Plugin Directory

Changeset 3486533


Ignore:
Timestamp:
03/19/2026 01:55:22 PM (9 days ago)
Author:
trustindex
Message:

Security fixes

Location:
widgets-for-tiktok-video-feed
Files:
1 deleted
8 edited
26 copied

Legend:

Unmodified
Added
Removed
  • widgets-for-tiktok-video-feed/tags/1.8/assets/css/frontend-notifictions.css

    r3403280 r3486533  
    1 .trustindex-notice{position:fixed;z-index:10;width:300px;left:0;opacity:1;margin:15px 20px;border-radius:4px;padding:0 10px;background-color:#fff;color:#000;box-shadow:2px 2px 10px 0px rgba(0, 0, 0, 0.15);transition:0.5s ease-in;display:flex;align-items:center;cursor:pointer}.trustindex-notice.notice-warning strong{color:#dba617}.trustindex-notice.notice-error strong{color:#e80000}.trustindex-notice img{height:60px}.trustindex-notice p{font-size:12px;padding:0 30px;margin-top:15px}.trustindex-notice a{display:inline-block;color:#fff;background-color:#0095f6;padding:3px 10px;border-radius:5px;margin-top:5px;transition:all 0.2s ease-in-out}.trustindex-notice a:hover{color:#fff;background-color:#0086dd;outline-width:3px;outline-style:solid;outline-color:rgba(0, 149, 246, 0.5)}.trustindex-notice .trustindex-notice-dismiss{position:absolute;right:-15px;top:-15px;border-radius:50%;background:#fff;box-shadow:2px 2px 10px 0px rgba(0, 0, 0, 0.15);width:35px;height:35px}.trustindex-notice .trustindex-notice-dismiss::before,.trustindex-notice .trustindex-notice-dismiss::after{content:"";position:absolute;top:50%;left:50%;width:50%;height:2px;background-color:#7b7b7b;transform-origin:center;border-radius:5px;transition:all 0.5s ease-in-out}.trustindex-notice .trustindex-notice-dismiss::before{transform:translate(-50%, -50%) rotate(45deg)}.trustindex-notice .trustindex-notice-dismiss::after{transform:translate(-50%, -50%) rotate(-45deg)}.trustindex-notice .trustindex-notice-dismiss:hover{background-color:#000;transition:all 0.3s ease-in-out}.trustindex-notice .trustindex-notice-dismiss:hover::before,.trustindex-notice .trustindex-notice-dismiss:hover::after{height:4px;background-color:#fff}
     1.trustindex-notice{position:fixed;z-index:10;width:300px;left:0;opacity:1;margin:15px 20px;border-radius:4px;padding:0 10px;background-color:#fff;color:#000;box-shadow:2px 2px 10px 0px rgba(0, 0, 0, 0.15);transition:0.5s ease-in;display:flex;align-items:center;cursor:pointer}.trustindex-notice.notice-warning strong{color:#dba617}.trustindex-notice.notice-error strong{color:#e80000}.trustindex-notice img{height:60px}.trustindex-notice p{font-size:12px;padding:0 30px;margin-top:15px}.trustindex-notice a{display:inline-block;color:#fff;text-decoration:none;background-color:#0095f6;padding:3px 10px;border-radius:5px;margin-top:5px;transition:all 0.2s ease-in-out}.trustindex-notice a:hover{color:#fff;background-color:#0086dd;outline-width:3px;outline-style:solid;outline-color:rgba(0, 149, 246, 0.5)}.trustindex-notice .trustindex-notice-dismiss{position:absolute;right:-15px;top:-15px;border-radius:50%;background:#fff;box-shadow:2px 2px 10px 0px rgba(0, 0, 0, 0.15);width:35px;height:35px}.trustindex-notice .trustindex-notice-dismiss::before,.trustindex-notice .trustindex-notice-dismiss::after{content:"";position:absolute;top:50%;left:50%;width:50%;height:2px;background-color:#7b7b7b;transform-origin:center;border-radius:5px;transition:all 0.5s ease-in-out}.trustindex-notice .trustindex-notice-dismiss::before{transform:translate(-50%, -50%) rotate(45deg)}.trustindex-notice .trustindex-notice-dismiss::after{transform:translate(-50%, -50%) rotate(-45deg)}.trustindex-notice .trustindex-notice-dismiss:hover{background-color:#000;transition:all 0.3s ease-in-out}.trustindex-notice .trustindex-notice-dismiss:hover::before,.trustindex-notice .trustindex-notice-dismiss:hover::after{height:4px;background-color:#fff}
  • widgets-for-tiktok-video-feed/tags/1.8/include/trustindex-elementor-widgets.php

