Changeset 3293154

Timestamp:

05/14/2025 09:54:17 AM (9 months ago)

Author:

chat2

Message:

Update Work

Location:

chat2/tags/3.6.3

Files:

• admin/field-configiguration-admin.php (modified) (3 diffs)
• chat2.php (modified) (1 diff)
• readme.txt (modified) (1 diff)
• views/old-widget.php (modified) (1 diff)
• views/widget.php (modified) (1 diff)

chat2/tags/3.6.3/admin/field-configiguration-admin.php

@@ -35 +35 @@
     
     public function save_options(){
-        $params = $_POST;
+        $params = array_map('sanitize_text_field', $_POST); //$params = $_POST;
         
         if(isset($params) && count($params) > 0 &&
@@ -76 +76 @@
                                         $content = get_option('chat-field-settings-var-content') ? get_option('chat-field-settings-var-content') : '' ;
                                         ?>
-                                    <input type="text" value="<?php echo $content; ?>" id="chat-field-settings-var" name="chat-field-settings-var" />
+                                    <input type="text" value="<?php echo esc_attr($content); ?>" id="chat-field-settings-var" name="chat-field-settings-var" />
                                 </td>
                                 </tr>
@@ -85 +85 @@
                                         $old_style = get_option('chat-field-settings-enable-old-widget-style') ? get_option('chat-field-settings-enable-old-widget-style') : false;
                                         ?>
-                                    <input type="checkbox" name="enable-old-widget-style" id="enable-old-widget-style" <?php echo ($old_style ? 'checked="checked"' : '') ?>/>
+                                    <input type="checkbox" name="enable-old-widget-style" id="enable-old-widget-style" <?php echo ($old_style ? esc_attr('checked="checked"') : '') ?>/>
                                 </td>
                                 </tr>                                

chat2/tags/3.6.3/chat2.php

@@ -5 +5 @@
 * Description: This plugin adds Chat2 live chat to your wordpress website.
 * Version: 3.6.3
-* Tested up to: 6.7.2
+* Tested up to: 6.8.1
 * Author: Chat2
 * Author URI: http://chat2.com

chat2/tags/3.6.3/readme.txt

@@ -3 +3 @@
 Tags: Chat2, Live Chat
 Requires at least: 3.2.0
-Tested up to: 6.7.2
+Tested up to: 6.8.1
 Stable tag: 3.6.3
 License: GPLv2 or later 

chat2/tags/3.6.3/views/old-widget.php

@@ -34 +34 @@
                         var refferer = (document.referrer) ? encodeURIComponent(document.referrer.substr(document.referrer.indexOf('://')+1)) : '';
                         var location = (document.location) ? encodeURIComponent(window.location.href.substring(window.location.protocol.length)) : '';
-                        po.src = '//<?php echo $subdomain;?>.chat2.com/eng/chat/getstatus/(click)/internal/(position)/bottom_right/(ma)/br/(check_operator_messages)/true/(top)/350/(units)/pixels/(leaveamessage)/true?r='+refferer+'&l='+location;
+                        po.src = '//<?php echo esc_js($subdomain); ?>.chat2.com/eng/chat/getstatus/(click)/internal/(position)/bottom_right/(ma)/br/(check_operator_messages)/true/(top)/350/(units)/pixels/(leaveamessage)/true?r='+refferer+'&l='+location;
                         var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(po, s);
                         })();

chat2/tags/3.6.3/views/widget.php

@@ -29 +29 @@
                 ?>
                     <script>var CHAT2_API = CHAT2_API||{};
-                    CHAT2_API.args = {mode:'widget',chat2_base_url:'//<?php echo  $subdomain;?>.chat2.com/',wheight:450,wwidth:350,pheight:520,pwidth:500,leaveamessage:true,check_messages:false,lang:'eng/'};
+                    CHAT2_API.args = {mode:'widget',chat2_base_url:'//<?php echo esc_js($subdomain); ?>.chat2.com/',wheight:450,wwidth:350,pheight:520,pwidth:500,leaveamessage:true,check_messages:false,lang:'eng/'};
                     (function() {
                     var po = document.createElement('script'); po.type = 'text/javascript'; po.setAttribute('crossorigin','anonymous'); po.async = true;
-                    var date = new Date();po.src = '//<?php echo  $subdomain;?>.chat2.com/design/defaulttheme/js/widgetv2/index.js?'+(""+date.getFullYear() + date.getMonth() + date.getDate());
+                    var date = new Date();po.src = '//<?php echo esc_js($subdomain); ?>.chat2.com/design/defaulttheme/js/widgetv2/index.js?'+(""+date.getFullYear() + date.getMonth() + date.getDate());
                     var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(po, s);
                     })();