WordPress.org
Get WordPress

Plugin Directory

Changeset 2268034


Ignore:
Timestamp:
03/26/2020 10:30:48 AM (6 years ago)
Author:
oribi
Message:

Added fix for mod-security issue

Location:
oribi-analytics/trunk
Files:
3 edited

Legend:

Unmodified
Added
Removed

  • oribi-analytics/trunk/inc/oribi-admin-settings.php

    r2251486 r2268034  
    22
    33$default_capabilities = array( 'woocommerce' => false );
     4
     5function oribi_base64decode( $input ) {
     6    return base64_decode(base64_decode( $input ));
     7}
    48
    59function oribi_register_settings() {
    … …  
    711    add_option( 'oribi_snippet' );
    812    add_option( 'oribi_tracking_capabilities', $default_capabilities );
    9     register_setting( 'oribi_options_group', 'oribi_snippet' );
     13    register_setting( 'oribi_options_group', 'oribi_snippet', array( 'sanitize_callback' => 'oribi_base64decode' ) );
    1014    register_setting( 'oribi_options_group', 'oribi_tracking_capabilities' );
    1115}
    … …  
    1620}
    1721add_action( 'admin_menu', 'oribi_register_options_page' );
     22
     23function oribi_base64encode() {
     24?>
     25<script type="text/javascript">
     26document.getElementById( 'submit' ).addEventListener( 'click', function () {
     27    var oribi_snippet = document.getElementById( 'oribi_snippet' );
     28    var oribi_snippet_unencoded = document.getElementById( 'oribi_snippet_unencoded' );
     29    oribi_snippet.value = window.btoa(window.btoa( oribi_snippet_unencoded.value ));
     30});
     31</script>
     32<?php
     33}
     34add_action( 'admin_footer', 'oribi_base64encode' );
    1835
    1936function oribi_options_page_html(){
    … …  
    3451                        </th>
    3552                        <td>
    36                             <textarea id="oribi_snippet" name="oribi_snippet"
    37                                       style="width: 600px; max-width: 100%; height: 200px;"><?php echo get_option( 'oribi_snippet' ); ?></textarea>
     53                            <textarea id="oribi_snippet_unencoded" style="width: 600px; max-width: 100%; height: 200px;"><?php
     54                                echo get_option( 'oribi_snippet' );
     55                            ?></textarea>
     56                            <input type="hidden" id="oribi_snippet" name="oribi_snippet" />
    3857                            <p class="description" id="home-description">
    3958                                <?php esc_html_e( 'Don’t have your personal Oribi tracking code? ', 'oribi' );?>
    … …  
    7897    <?php
    7998}
    80 

  • oribi-analytics/trunk/index.php

    r2251486 r2268034  
    66 * Author: Oribi
    77 * Author URI: https://oribi.io
    8  * Version: 2.0.1
     8 * Version: 2.0.2
    99 * Text Domain: oribi
    1010 */
    … …  
    104104
    105105Oribi_Event_Tracker::init();
    106 

  • oribi-analytics/trunk/readme.txt

    r2244373 r2268034  
    9090== Changelog ==
    9191
    92 The first version of Oribi Analytics plugin.
     92v2.0.2 Added fix for mod-security issue
     93v2.0.1 Support WooCommerce integration
     94v1.0   The first version of Oribi Analytics plugin.
    9395
    9496== Upgrade Notice ==
Note: See TracChangeset for help on using the changeset viewer.