    r3470026 r3486533  
    1919}
    2020protected function render() {
    21 $pluginManagerInstance = new TRUSTINDEX_Feed_Tiktok("tiktok", __FILE__, "1.7.9", "Widgets for Tiktok Feed", "Tiktok");
     21$pluginManagerInstance = new TRUSTINDEX_Feed_Tiktok("tiktok", __FILE__, "1.8", "Widgets for Tiktok Feed", "Tiktok");
    2222echo do_shortcode('['.$pluginManagerInstance->getShortcodeName().']');
    2323}
  • widgets-for-tiktok-video-feed/tags/1.8/readme.txt

    r3470026 r3486533  
    44Tags: tiktok, feed, video, widget, gallery
    55Tested up to: 6.9
    6 Stable tag: 1.7.9
     6Stable tag: 1.8
    77License: GPLv2 or later
    88License URI: https://www.gnu.org/licenses/gpl-2.0.html
     
    1313Author URI: https://www.trustindex.io/
    1414Text Domain: widgets-for-tiktok-video-feed
    15 Version: 1.7.9
     15Version: 1.8
    1616
    1717Tiktok Feed Widgets. Display your Tiktok feed on your website to increase engagement, sales and SEO.
  • widgets-for-tiktok-video-feed/tags/1.8/tabs/advanced.php

    r3470026 r3486533  
    3838$yesIcon = '<span class="dashicons dashicons-yes-alt"></span>';
    3939$noIcon = '<span class="dashicons dashicons-dismiss"></span>';
    40 $pluginUpdated = ($pluginManagerInstance->getPluginCurrentVersion() <= "1.7.9");
     40$pluginUpdated = ($pluginManagerInstance->getPluginCurrentVersion() <= "1.8");
    4141$cssInline = get_option($pluginManagerInstance->getOptionName('load-css-inline'), 0);
    4242$css = get_option($pluginManagerInstance->getOptionName('css-content'));
  • widgets-for-tiktok-video-feed/tags/1.8/tabs/feed-configurator.php

    r3470026 r3486533  
    4646delete_option($pluginManagerInstance->getOptionName('feed-data'));
    4747delete_option($pluginManagerInstance->getOptionName('feed-data-saved'));
    48 delete_option($pluginManagerInstance->getOptionName('public-id'));
    4948delete_option($pluginManagerInstance->getOptionName('token-expires'));
    5049delete_option($pluginManagerInstance->getOptionName('layout'));
     
    222221</form>
    223222<?php $connectUrl = 'https://admin.trustindex.io/source/edit_feed/type/Tiktok/iframe/1'; ?>
    224 <?php
    225 if ($isReconnectingSource) {
    226 $connectUrl .= '/public_id/'.get_option($pluginManagerInstance->getOptionName('public-id'));
    227 }
    228 ?>
    229223<div class="ti-box" style="padding: 0">
    230224<?php
     
    232226isset($connectPending['error']) ? [] : $connectPending,
    233227array(
     228'public_id' => get_option($pluginManagerInstance->getOptionName('public-id')),
    234229'website' => esc_attr(urlencode(get_option('siteurl'))),
    235230'version' => esc_attr($pluginManagerInstance->getVersion()),
  • widgets-for-tiktok-video-feed/tags/1.8/trustindex-feed-plugin.class.php

    r3470026 r3486533  
    123123public function activate()
    124124{
     125$requestBody = [
     126'platform' => 'Tiktok',
     127'website' => get_option('siteurl'),
     128];
     129$response = wp_remote_post('https://admin.trustindex.io/new/wordpress-feed/register', [
     130'headers' => [
     131'Content-Type' => 'application/x-www-form-urlencoded',
     132'ti-secure' => hash_hmac('sha256', http_build_query($requestBody), '10af0d731810a299be47dd3574210a68'),
     133],
     134'body' => $requestBody,
     135'timeout' => '30',
     136'sslverify' => false,
     137]);
     138if (is_wp_error($response)) {
     139update_option($this->getOptionName('public-id'), $response->get_error_message(), false);
     140return;
     141}
     142$data = json_decode(wp_remote_retrieve_body($response), true);
     143update_option($this->getOptionName('public-id'), $data['public-id'] ?? $data['error'], false);
    125144include $this->getPluginDir() . 'include' . DIRECTORY_SEPARATOR . 'activate.php';
    126145if (!$this->getNotificationParam('rate-us', 'hidden', false) && $this->getNotificationParam('rate-us', 'active', true)) {
     
