WordPress.org
Get WordPress

Plugin Directory

Changeset 2140414


Ignore:
Timestamp:
08/16/2019 08:32:50 AM (7 years ago)
Author:
jschaves
Message:

Various bug fixes

Location:
very-simple-wp-popup/trunk
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • very-simple-wp-popup/trunk/README.txt

    r2140204 r2140414  
    35351. screenshot-1.jpg
    36362. screenshot-2.jpg
    37 3. screenshot-3.jpg
    38 4. screenshot-4.jpg
    3937
    4038== Changelog ==
    … …  
    4240= 1.2.0 29.07.2019 =
    4341* Various **bug fixes**
     42= 1.3.0 16.08.2019 =
     43* Various **bug fixes**

  • very-simple-wp-popup/trunk/admin/vswpp-class-serializer.php

    r2140120 r2140414  
    3535        }
    3636        // If the above are valid, sanitize and save the option.
    37         if( null !== wp_unslash( $_POST['width'] ) ) {
     37        if( null !== sanitize_text_field( wp_unslash( $_POST['width'] ) ) ) {
    3838            //store in one variable
    39             if( wp_unslash( $_POST['edit'] ) == 'null' ) {
     39            if( sanitize_text_field( wp_unslash( $_POST['edit'] ) ) == 'null' ) {
    4040                $id = uniqid();
    4141            } else {
    42                 $id = wp_unslash( $_POST['edit'] );
     42                $id = sanitize_text_field( wp_unslash( $_POST['edit'] ) );
    4343            }
    4444
    … …  
    6060       
    6161        // If the above are valid, sanitize and delete the option.
    62         if( null !== wp_unslash( $_POST['delete'] ) ) {
     62        if( null !== sanitize_text_field( wp_unslash( $_POST['delete'] ) ) ) {
    6363            //store in one variable
    64             $value = $_POST['delete'];
     64            $value = sanitize_text_field( wp_unslash( $_POST['delete'] ) );
    6565            delete_option( 'very_simple_wp_popup_' . $value );
    6666        }
    … …  
    8282            return false;
    8383        }
    84         $field  = wp_unslash( $_POST['id-message'] );
     84        $field  = sanitize_text_field( wp_unslash( $_POST['id-message'] ) );
    8585        $action = 'settings-save';
    8686        return wp_verify_nonce( $field, $action );
Note: See TracChangeset for help on using the changeset viewer.