🔒 EXCLUSIVE: Changeset/ - Uncensored 2025

Changeset 3023795


Ignore:
Timestamp:
01/19/2024 03:40:24 AM (2 years ago)
Author:
svenl77
Message:

New version: 2.8.6

Location:
buddyforms
Files:
980 added
1 deleted
7 edited

Legend:

Unmodified
Added
Removed
  • buddyforms/trunk/BuddyForms.php

    r2999730 r3023795  
    88 * Plugin URI:  https://themekraft.com/buddyforms/
    99 * Description: Contact Forms, Post Forms for User Generated Content and Registration Forms easily build in minutes. Ideal for User Submitted Posts. Extendable with Addons!
    10  * Version: 2.8.5
     10 * Version: 2.8.6
    1111 * Author: ThemeKraft
    1212 * Author URI: https://themekraft.com/buddyforms/
     
    4646         * @var string
    4747         */
    48         public  $version = '2.8.5' ;
     48        public  $version = '2.8.6' ;
    4949        /**
    5050         * @var array Frontend Global JS parameters
  • buddyforms/trunk/includes/admin/submissions.php

    r2820257 r3023795  
    8383
    8484        $selected_form   = '';
    85         $selected_author = isset( $_GET['submission_author'] ) ? buddyforms_sanitize( wp_unslash( $_GET['submission_author'] ) ) : 'all';
     85        $selected_author = isset( $_GET['submission_author'] ) ? buddyforms_sanitize( '', wp_unslash( $_GET['submission_author'] ) ) : 'all';
    8686        if ( isset( $_GET['form_slug'] ) ) {
    8787            $current_screen->set_parentage( $parent_file );
     
    159159                <?php if ( ! isset( $_GET['entry'] ) ) { ?>
    160160                    <form id="filter" method="get">
    161                         <input type="hidden" name="page" value="<?php echo esc_attr( sanitize_text_field( wp_unslash( $_REQUEST['page'] ) ) ); ?>"/>
     161                        <input type="hidden" name="page" value="<?php echo esc_attr( filter_var( wp_unslash( $_REQUEST['page'] ), FILTER_SANITIZE_STRING ) ); ?>"/>
    162162                        <?php $this->bf_submissions_table->display(); ?>
    163163                    </form>
     
    298298
    299299        if ( isset( $buddyforms[ $_GET['form_slug'] ]['post_type'] ) && $buddyforms[ $form_slug ]['post_type'] == 'bf_submissions' ) {
    300             $actions['edit'] = sprintf( '<a href="?post_type=buddyforms&page=%s&action=%s&entry=%s&form_slug=%s">%s</a>', sanitize_text_field( wp_unslash( $_REQUEST['page'] ) ), 'edit', $item->ID, $form_slug, __( 'View Submission', 'buddyforms' ) );
     300            $actions['edit'] = sprintf( '<a href="?post_type=buddyforms&page=%s&action=%s&entry=%s&form_slug=%s">%s</a>', filter_var( wp_unslash( $_REQUEST['page'] ), FILTER_SANITIZE_STRING ), 'edit', $item->ID, $form_slug, __( 'View Submission', 'buddyforms' ) );
    301301        }
    302302
  • buddyforms/trunk/includes/functions.php

    r2882408 r3023795  
    15201520    $url = ( isset( $_REQUEST['url'] ) ? wp_kses_post( wp_unslash( $_REQUEST['url'] ) ) : '' );
    15211521    $valid_url = strtolower( $url );
    1522     if ( strpos( $valid_url, 'phar://' ) !== false || pathinfo( $valid_url, PATHINFO_EXTENSION ) === 'phar' ) {
    1523         return;
     1522    if ( strpos( $valid_url, 'phar://' ) !== false || pathinfo( $valid_url, PATHINFO_EXTENSION ) === 'phar' || strpos( $valid_url, 'php://' ) !== false ) {
     1523        return false;
    15241524    }
    15251525    $file_id = ( isset( $_REQUEST['id'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['id'] ) ) : '' );
  • buddyforms/trunk/includes/resources/freemius/includes/class-freemius.php

    r2999730 r3023795  
    13581358
    13591359        function _run_garbage_collector() {
    1360             // @todo - Remove this check once the garbage collector is ready to be out of beta.
    1361             if ( true !== fs_get_optional_constant( 'WP_FS__ENABLE_GARBAGE_COLLECTOR', false ) ) {
     1360            if ( true !== fs_get_optional_constant( 'WP_FS__ENABLE_GARBAGE_COLLECTOR', true ) ) {
    13621361                return;
    13631362            }
  • buddyforms/trunk/includes/resources/freemius/includes/class-fs-garbage-collector.php

    r2999730 r3023795  
    282282
    283283            foreach ( $users as $user_id => $user ) {
    284                 if ( ! isset( $user_has_install[ $user_id ] ) ) {
     284                if ( ! isset( $user_has_install_map[ $user_id ] ) ) {
    285285                    unset( $users[ $user_id ] );
    286286
  • buddyforms/trunk/includes/resources/freemius/start.php

    r2999730 r3023795  
    1616     * @var string
    1717     */
    18     $this_sdk_version = '2.6.0';
     18    $this_sdk_version = '2.6.2';
    1919
    2020    #region SDK Selection Logic --------------------------------------------------------------------
     
    4747    $file_path    = fs_normalize_path( __FILE__ );
    4848    $fs_root_path = dirname( $file_path );
     49
     50    // @todo: Remove this code after a few months when WP 6.3 usage is low enough.
     51    global $wp_version;
    4952
    5053    if (
     
    5457         * @see theme-previews.php:wp_get_theme_preview_path()
    5558         *
    56          * @todo If this behavior is fixed in the core, we will remove this workaround.
     59         * @todo This behavior is already fixed in the core (WP 6.3.2+), and this code can be removed after a few months when WP 6.3 usage is low enough.
    5760         * @since WP 6.3.0
    5861         */
     62        version_compare( $wp_version, '6.3', '>=' ) &&
     63        version_compare( $wp_version, '6.3.1', '<=' ) &&
    5964        (
    6065            'site-editor.php' === basename( $_SERVER['SCRIPT_FILENAME'] ) ||
  • buddyforms/trunk/readme.txt

    r2999730 r3023795  
    33Tags: custom form, form builder, registration, user registration, forms
    44Requires at least: 4.0
    5 Tested up to: 6.4.1
    6 Stable tag: 2.8.5
     5Tested up to: 6.4.2
     6Stable tag: 2.8.6
    77Requires PHP: 5.3
    88License: GPLv2
     
    265265
    266266== Changelog ==
     267= 2.8.6 - 18 Jan 2024 =
     268* Fixed XSS issue.
     269* Fixed arbitrary file download issue.
     270* Fixed issue related with filter submissions by author.
     271* Updated Freemius SDK.
     272* Tested up to WordPress 6.4.2
     273
    267274= 2.8.5 - 21 Nov 2023 =
    268275* Fixed issue with some file format.
Note: See TracChangeset for help on using the changeset viewer.