WordPress.org
Get WordPress

Plugin Directory

Changeset 3424171


Ignore:
Timestamp:
12/20/2025 11:35:36 AM (4 weeks ago)
Author:
themepoints
Message:
  • Fix Security Issue.
  • Added New Options.
  • Added New CSS.
Location:
team-showcase/trunk
Files:
14 edited

Legend:

Unmodified
Added
Removed

  • team-showcase/trunk/admin/team-manager-free-helps.php

    r3335114 r3424171  
    33        exit;
    44    }
     5
     6    /*
     7    * @Author       Themepoints
     8    * Copyright:    2016 Themepoints
     9    * Version : 3.0.0
     10    */
    511?>
    612

  • team-showcase/trunk/admin/team-manager-free-meta-boxes.php

    r3355106 r3424171  
    88    * @Author       Themepoints
    99    * Copyright:    2016 Themepoints
    10     * Version : 2.8
     10    * Version : 3.0.0
    1111    */
    1212
    … …  
    6060        $client_website          = get_post_meta($post->ID, 'client_website', true);
    6161        $client_shortdescription = get_post_meta($post->ID, 'client_shortdescription', true);
     62
     63        // Add nonce field for security
     64        wp_nonce_field( 'team_manager_free_custom_meta_save', 'team_manager_free_custom_meta_nonce' );
    6265        ?>
    6366
    … …  
    97100    # Save Options Meta Box Function
    98101    function team_manager_free_custom_inner_custom_boxes_save($post_id){
     102
     103        // Verify nonce
     104        if ( ! isset( $_POST['team_manager_free_custom_meta_nonce'] ) ||
     105             ! wp_verify_nonce( $_POST['team_manager_free_custom_meta_nonce'], 'team_manager_free_custom_meta_save' ) ) {
     106            return;
     107        }
    99108
    100109        // Check if autosave

  • team-showcase/trunk/admin/team-manager-free-post-type.php

    r3355106 r3424171  
    33    * @Author       Themepoints
    44    * Copyright:    Themepoints
    5     * Version : 2.9
     5    * Version : 3.0.0
    66    */
    77
    … …  
    28902890        }
    28912891
    2892         # Multicolor Meta Box
    2893 
    28942892        // Checks for input and sanitizes/saves if needed
    28952893        if ( isset( $_POST[ 'team_manager_mbgcolor_color' ] ) ) {

  • team-showcase/trunk/includes/shortcodes/team-shortcode.php

    r3355106 r3424171  
    9393        $team_manager_free_website_font_color     = get_post_meta( $post_id, 'team_manager_free_website_font_color', true );
    9494        $team_manager_free_website_hover_color    = get_post_meta( $post_id, 'team_manager_free_website_hover_color', true );
    95        
    9695        $team_manager_free_image_hide             = get_post_meta( $post_id, 'team_manager_free_image_hide', true );
    9796        $team_manager_free_image_zoom             = get_post_meta( $post_id, 'team_manager_free_image_zoom', true );
    … …  
    185184        $tmf_query = new WP_Query( $args );
    186185
     186
     187        $allowed_themes = array(
     188            'theme1' => 'theme-1.php',
     189            'theme2' => 'theme-2.php',
     190            'theme3' => 'theme-3.php',
     191            'theme4' => 'theme-4.php',
     192        );
     193
     194        if ( ! isset( $allowed_themes[ $team_manager_free_post_themes ] ) ) {
     195            $team_manager_free_post_themes = 'theme1';
     196        }
     197
    187198        ob_start();
    188         switch ( $team_manager_free_post_themes ) {
    189             case 'theme1':
    190 
    191                 include __DIR__ . '/template/theme-1.php';
    192 
    193                 break;
    194             case 'theme2':
    195 
    196                 include __DIR__ . '/template/theme-2.php';
    197 
    198                 break;
    199             case 'theme3':
    200 
    201                 include __DIR__ . '/template/theme-3.php';
    202            
    203                 break;
    204             case 'theme4':
    205 
    206                 include __DIR__ . '/template/theme-4.php';
    207 
    208             break;
    209         }
     199        include __DIR__ . '/template/' . $allowed_themes[ $team_manager_free_post_themes ];
    210200        return ob_get_clean();
     201
    211202    }
    212203    add_shortcode( 'tmfshortcode', 'team_manager_free_register_shortcode' );

