Changeset 3300732

Timestamp:

05/26/2025 01:10:06 PM (9 months ago)

Author:

soft8soft

Message:

New version 4.9.5

Location:

verge3d/trunk

Files:

• readme.txt (modified) (2 diffs)
• verge3d.php (modified) (1 diff)
• woo_product.php (modified) (1 diff)

verge3d/trunk/readme.txt

@@ -5 +5 @@
 Tested up to: 6.7.2
 Requires PHP: 7.0
-Stable tag: 4.9.4
+Stable tag: 4.9.5
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -69 +69 @@
 == Changelog ==
 
+= 4.9.5 =
+* Forbid optaining info for private/password-protected WooCommerce products.
+
 = 4.9.3 =
 * Fixed possible security issues.

verge3d/trunk/verge3d.php

@@ -4 +4 @@
 Plugin URI: https://www.soft8soft.com/verge3d
 Description: Verge3D is the most artist-friendly toolkit for creating interactive web-based experiences. It can be used to create product configurators, 3D presentations, online stores, e-learning apps, 3D portfolios, browser games and more.
-Version: 4.9.4
+Version: 4.9.5
 Author: Soft8Soft LLC
 Author URI: https://www.soft8soft.com

verge3d/trunk/woo_product.php

@@ -219 +219 @@
 function v3d_get_product_info() {
 
-    $product = wc_get_product($_REQUEST['product_id']);
+    $product_id = $_REQUEST['product_id'];
+    $product = wc_get_product($product_id);
 
     $response = array();
 
-    if (!empty($product)) {
+    // forbid obtainting info for private / password-protected products
+    if (!empty($product) && $product->is_visible() && !post_password_required($product_id)) {
         $response['status'] = 'ok';