WordPress.org
Get WordPress

Plugin Directory

Changeset 3436352


Ignore:
Timestamp:
01/10/2026 12:25:28 AM (3 months ago)
Author:
pickplugins
Message:

version update

Location:
mail-picker/trunk
Files:
10 edited

Legend:

Unmodified
Added
Removed

  • mail-picker/trunk/includes/classes/class-mailpicker-subscribers.php

    r3432070 r3436352  
    421421    {
    422422
    423         if (preg_match('/mail-track-open/', wp_unslash($_SERVER['REQUEST_URI']))) {
    424 
    425             $parts = isset($_SERVER['REQUEST_URI']) ? basename(esc_url_raw(wp_unslash($_SERVER['REQUEST_URI']))) : '';
     423        if (preg_match('/mail-track-open/', sanitize_text_field(wp_unslash($_SERVER['REQUEST_URI'])))) {
     424
     425            $parts = isset($_SERVER['REQUEST_URI']) ? basename(esc_url_raw(sanitize_text_field(wp_unslash($_SERVER['REQUEST_URI'])))) : '';
    426426
    427427

  • mail-picker/trunk/includes/classes/class-manage-subscriber.php

    r3432070 r3436352  
    268268
    269269
    270             echo json_encode($response);
     270            echo wp_json_encode($response, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
    271271            exit(0);
    272272        }
    … …  
    350350
    351351
    352             echo json_encode($response);
     352            echo wp_json_encode($response, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
    353353            exit(0);
    354354        }
    … …  
    424424
    425425
    426             echo json_encode($response);
     426            echo wp_json_encode($response, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
    427427            exit(0);
    428428        }
    … …  
    494494
    495495
    496             echo json_encode($response);
     496            echo wp_json_encode($response, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
    497497            exit(0);
    498498        }

  • mail-picker/trunk/includes/classes/class-post-meta.php

    r3432070 r3436352  
    782782                <script>
    783783                    jQuery(document).ready(function($){
    784                         layout_elements_option = <?php echo json_encode($layout_elements_option); ?>;
     784                        layout_elements_option = <?php echo wp_json_encode($layout_elements_option, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE); ?>;
    785785
    786786                        $(document).on('click','.layout-tags .element_index',function(){

  • mail-picker/trunk/includes/functions.php

    r3432070 r3436352  
    8686
    8787
    88 
    89 
    90     echo json_encode($response);
     88    echo wp_json_encode($response, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
    9189
    9290    die();

  • mail-picker/trunk/includes/mail-picker-rest-end-points.php

    r3432070 r3436352  
    132132    {
    133133
    134         if (isset($_SERVER['REQUEST_URI']) && preg_match('/mail-track-open/',  wp_unslash($_SERVER['REQUEST_URI']) )) {
    135 
    136             $parts = isset($_SERVER['REQUEST_URI']) ? basename(esc_url_raw(wp_unslash($_SERVER['REQUEST_URI']))) : '';
     134        if (isset($_SERVER['REQUEST_URI']) && preg_match('/mail-track-open/',  sanitize_text_field(wp_unslash($_SERVER['REQUEST_URI'])) )) {
     135
     136            $parts = isset($_SERVER['REQUEST_URI']) ? basename(esc_url_raw(sanitize_text_field(wp_unslash($_SERVER['REQUEST_URI'])))) : '';
    137137            $parts = explode('-', $parts);
    138138
    … …  
    502502
    503503
    504         //echo json_encode($response);
     504        //echo wp_json_encode($response);
    505505
    506506        die(wp_json_encode($response));

