Changeset 3442150

Timestamp:

01/19/2026 01:52:59 AM (2 months ago)

Author:

pickplugins

Message:

version update

Location:

user-verification/trunk

Files:

• readme.md (modified) (1 diff)
• templates/email-otp-login-form/hook.php (modified) (2 diffs)
• user-verification.php (modified) (1 diff)

user-verification/trunk/readme.md

@@ -5 +5 @@
     Requires at least: 4.1
     Tested up to: 6.9
-    Stable tag: 2.0.44
+    Stable tag: 2.0.45
     License: GPLv2 or later
     License URI: http://www.gnu.org/licenses/gpl-2.0.html

user-verification/trunk/templates/email-otp-login-form/hook.php

@@ -11 +11 @@
     $steps = (int) $request->get_param('steps');
     $otp_code =  $request->get_param('otp');
+    $_wpnonce =  $request->get_param('_wpnonce');
     // $gRecaptchaResponse = $request->get_param('g-recaptcha-response');
+
+
+        if (!wp_verify_nonce($_wpnonce, 'wp_rest')) {
+
+          
+
+  $response['errors']['invalidRequest'] = __('Invalid request', 'user-verification');
+        return $response;
+
+};
 
 
@@ -137 +148 @@
         $saved_otp = get_user_meta($user_id, 'uv_otp', true);
 
-
+        if(empty($otp_code)){
+            $UserVerificationStats->add_stats('wrong_email_otp_used');
+            $response['errors']['wrong_otp'] = __('Wrong OTP used.', 'user-verification');
+            return $response;
+        }
+
+
+        if(empty($saved_otp)){
+            $UserVerificationStats->add_stats('wrong_email_otp_used');
+            $response['errors']['wrong_otp'] = __('OTP missmatch.', 'user-verification');
+            return $response;
+        }
 
 

user-verification/trunk/user-verification.php

@@ -4 +4 @@
 Plugin URI: http://pickplugins.com
 Description: Verify user before access on your website.
-Version: 2.0.44
+Version: 2.0.45
 Text Domain: user-verification
 Domain Path: /languages