WordPress.org
Get WordPress

Plugin Directory

Changeset 2221892


Ignore:
Timestamp:
01/03/2020 10:11:27 PM (6 years ago)
Author:
khaledsaikat
Message:

Added v2.0 on trunk

Location:
user-meta/trunk
Files:
2 added
6 edited

Legend:

Unmodified
Added
Removed

  • user-meta/trunk/controllers/AdminAjaxController.php

    r2218746 r2221892  
    11<?php
    22namespace UserMeta;
     3
     4use UserMeta\Html\Html;
    35
    46class AdminAjaxController
    … …  
    6769
    6870        if (! empty($_POST['is_shared'])) {
    69 
    7071            $fields = $userMeta->getData('fields');
    71 
    72             if (isset($fields[$_POST['id']])) {
    73                 $field = $fields[$_POST['id']];
    74                 $field['id'] = $_POST['id'];
     72            $fieldId = sanitize_key($_POST['id']);
     73
     74            if (isset($fields[$fieldId])) {
     75                $field = $fields[$fieldId];
     76                $field['id'] = $fieldId;
    7577                $field['is_shared'] = true;
    7678                $fieldBuilder = new FieldBuilder($field);
    … …  
    7880                echo $fieldBuilder->buildPanel();
    7981            } else {
    80                 echo "<div class=\"alert alert-warning\" role=\"alert\">Field id {$_POST['id']} is not exists!</div>";
     82                echo Html::div(sprintf('Shared field with id %s does not exists!', $fieldId), [
     83                    'class' => 'alert alert-warning',
     84                    'role' => 'alert'
     85                ]);
    8186            }
    8287        } elseif (! empty($_POST['field_type'])) {
    … …  
    99104            $field = $_POST;
    100105            $fieldBuilder = new FieldBuilder($field);
    101             $fieldBuilder->setEditor($_POST['editor']);
     106            $fieldBuilder->setEditor(sanitize_key($_POST['editor']));
    102107            echo $fieldBuilder->buildPanel();
    103108        }
    … …  
    142147        $fields = $userMeta->getData('fields');
    143148        $userMeta->render('form', array(
    144             'id' => $_POST['id'],
     149            'id' => sanitize_key($_POST['id']),
    145150            'fields' => $fields
    146151        ));
    … …  
    148153    }
    149154
     155    /**
     156     * Handle creating new form and updating existing form.
     157     */
    150158    function ajaxUpdateForms()
    151159    {
    … …  
    173181
    174182        if (! empty($_POST['form_key'])) {
    175             $formKey = $_POST['form_key'];
     183            $formKey = sanitize_text_field($_POST['form_key']);
    176184        } else {
    177185            echo 'Form name is required.';
    … …  
    191199            if ($query['form'] != $_POST['form_key']) {
    192200                if (isset($forms[$_POST['form_key']])) {
    193                     echo 'Form: "' . $_POST['form_key'] . '" already exists!';
     201                    echo 'Form: "' . esc_html($_POST['form_key']) . '" already exists!';
    194202                    die();
    195203                }
    196204
    197205                unset($forms[$query['form']]);
    198                 $query['form'] = $_POST['form_key'];
    199                 $formBuilder->redirect_to = $parse['scheme'] . '://' . $parse['host'] . $parse['path'] . '?' . http_build_query($query);
     206                $query['form'] = sanitize_text_field($_POST['form_key']);
     207                // Commented since 2.0
     208                // $formBuilder->redirect_to = $parse['scheme'] . '://' . $parse['host'] . $parse['path'] . '?' . http_build_query($query);
     209                $formBuilder->redirect_to = admin_url('admin.php') . '?' . http_build_query($query);
    200210            }
    201211        } elseif ('new' == $query['action']) {
    202212            if (isset($forms[$_POST['form_key']])) {
    203                 echo 'Form: "' . $_POST['form_key'] . '" already exists!';
     213                echo 'Form: "' . esc_html($_POST['form_key']) . '" already exists!';
    204214                die();
    205215            }
    206216
    207             $query['form'] = $_POST['form_key'];
     217            $query['form'] = sanitize_text_field($_POST['form_key']);
    208218            $query['action'] = 'edit';
    209             $formBuilder->redirect_to = $parse['scheme'] . '://' . $parse['host'] . $parse['path'] . '?' . http_build_query($query);
     219            // Commented since 2.0
     220            // $formBuilder->redirect_to = $parse['scheme'] . '://' . $parse['host'] . $parse['path'] . '?' . http_build_query($query);
     221            $formBuilder->redirect_to = admin_url('admin.php') . '?' . http_build_query($query);
    210222        }
    211223
    … …  
    257269        if (! empty($triggerFieldsUpdate)) {
    258270            $userMeta->updateData('fields', $fields);
    259             if (empty($formBuilder->redirect_to))
    260                 $formBuilder->redirect_to = $parse['scheme'] . '://' . $parse['host'] . $parse['path'] . '?' . $parse['query'];
     271            if (empty($formBuilder->redirect_to)) {
     272                // Commented since 2.0
     273                // $formBuilder->redirect_to = $parse['scheme'] . '://' . $parse['host'] . $parse['path'] . '?' . $parse['query'];
     274                $formBuilder->redirect_to = admin_url('admin.php') . '?' . $parse['query'];
     275            }
    261276        }
    262277