    54705489}
    54715490$body = $request->get_body();
    5472 $expected = hash_hmac('sha256', $body.$timestamp, get_option($this->getOptionName('public-id'), $request->get_param('data')['public_id']));
     5491$expected = hash_hmac('sha256', $body.$timestamp, get_option($this->getOptionName('public-id')));
    54735492if (!hash_equals($expected, $signature)) {
    54745493return new WP_Error('invalid_signature', 'Signature mismatch', ['status' => 403]);
  • widgets-for-tiktok-video-feed/tags/1.8/uninstall.php

    r3470026 r3486533  
    44}
    55require_once plugin_dir_path( __FILE__ ) . 'trustindex-feed-plugin.class.php';
    6 $trustindex_feed_tiktok = new TRUSTINDEX_Feed_Tiktok("tiktok", __FILE__, "1.7.9", "Widgets for Tiktok Feed", "Tiktok");
     6$trustindex_feed_tiktok = new TRUSTINDEX_Feed_Tiktok("tiktok", __FILE__, "1.8", "Widgets for Tiktok Feed", "Tiktok");
    77$trustindex_feed_tiktok->uninstall();
    88?>
  • widgets-for-tiktok-video-feed/tags/1.8/widgets-for-tiktok-video-feed.php

    r3470026 r3486533  
    66Description: Tiktok Feed Widgets. Display your Tiktok feed on your website to increase engagement, sales and SEO.
    77Tags: tiktok, feed, video, widget, gallery
    8 Version: 1.7.9
     8Version: 1.8
    99Requires at least: 6.2
    1010Requires PHP: 7.0
     
    2828require_once plugin_dir_path(__FILE__) . 'include' . DIRECTORY_SEPARATOR . 'cache-plugin-filters.php';
    2929require_once plugin_dir_path( __FILE__ ) . 'trustindex-feed-plugin.class.php';
    30 $trustindex_feed_tiktok = new TRUSTINDEX_Feed_Tiktok("tiktok", __FILE__, "1.7.9", "Widgets for Tiktok Feed", "Tiktok");
     30$trustindex_feed_tiktok = new TRUSTINDEX_Feed_Tiktok("tiktok", __FILE__, "1.8", "Widgets for Tiktok Feed", "Tiktok");
    3131$pluginManagerInstance = $trustindex_feed_tiktok;
    3232register_activation_hook(__FILE__, [ $pluginManagerInstance, 'activate' ]);
  • widgets-for-tiktok-video-feed/trunk/assets/css/frontend-notifictions.css