  • mail-picker/trunk/includes/menu/mail_templates.php

    r3432070 r3436352  
    2424        <div class="wp-filter">
    2525            <ul class="filter-links">
    26                 <li class=""><a href="<?php echo esc_url_raw(isset($_SERVER['REQUEST_URI']) ? wp_unslash($_SERVER['REQUEST_URI']) : ''); ?>&tabs=latest" class="<?php if($tabs == 'latest') echo 'current'; ?>" aria-current="page"><?php echo esc_html__('Latest', 'mail-picker'); ?></a> </li>
    27                 <li class=""><a href="<?php echo esc_url_raw(isset($_SERVER['REQUEST_URI']) ? wp_unslash($_SERVER['REQUEST_URI']) : ''); ?>&tabs=free" class="<?php if($tabs == 'free') echo 'current'; ?>" aria-current="page"><?php echo esc_html__('Free', 'mail-picker'); ?></a> </li>
    28                 <li class=""><a href="<?php echo esc_url_raw(isset($_SERVER['REQUEST_URI']) ? wp_unslash($_SERVER['REQUEST_URI']) : ''); ?>&tabs=pro" class="<?php if($tabs == 'pro') echo 'current'; ?>" aria-current="page"><?php echo esc_html__('Premium', 'mail-picker'); ?></a> </li>
     26                <li class=""><a href="<?php echo esc_url(isset($_SERVER['REQUEST_URI']) ? wp_unslash($_SERVER['REQUEST_URI']) : ''); ?>&tabs=latest" class="<?php if($tabs == 'latest') echo 'current'; ?>" aria-current="page"><?php echo esc_html__('Latest', 'mail-picker'); ?></a> </li>
     27                <li class=""><a href="<?php echo esc_url(isset($_SERVER['REQUEST_URI']) ? wp_unslash($_SERVER['REQUEST_URI']) : ''); ?>&tabs=free" class="<?php if($tabs == 'free') echo 'current'; ?>" aria-current="page"><?php echo esc_html__('Free', 'mail-picker'); ?></a> </li>
     28                <li class=""><a href="<?php echo esc_url(isset($_SERVER['REQUEST_URI']) ? wp_unslash($_SERVER['REQUEST_URI']) : ''); ?>&tabs=pro" class="<?php if($tabs == 'pro') echo 'current'; ?>" aria-current="page"><?php echo esc_html__('Premium', 'mail-picker'); ?></a> </li>
    2929            </ul>
    3030            <form class="block-search-form">

  • mail-picker/trunk/includes/menu/settings.php

    r3432070 r3436352  
    9191<div class="wrap">
    9292    <div id="icon-tools" class="icon32"><br></div><h2><?php echo esc_html__('Mail Picker Settings', 'mail-picker')?></h2>
    93         <form  method="post" action="<?php echo esc_url_raw(str_replace( '%7E', '~', isset($_SERVER['REQUEST_URI']) ? esc_url_raw(wp_unslash($_SERVER['REQUEST_URI'])) : '')); ?>">
     93        <form  method="post" action="<?php echo esc_url(str_replace( '%7E', '~', isset($_SERVER['REQUEST_URI']) ? esc_url_raw(wp_unslash($_SERVER['REQUEST_URI'])) : '')); ?>">
    9494            <input type="hidden" name="mail_picker_hidden" value="Y">
    9595            <input type="hidden" name="tab" value="<?php echo esc_attr($current_tab); ?>">

  • mail-picker/trunk/mail-picker.php

    r3432072 r3436352  
    11<?php
    22/*
    3 Plugin Name: Mail Picker
     3Plugin Name: PickPlugins Mail Picker — Email Marketing & Newsletters
    44Plugin URI: http://pickplugins.com/item/mail-picker
    55Description: Send newsletter and build email subscriber.
    6 Version: 1.0.16
     6Version: 1.0.17
    77Text Domain: mail-picker
    88Author: PickPlugins

  • mail-picker/trunk/readme.txt

    r3432070 r3436352  
    1 === Newsletter, Email Marketing, Email Subscriber - Mail Picker ===
     1=== PickPlugins Mail Picker — Email Marketing & Newsletters ===
    22    Contributors: PickPlugins
    33    Donate link: http://pickplugins.com
    … …  
    55    Requires at least: 4.1
    66    Tested up to: 6.9
    7     Stable tag: 1.0.16
     7    Stable tag: 1.0.17
    88    License: GPLv2 or later
    99    License URI: http://www.gnu.org/licenses/gpl-2.0.html
    … …  
    113113== Changelog ==
    114114
     115= 1.0.17 =
     116* 2026-01-10 fix - Fixed sanitizing & escaping issue.
     117
    115118= 1.0.16 =
    116119* 2026-01-04 fix - Fixed sanitizing & escaping issue.

  • mail-picker/trunk/templates/mail-picker-form/mail-picker-form.php

    r3432070 r3436352  
    3535        }
    3636
    37         if (! isset($_POST['mail_picker_nonce']) || ! wp_verify_nonce(wp_unslash($_POST['mail_picker_nonce']), 'mail_picker_nonce')) {
     37        if (! isset($_POST['mail_picker_nonce']) || ! wp_verify_nonce(sanitize_text_field(wp_unslash($_POST['mail_picker_nonce'])), 'mail_picker_nonce')) {
    3838
    3939            $error->add('_wpnonce', __('ERROR: security test failed.', 'mail-picker'));
    … …  
    302302        <script>
    303303            jQuery(document).ready(function($) {
    304                 window.location.href = '<?php echo esc_url_raw($redirect_link); ?>';
     304                window.location.href = '<?php echo esc_url($redirect_link); ?>';
    305305            })
    306306        </script>
Note: See TracChangeset for help on using the changeset viewer.