WordPress.org
Get WordPress

Plugin Directory

Changeset 3315005


Ignore:
Timestamp:
06/20/2025 06:03:21 AM (8 months ago)
Author:
Daisycon
Message:

Daisycon woocommerce v3.0.1

  • Fixed security check in product and uninstall pages
Location:
daisycon-woocommerce-pixel/trunk
Files:
1 deleted
7 edited

Legend:

Unmodified
Added
Removed

  • daisycon-woocommerce-pixel/trunk/README.txt

    r3313701 r3315005  
    33Donate link: https://www.daisycon.com
    44Tags: Daisycon, Daisycon WooCommerce Pixel, WooCommerce, Pixel, Conversion Pixel
    5 Version:           3.0.0
     5Version:           3.0.1
    66Author:            Daisycon
    77Author URI:        https://www.daisycon.com
    … …  
    7272== Changelog ==
    7373
     74= 3.0.1 =
     75* Fixed security check in product and uninstall pages
     76
    7477= 3.0.0 =
    75 * Ran entire plugin through the wordpress plugin-check
    76 * Added support for storage of gclid and dci 
     78* Ran entire plugin through the Wordpress plugin-check
     79* Added support for storage of gclid and dci
    7780
    7881= 2.3.0 =

  • daisycon-woocommerce-pixel/trunk/admin/class-daisycon-woocommerce-admin.php

    r3313701 r3315005  
    101101    public function daisycon_add_custom_cc_option()
    102102    {
     103        $nonce = wp_create_nonce('dc_save_custom_cc_nonce');
     104
    103105        echo '<div class="options_group">';
    104             woocommerce_wp_text_input([
    105                 'id'          => '_daisycon_cc',
    106                 'label'       => 'Daisycon Pixel Commission Code',
    107                 'desc_tip'    => 'true',
    108                 'description' => 'Enter the Daisycon Pixel Commission Code here.',
    109             ]);
     106        woocommerce_wp_text_input([
     107            'id'    => 'dc_save_custom_cc_nonce',
     108            'type'  => 'hidden',
     109            'value' => $nonce,
     110        ]);
     111        woocommerce_wp_text_input([
     112            'id'          => '_daisycon_cc',
     113            'label'       => 'Daisycon Pixel Commission Code',
     114            'desc_tip'    => 'true',
     115            'description' => 'Enter the Daisycon Pixel Commission Code here.',
     116        ]);
    110117        echo '</div>';
    111118    }
    … …  
    120127    public function daisycon_save_custom_cc_option($product_id)
    121128    {
    122         $nonce = true === isset($_POST['dc_submit_media_nonce'])
    123             ? sanitize_text_field(wp_unslash($_POST['dc_submit_media_nonce']))
     129        $nonce = true === isset($_POST['dc_save_custom_cc_nonce'])
     130            ? sanitize_text_field(wp_unslash($_POST['dc_save_custom_cc_nonce']))
    124131            : null;
    125132
    126         if (false === wp_verify_nonce($nonce, 'dc_submit_media_action')) {
    127             wp_die('Security check failed');
     133        if (false === wp_verify_nonce($nonce, 'dc_save_custom_cc_nonce')) {
     134            wp_die('Security check failed (1)');
    128135        }
    129136
    … …  
    144151    public function daisycon_cc_quick_edit()
    145152    {
     153        $nonce = wp_create_nonce('dc_save_custom_cc_nonce');
    146154        echo sprintf(
    147155            '<div class="inline-edit-group daisycon_cc_quick_edit">
    … …  
    149157                        <span class="title">%s</span>
    150158                        <span class="input-text-wrap">
     159                            <input type="hidden" name="dc_save_custom_cc_nonce" value="' . esc_attr($nonce) . '"/>
    151160                            <input type="text" name="daisycon_cc" class="text daisycon_cc_quick_edit_input" value="test" />
    152161                        </span>
    … …  
    162171    public function daisycon_cc_quick_edit_save()
    163172    {
    164         $nonce = true === isset($_POST['dc_submit_media_nonce'])
    165             ? sanitize_text_field(wp_unslash($_POST['dc_submit_media_nonce']))
     173        $nonce = true === isset($_POST['dc_save_custom_cc_nonce'])
     174            ? sanitize_text_field(wp_unslash($_POST['dc_save_custom_cc_nonce']))
    166175            : null;
    167176
    168         if (false === wp_verify_nonce($nonce, 'dc_submit_media_action')) {
    169             wp_die('Security check failed');
     177        if (false === wp_verify_nonce($nonce, 'dc_save_custom_cc_nonce')) {
     178            wp_die('Security check failed (2)');
    170179        }
    171180
    … …  
    187196    {
    188197        if ($column == 'name') {
    189             echo '<div class="hidden daisycon_cc_inline"'
    190                 . ' id="daisycon_cc_inline_' . esc_attr($post_id) .'"'
    191                 . '>'
     198            echo '<div class="hidden daisycon_cc_inline" id="daisycon_cc_inline_' . esc_attr($post_id) .'"' . '>'
    192199                . esc_html(get_post_meta($post_id, '_daisycon_cc', true))
    193200                . '</div>';