  • team-showcase/trunk/includes/shortcodes/template/popup-style-one.php

    r3355106 r3424171  
    11<?php
    22
    3 if ( ! defined( 'ABSPATH' ) ) {
    4     exit; // Exit if accessed directly.
    5 }
     3      if ( ! defined( 'ABSPATH' ) ) {
     4            exit; // Exit if accessed directly.
     5      }
    66
    77?>

  • team-showcase/trunk/includes/shortcodes/template/popup-style-two.php

    r3355106 r3424171  
    22
    33if ( ! defined( 'ABSPATH' ) ) {
    4     exit; // Exit if accessed directly.
     4      exit; // Exit if accessed directly.
    55}
    66

  • team-showcase/trunk/includes/shortcodes/template/theme-1.php

    r3355106 r3424171  
    3030            color: <?php echo esc_attr( $team_manager_free_header_font_color); ?>;
    3131            font-size: <?php echo esc_attr( $team_manager_free_header_font_size); ?>px;
    32             font-style: <?php echo $team_manager_name_font_style;?>;
     32            font-style: <?php echo esc_attr( $team_manager_name_font_style); ?>;
    3333            text-transform: <?php echo esc_attr( $team_manager_name_font_case); ?>;
    3434            box-shadow: none;
    … …  
    4343            color:<?php echo esc_attr( $team_manager_free_designation_font_color); ?>;
    4444            font-size:<?php echo esc_attr( $team_manager_free_designation_font_size); ?>px;
    45             font-style: <?php echo $team_manager_desig_font_style;?>;
    46             text-transform: <?php echo $team_manager_desig_font_case;?>;
     45            font-style: <?php echo esc_attr( $team_manager_desig_font_style); ?>;
     46            text-transform: <?php echo esc_attr( $team_manager_desig_font_case); ?>;
    4747        }
    4848        .team-manager-free-main-area-<?php echo esc_attr( $post_id ); ?> .team-manager-free-items-profiles {
    … …  
    6868        /* Zoom In */
    6969        <?php if ($team_manager_free_image_zoom == '2') : ?>
    70             .team-manager-free-main-area-<?php echo esc_attr($post_id); ?> .team-manager-free-items:hover .team-manager-free-items-pic img {
     70            .team-manager-free-main-area-<?php echo esc_attr( $post_id ); ?> .team-manager-free-items:hover .team-manager-free-items-pic img {
    7171                transform: scale(1.10);
    7272            }
    … …  
    159159        .team-manager-free-main-area-<?php echo esc_attr( $post_id ); ?> .teamshowcasefree-col-xs-6 {
    160160            float: left;
    161             margin-bottom: <?php echo $team_manager_free_margin_bottom;?>px !important;
     161            margin-bottom: <?php echo esc_attr( $team_manager_free_margin_bottom ); ?>px !important;
    162162            min-height: 1px;
    163             padding-left: <?php echo $team_manager_free_padding_left;?>px !important;
    164             padding-right: <?php echo $team_manager_free_padding_left;?>px !important;
     163            padding-left: <?php echo esc_attr( $team_manager_free_padding_left ); ?>px !important;
     164            padding-right: <?php echo esc_attr( $team_manager_free_padding_left ); ?>px !important;
    165165            position: relative;
    166166        }
    … …  
    188188                $team_manager_free_client_address          = get_post_meta(get_the_ID(), 'company_address', true);
    189189                $team_manager_free_client_website          = get_post_meta(get_the_ID(), 'client_website', true);
    190                
    191                 $tpteamfree_social_iconbox_repeat          = get_post_meta( get_the_ID(), 'tpteamfree_social_iconbox_repeat', true);
     190                $tpteamfree_social_iconbox_repeat          = get_post_meta(get_the_ID(), 'tpteamfree_social_iconbox_repeat', true);
    192191                $random_team_id                            = rand();
    193192                ?>