    r3403280 r3486533  
    1 .trustindex-notice{position:fixed;z-index:10;width:300px;left:0;opacity:1;margin:15px 20px;border-radius:4px;padding:0 10px;background-color:#fff;color:#000;box-shadow:2px 2px 10px 0px rgba(0, 0, 0, 0.15);transition:0.5s ease-in;display:flex;align-items:center;cursor:pointer}.trustindex-notice.notice-warning strong{color:#dba617}.trustindex-notice.notice-error strong{color:#e80000}.trustindex-notice img{height:60px}.trustindex-notice p{font-size:12px;padding:0 30px;margin-top:15px}.trustindex-notice a{display:inline-block;color:#fff;background-color:#0095f6;padding:3px 10px;border-radius:5px;margin-top:5px;transition:all 0.2s ease-in-out}.trustindex-notice a:hover{color:#fff;background-color:#0086dd;outline-width:3px;outline-style:solid;outline-color:rgba(0, 149, 246, 0.5)}.trustindex-notice .trustindex-notice-dismiss{position:absolute;right:-15px;top:-15px;border-radius:50%;background:#fff;box-shadow:2px 2px 10px 0px rgba(0, 0, 0, 0.15);width:35px;height:35px}.trustindex-notice .trustindex-notice-dismiss::before,.trustindex-notice .trustindex-notice-dismiss::after{content:"";position:absolute;top:50%;left:50%;width:50%;height:2px;background-color:#7b7b7b;transform-origin:center;border-radius:5px;transition:all 0.5s ease-in-out}.trustindex-notice .trustindex-notice-dismiss::before{transform:translate(-50%, -50%) rotate(45deg)}.trustindex-notice .trustindex-notice-dismiss::after{transform:translate(-50%, -50%) rotate(-45deg)}.trustindex-notice .trustindex-notice-dismiss:hover{background-color:#000;transition:all 0.3s ease-in-out}.trustindex-notice .trustindex-notice-dismiss:hover::before,.trustindex-notice .trustindex-notice-dismiss:hover::after{height:4px;background-color:#fff}
     1.trustindex-notice{position:fixed;z-index:10;width:300px;left:0;opacity:1;margin:15px 20px;border-radius:4px;padding:0 10px;background-color:#fff;color:#000;box-shadow:2px 2px 10px 0px rgba(0, 0, 0, 0.15);transition:0.5s ease-in;display:flex;align-items:center;cursor:pointer}.trustindex-notice.notice-warning strong{color:#dba617}.trustindex-notice.notice-error strong{color:#e80000}.trustindex-notice img{height:60px}.trustindex-notice p{font-size:12px;padding:0 30px;margin-top:15px}.trustindex-notice a{display:inline-block;color:#fff;text-decoration:none;background-color:#0095f6;padding:3px 10px;border-radius:5px;margin-top:5px;transition:all 0.2s ease-in-out}.trustindex-notice a:hover{color:#fff;background-color:#0086dd;outline-width:3px;outline-style:solid;outline-color:rgba(0, 149, 246, 0.5)}.trustindex-notice .trustindex-notice-dismiss{position:absolute;right:-15px;top:-15px;border-radius:50%;background:#fff;box-shadow:2px 2px 10px 0px rgba(0, 0, 0, 0.15);width:35px;height:35px}.trustindex-notice .trustindex-notice-dismiss::before,.trustindex-notice .trustindex-notice-dismiss::after{content:"";position:absolute;top:50%;left:50%;width:50%;height:2px;background-color:#7b7b7b;transform-origin:center;border-radius:5px;transition:all 0.5s ease-in-out}.trustindex-notice .trustindex-notice-dismiss::before{transform:translate(-50%, -50%) rotate(45deg)}.trustindex-notice .trustindex-notice-dismiss::after{transform:translate(-50%, -50%) rotate(-45deg)}.trustindex-notice .trustindex-notice-dismiss:hover{background-color:#000;transition:all 0.3s ease-in-out}.trustindex-notice .trustindex-notice-dismiss:hover::before,.trustindex-notice .trustindex-notice-dismiss:hover::after{height:4px;background-color:#fff}
  • widgets-for-tiktok-video-feed/trunk/include/trustindex-elementor-widgets.php

    r3470026 r3486533  
    1919}
    2020protected function render() {
    21 $pluginManagerInstance = new TRUSTINDEX_Feed_Tiktok("tiktok", __FILE__, "1.7.9", "Widgets for Tiktok Feed", "Tiktok");
     21$pluginManagerInstance = new TRUSTINDEX_Feed_Tiktok("tiktok", __FILE__, "1.8", "Widgets for Tiktok Feed", "Tiktok");
    2222echo do_shortcode('['.$pluginManagerInstance->getShortcodeName().']');
    2323}
  • widgets-for-tiktok-video-feed/trunk/readme.txt

    r3470026 r3486533  
    44Tags: tiktok, feed, video, widget, gallery
    55Tested up to: 6.9
    6 Stable tag: 1.7.9
     6Stable tag: 1.8
    77License: GPLv2 or later
    88License URI: https://www.gnu.org/licenses/gpl-2.0.html
     
    1313Author URI: https://www.trustindex.io/
    1414Text Domain: widgets-for-tiktok-video-feed
    15 Version: 1.7.9
     15Version: 1.8
    1616
    1717Tiktok Feed Widgets. Display your Tiktok feed on your website to increase engagement, sales and SEO.
  • widgets-for-tiktok-video-feed/trunk/tabs/advanced.php

    r3470026 r3486533  
    3838$yesIcon = '<span class="dashicons dashicons-yes-alt"></span>';
    3939$noIcon = '<span class="dashicons dashicons-dismiss"></span>';
    40 $pluginUpdated = ($pluginManagerInstance->getPluginCurrentVersion() <= "1.7.9");
     40$pluginUpdated = ($pluginManagerInstance->getPluginCurrentVersion() <= "1.8");
    4141$cssInline = get_option($pluginManagerInstance->getOptionName('load-css-inline'), 0);
    4242$css = get_option($pluginManagerInstance->getOptionName('css-content'));
  • widgets-for-tiktok-video-feed/trunk/tabs/feed-configurator.php

    r3470026 r3486533  
    4646delete_option($pluginManagerInstance->getOptionName('feed-data'));
    4747delete_option($pluginManagerInstance->getOptionName('feed-data-saved'));
    48 delete_option($pluginManagerInstance->getOptionName('public-id'));
    4948delete_option($pluginManagerInstance->getOptionName('token-expires'));
    5049delete_option($pluginManagerInstance->getOptionName('layout'));
     