  • daisycon-woocommerce-pixel/trunk/admin/partials/daisycon-woocommerce-admin-deactivate.php

    r3313701 r3315005  
    88    $pluginPageUrl = $pluginPage. '?action=deactivate&plugin=' . urlencode( $pluginSlug ).'&option=1';
    99    $nonceUrl = wp_nonce_url( $pluginPageUrl, 'deactivate-plugin_' . $pluginSlug );
     10    $nonce = wp_create_nonce('dc_deactivate_nonce');
    1011?>
    1112<form method="POST" action="<?php echo esc_url( $nonceUrl ); ?>">
     13    <input type="hidden" name="dc_deactivate_nonce" value="<?php echo esc_attr($nonce); ?>"/>
    1214    <div class="dc-core-container__notice dc-core-container__notice--info">
    1315        <p>We're sorry to see you go! Please let us know why you're removing our affiliate marketing plugin so we can manage your settings accordingly. Choose an option below:</p>

  • daisycon-woocommerce-pixel/trunk/daisycon-woocommerce.php

    r3313701 r3315005  
    1313 * Description:       This plugin will automatically add the Daisycon Pixel to the WooCommerce success page
    1414 *
    15  * Version:           3.0.0
     15 * Version:           3.0.1
    1616 * Author:            Daisycon
    1717 * Author URI:        https://www.daisycon.com
    … …  
    5353 * Currently plugin version.
    5454 */
    55 const DAISYCON_PLUGIN_VERSION = '3.0.0';
     55const DAISYCON_PLUGIN_VERSION = '3.0.1';
    5656
    5757/**

  • daisycon-woocommerce-pixel/trunk/includes/class-daisycon-woocommerce-activator.php

    r3313701 r3315005  
    171171    {
    172172        if (true === isset($_SERVER['REQUEST_METHOD']) &&  $_SERVER['REQUEST_METHOD'] === 'POST') {
    173             if (false === isset($_POST['dc_submit_media_nonce'])) {
    174                 wp_die('Security check failed');
     173            if (false === isset($_POST['dc_deactivate_nonce'])) {
     174                wp_die('Security check failed (3)');
    175175            }
    176176
    177             $nonce = sanitize_text_field(wp_unslash($_POST['dc_submit_media_nonce']));
     177            $nonce = sanitize_text_field(wp_unslash($_POST['dc_deactivate_nonce']));
    178178
    179             if (false === wp_verify_nonce($nonce, 'dc_submit_media_action')) {
    180                 wp_die('Security check failed');
     179            if (false === wp_verify_nonce($nonce, 'dc_deactivate_nonce')) {
     180                wp_die('Security check failed (4)');
    181181            }
    182182        }

  • daisycon-woocommerce-pixel/trunk/includes/class-daisycon-woocommerce.php

    r3313701 r3315005  
    7272        $this->version = true === defined('DAISYCON_PLUGIN_VERSION')
    7373            ? DAISYCON_PLUGIN_VERSION
    74             : '3.0.0';
     74            : '3.0.1';
    7575
    7676        $this->plugin_name = 'daisycon-woocommerce';
    … …  
    165165        $this->loader->add_action('wp_ajax_load_matching_domains', $campaignService, 'loadMatchingDomains');
    166166
    167         $commonService = new Daisycon_Common_Service();
    168         $this->loader->add_action('wp_ajax_daisycon_get_setting_value', $commonService, 'getSettingsValue');
    169 
    170167        $integrationService = new Daisycon_Integration_Service();
    171168        $this->loader->add_action('wp_ajax_deactivate_store', $integrationService, 'deactivateStore');

  • daisycon-woocommerce-pixel/trunk/services/class-daisycon-campaign-service.php

    r3313701 r3315005  
    6666
    6767        if (false === wp_verify_nonce($nonce, 'load_matching_domains_nonce')) {
    68             wp_die('Security check failed');
     68            wp_die('Security check failed (5)');
    6969        }
    7070
Note: See TracChangeset for help on using the changeset viewer.