  • team-showcase/trunk/includes/shortcodes/template/theme-2.php

    r3355106 r3424171  
    9191            color: <?php echo esc_attr( $team_manager_free_header_font_color); ?>;
    9292            font-size: <?php echo esc_attr( $team_manager_free_header_font_size); ?>px;
    93             font-style: <?php echo $team_manager_name_font_style;?>;
     93            font-style: <?php echo esc_attr( $team_manager_name_font_style); ?>;
    9494            text-transform: <?php echo esc_attr( $team_manager_name_font_case); ?>;
    9595            letter-spacing: 1px;
    … …  
    107107            color:<?php echo esc_attr( $team_manager_free_designation_font_color); ?>;
    108108            font-size:<?php echo esc_attr( $team_manager_free_designation_font_size); ?>px;
    109             font-style: <?php echo $team_manager_desig_font_style;?>;
    110             text-transform: <?php echo $team_manager_desig_font_case;?>;
     109            font-style: <?php echo esc_attr( $team_manager_desig_font_style); ?>;
     110            text-transform: <?php echo esc_attr( $team_manager_desig_font_case); ?>;
    111111            letter-spacing: 0.5px;
    112112        }
    … …  
    145145        .team-manager-free-main-area-<?php echo esc_attr( $post_id ); ?> .teamshowcasefree-col-xs-6 {
    146146            float: left;
    147             margin-bottom: <?php echo $team_manager_free_margin_bottom;?>px !important;
     147            margin-bottom: <?php echo esc_attr( $team_manager_free_margin_bottom); ?>px !important;
    148148            min-height: 1px;
    149             padding-left: <?php echo $team_manager_free_padding_left;?>px !important;
    150             padding-right: <?php echo $team_manager_free_padding_left;?>px !important;
     149            padding-left: <?php echo esc_attr( $team_manager_free_padding_left); ?>px !important;
     150            padding-right: <?php echo esc_attr( $team_manager_free_padding_left); ?>px !important;
    151151            position: relative;
    152152        }
    … …  
    173173                $team_manager_free_client_address          = get_post_meta(get_the_ID(), 'company_address', true);
    174174                $team_manager_free_client_website          = get_post_meta(get_the_ID(), 'client_website', true);
    175                
    176                 $tpteamfree_social_iconbox_repeat          = get_post_meta( get_the_ID(), 'tpteamfree_social_iconbox_repeat', true);
     175                $tpteamfree_social_iconbox_repeat          = get_post_meta(get_the_ID(), 'tpteamfree_social_iconbox_repeat', true);
    177176                $random_team_id                            = rand();
    178177                ?>
    … …  
    234233        </div>
    235234    </div>
    236    

  • team-showcase/trunk/includes/shortcodes/template/theme-3.php

    r3355106 r3424171  
    7474            color: <?php echo esc_attr( $team_manager_free_header_font_color); ?>;
    7575            font-size: <?php echo esc_attr( $team_manager_free_header_font_size); ?>px;
    76             font-style: <?php echo $team_manager_name_font_style;?>;
     76            font-style: <?php echo esc_attr( $team_manager_name_font_style); ?>;
    7777            text-transform: <?php echo esc_attr( $team_manager_name_font_case); ?>;
    7878            font-weight: 600;
    … …  
    9393            color:<?php echo esc_attr( $team_manager_free_designation_font_color); ?>;
    9494            font-size:<?php echo esc_attr( $team_manager_free_designation_font_size); ?>px;
    95             font-style: <?php echo $team_manager_desig_font_style;?>;
    96             text-transform: <?php echo $team_manager_desig_font_case;?>;
     95            font-style: <?php echo esc_attr( $team_manager_desig_font_style); ?>;
     96            text-transform: <?php echo esc_attr( $team_manager_desig_font_case); ?>;
    9797        }
    9898        .team-manager-free-main-area-<?php echo esc_attr( $post_id ); ?> .team-manager-free-items-social{
    … …  
    152152        .team-manager-free-main-area-<?php echo esc_attr( $post_id ); ?> .teamshowcasefree-col-xs-6 {
    153153            float: left;
    154             margin-bottom: <?php echo $team_manager_free_margin_bottom;?>px !important;
     154            margin-bottom: <?php echo esc_attr( $team_manager_free_margin_bottom); ?>px !important;
    155155            min-height: 1px;
    156             padding-left: <?php echo $team_manager_free_padding_left;?>px !important;
    157             padding-right: <?php echo $team_manager_free_padding_left;?>px !important;
     156            padding-left: <?php echo esc_attr( $team_manager_free_padding_left); ?>px !important;
     157            padding-right: <?php echo esc_attr( $team_manager_free_padding_left); ?>px !important;
    158158            position: relative;
    159159        }
    … …  
    179179                $team_manager_free_client_address          = get_post_meta(get_the_ID(), 'company_address', true);
    180180                $team_manager_free_client_website          = get_post_meta(get_the_ID(), 'client_website', true);
    181                
    182                 $tpteamfree_social_iconbox_repeat          = get_post_meta( get_the_ID(), 'tpteamfree_social_iconbox_repeat', true);
     181                $tpteamfree_social_iconbox_repeat          = get_post_meta(get_the_ID(), 'tpteamfree_social_iconbox_repeat', true);
    183182                $random_team_id                            = rand();
    184183                ?>
    … …  
    235234        </div>
    236235    </div>
    237    