    222221</form>
    223222<?php $connectUrl = 'https://admin.trustindex.io/source/edit_feed/type/Tiktok/iframe/1'; ?>
    224 <?php
    225 if ($isReconnectingSource) {
    226 $connectUrl .= '/public_id/'.get_option($pluginManagerInstance->getOptionName('public-id'));
    227 }
    228 ?>
    229223<div class="ti-box" style="padding: 0">
    230224<?php
     
    232226isset($connectPending['error']) ? [] : $connectPending,
    233227array(
     228'public_id' => get_option($pluginManagerInstance->getOptionName('public-id')),
    234229'website' => esc_attr(urlencode(get_option('siteurl'))),
    235230'version' => esc_attr($pluginManagerInstance->getVersion()),
  • widgets-for-tiktok-video-feed/trunk/trustindex-feed-plugin.class.php

    r3470026 r3486533  
    123123public function activate()
    124124{
     125$requestBody = [
     126'platform' => 'Tiktok',
     127'website' => get_option('siteurl'),
     128];
     129$response = wp_remote_post('https://admin.trustindex.io/new/wordpress-feed/register', [
     130'headers' => [
     131'Content-Type' => 'application/x-www-form-urlencoded',
     132'ti-secure' => hash_hmac('sha256', http_build_query($requestBody), '10af0d731810a299be47dd3574210a68'),
     133],
     134'body' => $requestBody,
     135'timeout' => '30',
     136'sslverify' => false,
     137]);
     138if (is_wp_error($response)) {
     139update_option($this->getOptionName('public-id'), $response->get_error_message(), false);
     140return;
     141}
     142$data = json_decode(wp_remote_retrieve_body($response), true);
     143update_option($this->getOptionName('public-id'), $data['public-id'] ?? $data['error'], false);
    125144include $this->getPluginDir() . 'include' . DIRECTORY_SEPARATOR . 'activate.php';
    126145if (!$this->getNotificationParam('rate-us', 'hidden', false) && $this->getNotificationParam('rate-us', 'active', true)) {
     
    54705489}
    54715490$body = $request->get_body();
    5472 $expected = hash_hmac('sha256', $body.$timestamp, get_option($this->getOptionName('public-id'), $request->get_param('data')['public_id']));
     5491$expected = hash_hmac('sha256', $body.$timestamp, get_option($this->getOptionName('public-id')));
    54735492if (!hash_equals($expected, $signature)) {
    54745493return new WP_Error('invalid_signature', 'Signature mismatch', ['status' => 403]);
  • widgets-for-tiktok-video-feed/trunk/uninstall.php

    r3470026 r3486533  
    44}
    55require_once plugin_dir_path( __FILE__ ) . 'trustindex-feed-plugin.class.php';
    6 $trustindex_feed_tiktok = new TRUSTINDEX_Feed_Tiktok("tiktok", __FILE__, "1.7.9", "Widgets for Tiktok Feed", "Tiktok");
     6$trustindex_feed_tiktok = new TRUSTINDEX_Feed_Tiktok("tiktok", __FILE__, "1.8", "Widgets for Tiktok Feed", "Tiktok");
    77$trustindex_feed_tiktok->uninstall();
    88?>
  • widgets-for-tiktok-video-feed/trunk/widgets-for-tiktok-video-feed.php

    r3470026 r3486533  
    66Description: Tiktok Feed Widgets. Display your Tiktok feed on your website to increase engagement, sales and SEO.
    77Tags: tiktok, feed, video, widget, gallery
    8 Version: 1.7.9
     8Version: 1.8
    99Requires at least: 6.2
    1010Requires PHP: 7.0
     
    2828require_once plugin_dir_path(__FILE__) . 'include' . DIRECTORY_SEPARATOR . 'cache-plugin-filters.php';
    2929require_once plugin_dir_path( __FILE__ ) . 'trustindex-feed-plugin.class.php';
    30 $trustindex_feed_tiktok = new TRUSTINDEX_Feed_Tiktok("tiktok", __FILE__, "1.7.9", "Widgets for Tiktok Feed", "Tiktok");
     30$trustindex_feed_tiktok = new TRUSTINDEX_Feed_Tiktok("tiktok", __FILE__, "1.8", "Widgets for Tiktok Feed", "Tiktok");
    3131$pluginManagerInstance = $trustindex_feed_tiktok;
    3232register_activation_hook(__FILE__, [ $pluginManagerInstance, 'activate' ]);
Note: See TracChangeset for help on using the changeset viewer.