Changeset 3328412

Timestamp:

07/15/2025 05:27:34 PM (9 months ago)

Author:

plance

Message:

change: labels; fix: security

Location:

my-text-shortcodes/trunk

Files:

• includes/class-admin-menu.php (modified) (3 diffs)
• includes/class-controller-form.php (modified) (2 diffs)
• includes/class-controller-table.php (modified) (1 diff)
• readme.txt (modified) (1 diff)

my-text-shortcodes/trunk/includes/class-admin-menu.php

@@ -33 +33 @@
     public function admin_menu() {
         $hook_list = add_menu_page(
-            __( 'List shortcodes', 'my-text-shortcodes' ),
-            __( 'My shortcodes', 'my-text-shortcodes' ),
+            __( 'List Shortcodes', 'my-text-shortcodes' ),
+            __( 'My Shortcodes', 'my-text-shortcodes' ),
             'manage_options',
             Controller_Table::SLUG,
@@ -42 +42 @@
         add_submenu_page(
             Controller_Table::SLUG,
-            __( 'List shortcodes', 'my-text-shortcodes' ),
-            __( 'List shortcodes', 'my-text-shortcodes' ),
+            __( 'List Shortcodes', 'my-text-shortcodes' ),
+            __( 'List Shortcodes', 'my-text-shortcodes' ),
             'manage_options',
             Controller_Table::SLUG,
@@ -51 +51 @@
         $hook_form = add_submenu_page(
             Controller_Table::SLUG,
-            __( 'Creating shortcode', 'my-text-shortcodes' ),
-            __( 'Create shortcode', 'my-text-shortcodes' ),
+            __( 'Creating Shortcode', 'my-text-shortcodes' ),
+            __( 'Create Shortcode', 'my-text-shortcodes' ),
             'manage_options',
             Controller_Form::SLUG,

my-text-shortcodes/trunk/includes/class-controller-form.php

@@ -47 +47 @@
 
         if ( $is_post_request ) {
+            $input_wpnonce = filter_input( INPUT_POST, '_wpnonce', FILTER_CALLBACK, array( 'options' => 'sanitize_text_field' ) );
+            if ( ! wp_verify_nonce( $input_wpnonce, SECURITY ) ) {
+                Flash::redirect( add_query_arg( array( 'page' => Controller_Table::SLUG ), admin_url( 'admin.php' ) ), __( 'Wrong `wpnonce` value!', 'my-maps' ), false );
+            }
+
             $input = filter_input( INPUT_POST, 'shortcode', FILTER_DEFAULT, FILTER_REQUIRE_ARRAY );
             $input = filter_var_array(
@@ -147 +152 @@
 
         if ( $shortcode_id ) {
-            $form_title                 = __( 'Editing shortcode', 'my-text-shortcodes' );
+            $form_title                 = __( 'Editing Shortcode', 'my-text-shortcodes' );
             $query_args['shortcode_id'] = $shortcode_id;
         } else {
-            $form_title = __( 'Creating shortcode', 'my-text-shortcodes' );
+            $form_title = __( 'Creating Shortcode', 'my-text-shortcodes' );
         }
 

my-text-shortcodes/trunk/includes/class-controller-table.php

@@ -110 +110 @@
         <div class="wrap">
             <h2>
-                <?php esc_html_e( 'List shortcodes', 'my-text-shortcodes' ); ?>
+                <?php esc_html_e( 'List Shortcodes', 'my-text-shortcodes' ); ?>
                 <a href="<?php echo esc_url( add_query_arg( array( 'page' => Controller_Form::SLUG ) ) ); ?>" class="page-title-action">
-                    <?php esc_html_e( 'Add shortcode', 'my-text-shortcodes' ); ?>
+                    <?php esc_html_e( 'Add Shortcode', 'my-text-shortcodes' ); ?>
                 </a>
             </h2>

my-text-shortcodes/trunk/readme.txt

@@ -29 +29 @@
 
 == Changelog ==
+= 1.1.1 =
+* Change labels.
+* Fix security.
+
 = 1.1.0 =
 * Complete code refactoring.