  • team-showcase/trunk/includes/shortcodes/template/theme-4.php

    r3355106 r3424171  
    6565            color: <?php echo esc_attr( $team_manager_free_designation_font_color); ?>;
    6666            font-size: <?php echo esc_attr( $team_manager_free_designation_font_size); ?>px;
    67             font-style: <?php echo $team_manager_desig_font_style;?>;
    68             text-transform: <?php echo $team_manager_desig_font_case;?>;
     67            font-style: <?php echo esc_attr( $team_manager_desig_font_style); ?>;
     68            text-transform: <?php echo esc_attr( $team_manager_desig_font_case); ?>;
    6969            margin-bottom: 10px;
    7070        }
    … …  
    128128        .team-manager-free-main-area-<?php echo esc_attr( $post_id ); ?> .teamshowcasefree-col-xs-6 {
    129129            float: left;
    130             margin-bottom: <?php echo $team_manager_free_margin_bottom;?>px !important;
     130            margin-bottom: <?php echo esc_attr( $team_manager_free_margin_bottom); ?>px !important;
    131131            min-height: 1px;
    132             padding-left: <?php echo $team_manager_free_padding_left;?>px !important;
    133             padding-right: <?php echo $team_manager_free_padding_left;?>px !important;
     132            padding-left: <?php echo esc_attr( $team_manager_free_padding_left); ?>px !important;
     133            padding-right: <?php echo esc_attr( $team_manager_free_padding_left); ?>px !important;
    134134            position: relative;
    135135        }
    … …  
    165165                $team_manager_free_social_youtube          = get_post_meta(get_the_ID(), 'social_youtube', true);
    166166                $team_manager_free_social_skype            = get_post_meta(get_the_ID(), 'social_skype', true);
    167                
    168                 $tpteamfree_social_iconbox_repeat          = get_post_meta( get_the_ID(), 'tpteamfree_social_iconbox_repeat', true);
     167                $tpteamfree_social_iconbox_repeat          = get_post_meta(get_the_ID(), 'tpteamfree_social_iconbox_repeat', true);
    169168                $random_team_id                            = rand();
    170169                ?>

  • team-showcase/trunk/includes/team-manager-free-activator.php

    r3355106 r3424171  
    66    This class defines all code necessary to run during the plugin's activaton.
    77
    8     @since      1.0.0
     8    @since      3.0.0
    99    @package    Team_Manager_Free
    1010    @subpackage Team_Manager_Free/includes

  • team-showcase/trunk/includes/team-manager-free-deactivator.php

    r3355106 r3424171  
    66    This class defines all code necessary to run during the plugin's activaton.
    77
    8     @since      1.0.0
     8    @since      3.0.0
    99    @package    Team_Manager_Free
    1010    @subpackage Team_Manager_Free/includes

  • team-showcase/trunk/readme.txt

    r3355106 r3424171  
    44Tags: team, team members, staff, team grid, team showcase, employee directory, team slider, team carousel, team member display, responsive team layout
    55Requires at least: 4.0
    6 Tested up to: 6.8.2
    7 Stable tag: 2.9
     6Tested up to: 6.9
     7Stable tag: 3.0.0
    88License: GPLv2 or later
    99License URI: http://www.gnu.org/licenses/gpl-2.0.html
    … …  
    159159== Changelog ==
    160160
     161= 3.0.0 =
     162* Fix Security Issue.
     163* Added New Options.
     164* Added New CSS.
     165
    161166= 2.9 =
    162167* Fix Escaping Issue.

  • team-showcase/trunk/team-manager-free.php

    r3355106 r3424171  
    44    Plugin URI: https://themepoints.com/teamshowcase/
    55    Description: Team Showcase is a WordPress plugin that allows you to easily create and manage teams. You can display single teams as multiple responsive columns, you can also showcase all teams in various styles.
    6     Version: 2.9
     6    Version: 3.0.0
    77    Author: Themepoints
    88    Author URI: https://themepoints.com
    … …  
    2020    define( 'TEAM_MANAGER_PLUGIN_NAME', 'Team Showcase' );
    2121    define( 'TEAM_MANAGER_PLUGIN_SLUG', 'team-manager-free' );
    22     define( 'TEAM_MANAGER_FREE_VERSION', '2.9' );
     22    define( 'TEAM_MANAGER_FREE_VERSION', '3.0.0' );
    2323
    2424    // Define paths for the plugin
Note: See TracChangeset for help on using the changeset viewer.