  • user-meta/trunk/models/classes/builder/FieldBuilder.php

    r2219858 r2221892  
    6969        $this->data = $data;
    7070
    71         $this->id       = ! empty($data['id']) ? $data['id'] : 0;
    72         $this->type     = ! empty($data['field_type']) ? $data['field_type'] : '';
     71        $this->id       = ! empty($data['id']) ? sanitize_key($data['id']) : 0;
     72        $this->type     = ! empty($data['field_type']) ? sanitize_key($data['field_type']) : '';
    7373        $this->typeData = $userMeta->umFields($this->type);
    7474

  • user-meta/trunk/models/classes/builder/FormBuilder.php

    r2218746 r2221892  
    354354                continue;
    355355
    356             $id = $field['id'];
     356            $id = sanitize_key($field['id']);
    357357            unset($field['id']);
    358358            $sanitize[$id] = $field;
    … …  
    361361
    362362        $sysMaxID = $this->getMaxFieldID();
    363         $formInitID = (int) esc_attr($_POST['init_max_id']);
    364         $formMaxID = (int) esc_attr($_POST['max_id']);
     363        $formInitID = (int) sanitize_key($_POST['init_max_id']);
     364        $formMaxID = (int) sanitize_key($_POST['max_id']);
    365365
    366366        if (($sysMaxID > $formInitID) && ($formMaxID > $formInitID)) {
    … …  
    378378            $this->maxID = $formMaxID + $diff;
    379379
    380             if (! empty($_SERVER['HTTP_REFERER']))
     380            if (! empty($_SERVER['HTTP_REFERER'])) {
    381381                $this->redirect_to = $_SERVER['HTTP_REFERER'];
     382            }
    382383        } elseif ($formMaxID > $formInitID) {
    383384            $this->maxID = $formMaxID;

  • user-meta/trunk/vendor/autoload.php

    r2221036 r2221892  
    55require_once __DIR__ . '/composer/autoload_real.php';
    66
    7 return ComposerAutoloaderInitb39969bf08a84cb9b359c203cd3a4d8f::getLoader();
     7return ComposerAutoloaderInit6851ead06e36f02ee523b4b57c12c7f3::getLoader();

