WordPress.org
Get WordPress

Plugin Directory

Changeset 2367337


Ignore:
Timestamp:
08/23/2020 01:42:40 PM (6 years ago)
Author:
anfrageformular
Message:

Fixing Security Issues

Location:
anfrageformular/trunk
Files:
3 edited

Legend:

Unmodified
Added
Removed

  • anfrageformular/trunk/Anfrageformular.php

    r2361750 r2367337  
    66  Author URI: https://anfrageformular.com/
    77  Author E-Mail: support@anfrageformular.com
    8   Version: 1.0.1
     8  Version: 1.0.2
    99 */
    1010

  • anfrageformular/trunk/frontend/frontend_view.php

    r2359775 r2367337  
    834834
    835835function af2_sanitize_answers($ans){
    836     if(is_array($ans) || is_numeric($ans)){
    837         return $ans;
    838     }
     836    if(is_array($ans)){
     837       foreach ( $ans as &$value ) {
     838           $value = af2_sanitize_answers($value);
     839       }
     840    }else{
     841       $ans = sanitize_text_field($ans);
     842    }
     843    return $ans;
    839844}
    840845
    … …  
    848853    $dataid = sanitize_key($_GET['dataid']);
    849854    $answers = array_map('af2_sanitize_answers',$_GET['answers']);
    850 
     855 
    851856    // SQL CHECKS
    852857    $var = af2_sql_check_it($sec);
    … …  
    14481453
    14491454function af2_smtp_mail($host, $user, $password, $port, $type, $to, $from, $from_nam, $subject, $body, $cc, $bcc) {
    1450     /*     * require_once( ABSPATH . WPINC . '/class-phpmailer.php' );
    1451       global $error;
    1452       $mail = new PHPMailer();
    1453       $mail->IsSMTP();
    1454       $mail->SMTPAuth = true;
    1455       $mail->SMTPSecure = $type;
    1456       $mail->SMTPDebug = 1;
    1457       $mail->Host = $host;
    1458       $mail->Port = $port;
    1459       $mail->Username = $user;
    1460       $mail->Password = $password;
    1461       $mail->SetFrom($from, $from_name);
    1462       $mail->Subject = $subject;
    1463       $mail->Body = $body;
    1464       $mail->AddAddress($to);
    1465 
    1466       $error = $mail->Send();
    1467       /**
    1468       if(!$mail->Send()) {
    1469       $error = 'Mail error: '.$mail->ErrorInfo;
    1470       } else {
    1471       $error = 'Message sent!';
    1472       } */
    1473 
     1455   
    14741456    $errors = '';
    14751457
    … …  
    15571539
    15581540function af2_smtp_mail2($host, $user, $password, $port, $type, $to, $from, $from_nam, $subject, $body) {
    1559     /*     * require_once( ABSPATH . WPINC . '/class-phpmailer.php' );
    1560       global $error;
    1561       $mail = new PHPMailer();
    1562       $mail->IsSMTP();
    1563       $mail->SMTPAuth = true;
    1564       $mail->SMTPSecure = $type;
    1565       $mail->SMTPDebug = 1;
    1566       $mail->Host = $host;
    1567       $mail->Port = $port;
    1568       $mail->Username = $user;
    1569       $mail->Password = $password;
    1570       $mail->SetFrom($from, $from_name);
    1571       $mail->Subject = $subject;
    1572       $mail->Body = $body;
    1573       $mail->AddAddress($to);
    1574 
    1575       $error = $mail->Send();
    1576       /**
    1577       if(!$mail->Send()) {
    1578       $error = 'Mail error: '.$mail->ErrorInfo;
    1579       } else {
    1580       $error = 'Message sent!';
    1581       } */
    1582 
     1541   
    15831542    $errors = '';
    15841543

  • anfrageformular/trunk/readme.txt

    r2361750 r2367337  
    55Tested up to: 5.5
    66Requires PHP: 5.6
    7 Stable tag: 1.0.1
     7Stable tag: 1.0.2
    88License: GPLv2
    99License URI: http://www.gnu.org/licenses/gpl-2.0.html
    … …  
    2020Erstelle mit wenigen Klicks hochwertige Formulare per Drag & Drop, ohne eine Zeile Code anzufassen.
    2121
    22 
    2322- **Intuitiv**
    2423Führe deine Website Besucher intuitiv durch einen verkaufsstarken Prozess, der mehr Leads für dich generiert.
    2524
    26 
    2725- **Logik**
    2826Wenn A - dann B. Baue Fragen und Antworten aufeinander auf und verknüpfe diese um deinen Besucher zum Ziel zu führen.
    29 
    3027
    3128- **100% Responsive**
    … …  
    9491
    9592== Screenshots ==
    96 1. **Formularbuilder.**
    97 2. **Fragenbuilder.**
    98 3. **Leads.**
    99 4. **Kontaktformularbuilder.**
    100 5. **Formularvorschau.**
     931. **Formularbuilder**
     942. **Fragenbuilder**
     953. **Lead Übersicht**
     964. **Kontaktformularbuilder**
     975. **Formularvorschau**
    10198
    10299== Changelog ==
    … …  
    107104= 1.0.1 - 14. August 2020 =
    108105* Fix: Formbuilder color picker conflict with Slider Revolution
     106
     107= 1.0.2 - 21. August 2020 =
     108* Fix: Hardened sanitization in contact form to avoid security issues
Note: See TracChangeset for help on using the changeset viewer.