmp-nonce' ) )
    113143            die( 'You are not allowed to save changes!' );
    114    
     144
    115145            //Check Validations
    116146            $this->verify( $_POST );
    … …  
    132162               
    133163            }
    134            
     164
     165            // sanitise and check for proper decimal values.
     166            $map_center_latitude = isset( $_POST['map_all_control']['map_center_latitude'] ) ? $_POST['map_all_control']['map_center_latitude'] : '';
     167            $map_center_longitude = isset( $_POST['map_all_control']['map_center_longitude'] ) ? $_POST['map_all_control']['map_center_longitude'] : '';
     168            if(!$this->validate_float_with_decimal( $map_center_latitude )){
     169                $this->errors[] = esc_html__( 'Please enter a valid decimal value for latitude.','wp-google-map-plugin' );
     170            }
     171            if(!$this->validate_float_with_decimal( $map_center_longitude )){
     172                $this->errors[] = esc_html__( 'Please enter a valid decimal value for longitude.','wp-google-map-plugin' );
     173            }
     174
    135175            if ( is_array( $this->errors ) && ! empty( $this->errors ) ) {
    136176                $this->throw_errors();
    … …  
    170210                }
    171211            }
    172            
     212            // Sanitize source code for allowed HTML tags
    173213            if ( isset( $_POST['map_all_control']['location_infowindow_skin']['sourcecode'] ) ) {
    174                 $_POST['map_all_control']['infowindow_setting'] = $_POST['map_all_control']['location_infowindow_skin']['sourcecode'];
    175             }
    176 
    177 
     214                $_POST['map_all_control']['infowindow_setting'] = wp_kses_post($_POST['map_all_control']['location_infowindow_skin']['sourcecode']);
     215            }
     216
     217            $keys_to_be_check_for_safe_css_inputs = [
     218                'wpgmp_custom_css',
     219                'wpgmp_base_font_size',
     220                'wpgmp_primary_color',
     221                'wpgmp_secondary_color',
     222                'additional_css'
     223            ];
     224
     225            $keys_to_be_check_for_safe_inputs = [
     226                'map_center_latitude',
     227                'map_center_longitude',
     228                'wpgmp_before_listing',
     229            ];
     230           
     231            // sanitise css related inputs
     232            foreach ($keys_to_be_check_for_safe_css_inputs as $key) {
     233                if (!empty($_POST['map_all_control'][$key])) {
     234                    $_POST['map_all_control'][$key] = $this->sanitize_custom_css($_POST['map_all_control'][$key]);
     235                }
     236            }
     237
     238            //sanitise all textboxes inputs
     239            foreach ($keys_to_be_check_for_safe_inputs as $key) {
     240                if (!empty($_POST['map_all_control'][$key])) {
     241                    $_POST['map_all_control'][$key] = sanitize_text_field( wp_unslash($_POST['map_all_control'][$key] ) );
     242                }
     243            }
     244
     245            //sanitise marker icon url
     246            if (!empty($_POST['map_all_control']['marker_default_icon'])) {
     247                $_POST['map_all_control']['marker_default_icon'] = esc_url_raw( $_POST['map_all_control']['marker_default_icon'] );
     248            }
    178249           
    179250            //Preparing secure and safe data to save

  • wp-google-map-plugin/trunk/readme.txt

    r3250178 r3270159  
    22Contributors:      flippercode
    33Plugin Name:       WP MAPS
    4 Tags: google map,google maps,map,maps,map block
     4Tags: google map,google maps,map,wordpress google maps,map block
    55Author URI:        http://profiles.wordpress.org/flippercode/
    66Author:            flippercode
    77Requires at least: 3.4
    8 Tested up to: 6.7.1
    9 Stable tag: 4.7.1
     8Tested up to: 6.7.2
     9Stable tag: 4.7.2
    1010Requires PHP: 5.3
    1111License: GPLv2 or later
    … …  
    170170== Changelog ==
    171171
     172= 4.7.2 =
     173* Add : Fixed the security issues related to map controls.
     174
    172175= 4.7.1 =
    173 * Fix : Maps was not showing error fixed.
    174 
    175 = 4.7.0 =
    176176* Add : Fix the issue of Camera control position.
    177177
    … …  
    215215== Upgrade Notice ==
    216216
     217= 4.7.2 =
     218  - Upgrade for more stable release.
     219
     220= 4.7.1 =
     221  - Upgrade for more stable release.
     222
     223= 4.7.0 =
     224  - Upgrade for more stable release.
     225 
    217226= 4.6.9 =
    218227  - Upgrade for more stable release.

  • wp-google-map-plugin/trunk/wp-google-map-plugin.php

    r3250109 r3270159  
    66Author: flippercode
    77Author URI: https://weplugins.com/
    8 Version: 4.7.1
     8Version: 4.7.2
    99Text Domain: wp-google-map-plugin
    1010Domain Path: /lang
    … …  
    854854           
    855855            if ( ! defined( 'WPGMP_VERSION' ) )
    856             define( 'WPGMP_VERSION', '4.7.1' );
     856            define( 'WPGMP_VERSION', '4.7.2' );
    857857           
    858858            if ( ! defined( 'WPGMP_FOLDER' ) )
Note: See TracChangeset for help on using the changeset viewer.