Changeset 2901738
- Timestamp:
- 04/20/2023 10:46:21 AM (3 years ago)
- Location:
- cms-tree-page-view/trunk
- Files:
-
- 3 edited
-
functions.php (modified) (6 diffs)
-
index.php (modified) (2 diffs)
-
readme.txt (modified) (2 diffs)
Legend:
- Unmodified
- Added
- Removed
-
cms-tree-page-view/trunk/functions.php
r2750438 r2901738 101 101 */ 102 102 103 $post_position = $_POST["cms_tpv_add_type"];104 $post_status = $_POST["cms_tpv_add_status"];103 $post_position = sanitize_text_field($_POST["cms_tpv_add_type"]); 104 $post_status = sanitize_text_field($_POST["cms_tpv_add_status"]); 105 105 $post_names = (array) $_POST["cms_tpv_add_new_pages_names"]; 106 $ref_post_id = (int) $_POST["ref_post_id"]; 107 $lang = $_POST["lang"]; 106 $ref_post_id = (int) sanitize_text_field($_POST["ref_post_id"]); 107 $lang = sanitize_text_field($_POST["lang"]); 108 109 for ($i = 0; $i < count($post_names); $i++) { 110 $post_names[$i] = sanitize_text_field($post_names[$i]); 111 } 108 112 109 113 // Check nonce … … 281 285 global $cms_tpv_view; 282 286 if (isset($_GET["cms_tpv_view"])) { 283 $cms_tpv_view = htmlspecialchars( $_GET["cms_tpv_view"]);287 $cms_tpv_view = htmlspecialchars(sanitize_text_field($_GET["cms_tpv_view"])); 284 288 } else { 285 289 $cms_tpv_view = "all"; … … 891 895 $post_type = NULL; 892 896 if (isset($_GET["post_type"])) { 893 $post_type = $_GET["post_type"];897 $post_type = sanitize_text_field($_GET["post_type"]); 894 898 } 895 899 if (!$post_type) { 896 900 // no post type, happens with ozh admin drop down, so get it via page instead 897 $page = isset($_GET["page"]) ? $_GET["page"]: "";901 $page = isset($_GET["page"]) ? sanitize_text_field($_GET["page"]) : ""; 898 902 $post_type = str_replace("cms-tpv-page-", "", $page); 899 903 } … … 1594 1598 check_ajax_referer('cms-tpv-ajax', 'cms-tpv-nonce'); 1595 1599 1596 $action = $_GET["action"];1597 $view = $_GET["view"]; // all | public | trash1598 $post_type = (isset($_GET["post_type"])) ? $_GET["post_type"]: null;1599 $search = (isset($_GET["search_string"])) ? trim($_GET["search_string"]) : ""; // exits if we're doing a search1600 $action = sanitize_text_field($_GET["action"]); 1601 $view = sanitize_text_field($_GET["view"]); // all | public | trash 1602 $post_type = (isset($_GET["post_type"])) ? sanitize_text_field($_GET["post_type"]) : null; 1603 $search = (isset($_GET["search_string"])) ? sanitize_text_field(trim($_GET["search_string"])) : ""; // exits if we're doing a search 1600 1604 1601 1605 // Check if user is allowed to get the list. For example subscribers should not be allowed to … … 1670 1674 // regular get 1671 1675 1672 $id = (isset($_GET["id"])) ? $_GET["id"]: null;1676 $id = (isset($_GET["id"])) ? sanitize_text_field($_GET["id"]) : null; 1673 1677 $id = (int) str_replace("cms-tpv-", "", $id); 1674 1678 … … 1703 1707 global $wpdb; 1704 1708 1705 $node_id = $_POST["node_id"]; // the node that was moved1706 $ref_node_id = $_POST["ref_node_id"];1707 $type = $_POST["type"];1709 $node_id = sanitize_text_field($_POST["node_id"]); // the node that was moved 1710 $ref_node_id = sanitize_text_field($_POST["ref_node_id"]); 1711 $type = sanitize_text_field($_POST["type"]); 1708 1712 1709 1713 $node_id = str_replace("cms-tpv-", "", $node_id); -
cms-tree-page-view/trunk/index.php
r2750438 r2901738 6 6 Text Domain: cms-tree-page-view 7 7 Domain Path: /languages/ 8 Version: 1.6. 68 Version: 1.6.7 9 9 Author: Jon Christopher 10 10 Author URI: https://jonchristopher.us/ … … 30 30 #require("functions.php"); 31 31 32 define( "CMS_TPV_VERSION", "1.6. 6");32 define( "CMS_TPV_VERSION", "1.6.7"); 33 33 define( "CMS_TPV_NAME", "CMS Tree Page View"); 34 34 -
cms-tree-page-view/trunk/readme.txt
r2750438 r2901738 5 5 Text Domain: cms-tree-page-view 6 6 Requires at least: 3.8 7 Tested up to: 6. 0.08 Stable tag: 1.6. 67 Tested up to: 6.2.0 8 Stable tag: 1.6.7 9 9 10 10 Adds a tree view of all pages & custom posts. Get a great overview + options to drag & drop to reorder & option to add multiple pages. … … 118 118 == Changelog == 119 119 120 = 1.6.7 (April 2023) = 121 122 Security update, fixes RXSS vulnerability. 123 120 124 = 1.6.6 (May 2022) = 121 125
Note: See TracChangeset
for help on using the changeset viewer.