  • user-meta/trunk/vendor/composer/autoload_real.php

    r2221036 r2221892  
    33// autoload_real.php @generated by Composer
    44
    5 class ComposerAutoloaderInitb39969bf08a84cb9b359c203cd3a4d8f
     5class ComposerAutoloaderInit6851ead06e36f02ee523b4b57c12c7f3
    66{
    77    private static $loader;
    … …  
    2020        }
    2121
    22         spl_autoload_register(array('ComposerAutoloaderInitb39969bf08a84cb9b359c203cd3a4d8f', 'loadClassLoader'), true, true);
     22        spl_autoload_register(array('ComposerAutoloaderInit6851ead06e36f02ee523b4b57c12c7f3', 'loadClassLoader'), true, true);
    2323        self::$loader = $loader = new \Composer\Autoload\ClassLoader();
    24         spl_autoload_unregister(array('ComposerAutoloaderInitb39969bf08a84cb9b359c203cd3a4d8f', 'loadClassLoader'));
     24        spl_autoload_unregister(array('ComposerAutoloaderInit6851ead06e36f02ee523b4b57c12c7f3', 'loadClassLoader'));
    2525
    2626        $useStaticLoader = PHP_VERSION_ID >= 50600 && !defined('HHVM_VERSION') && (!function_exists('zend_loader_file_encoded') || !zend_loader_file_encoded());
    … …  
    2828            require_once __DIR__ . '/autoload_static.php';
    2929
    30             call_user_func(\Composer\Autoload\ComposerStaticInitb39969bf08a84cb9b359c203cd3a4d8f::getInitializer($loader));
     30            call_user_func(\Composer\Autoload\ComposerStaticInit6851ead06e36f02ee523b4b57c12c7f3::getInitializer($loader));
    3131        } else {
    3232            $map = require __DIR__ . '/autoload_namespaces.php';
    … …  
    4949
    5050        if ($useStaticLoader) {
    51             $includeFiles = Composer\Autoload\ComposerStaticInitb39969bf08a84cb9b359c203cd3a4d8f::$files;
     51            $includeFiles = Composer\Autoload\ComposerStaticInit6851ead06e36f02ee523b4b57c12c7f3::$files;
    5252        } else {
    5353            $includeFiles = require __DIR__ . '/autoload_files.php';
    5454        }
    5555        foreach ($includeFiles as $fileIdentifier => $file) {
    56             composerRequireb39969bf08a84cb9b359c203cd3a4d8f($fileIdentifier, $file);
     56            composerRequire6851ead06e36f02ee523b4b57c12c7f3($fileIdentifier, $file);
    5757        }
    5858
    … …  
    6161}
    6262
    63 function composerRequireb39969bf08a84cb9b359c203cd3a4d8f($fileIdentifier, $file)
     63function composerRequire6851ead06e36f02ee523b4b57c12c7f3($fileIdentifier, $file)
    6464{
    6565    if (empty($GLOBALS['__composer_autoload_files'][$fileIdentifier])) {

  • user-meta/trunk/vendor/composer/autoload_static.php

    r2221036 r2221892  
    55namespace Composer\Autoload;
    66
    7 class ComposerStaticInitb39969bf08a84cb9b359c203cd3a4d8f
     7class ComposerStaticInit6851ead06e36f02ee523b4b57c12c7f3
    88{
    99    public static $files = array (
    … …  
    4343    {
    4444        return \Closure::bind(function () use ($loader) {
    45             $loader->prefixLengthsPsr4 = ComposerStaticInitb39969bf08a84cb9b359c203cd3a4d8f::$prefixLengthsPsr4;
    46             $loader->prefixDirsPsr4 = ComposerStaticInitb39969bf08a84cb9b359c203cd3a4d8f::$prefixDirsPsr4;
     45            $loader->prefixLengthsPsr4 = ComposerStaticInit6851ead06e36f02ee523b4b57c12c7f3::$prefixLengthsPsr4;
     46            $loader->prefixDirsPsr4 = ComposerStaticInit6851ead06e36f02ee523b4b57c12c7f3::$prefixDirsPsr4;
    4747
    4848        }, null, ClassLoader::class);
Note: See TracChangeset for help on using the changeset viewer.