WordPress.org
Get WordPress

Plugin Directory

Changeset 2520157


Ignore:
Timestamp:
04/23/2021 04:48:17 AM (5 years ago)
Author:
bompus
Message:

3.5.6

Location:
wp-customer-reviews/trunk
Files:
7 edited

Legend:

Unmodified
Added
Removed

  • wp-customer-reviews/trunk/changelog.txt

    r2432852 r2520157  
     1= 3.5.6 =
     2* 04/22/2021
     3* [Update] Added compatibility with WordPress 5.7
     4* [Bugfix] Space missing around "by" and "on". You may need to deactivate/activate the plugin to see this change.
     5* [Security] Prevented low-risk XSS which could be injected by an administrator user role.
     6
    17= 3.5.5 =
    28* 12/06/2020

  • wp-customer-reviews/trunk/include/admin/wp-customer-reviews-3-admin.php

    r2371707 r2520157  
    7272            foreach ($options->options as $valObj) {
    7373                echo '      <tr><td>';
    74                 if (isset($options->editable_label) && $options->editable_label == "1") {               
    75                     echo '<input class="'.$options->class.'" name="'.$name.'['.$valObj->value.'][label]" value="'.$value[$valObj->value]['label'].'" />';
     74                if (isset($options->editable_label) && $options->editable_label == "1") {
     75                    $label = wp_kses($value[$valObj->value]['label'], $this->allowedFieldTags);
     76                    echo '<input class="'.$options->class.'" name="'.$name.'['.$valObj->value.'][label]" value="'.$label.'" />';
    7677                } else {
    7778                    echo $value[$valObj->value]['label'];
    … …  
    204205                    foreach ($options->options as $valObj) {
    205206                        $default_options[$name][$valObj->value] = array();
    206                         $default_options[$name][$valObj->value]['label'] = $valObj->label;
     207                        $default_options[$name][$valObj->value]['label'] = wp_kses($valObj->label, $this->allowedFieldTags);
    207208                        foreach ($valObj->checkboxes as $cbObj) {
    208209                            $default_options[$name][$valObj->value][$cbObj->value] = $cbObj->default;
    … …  
    11051106                    $default_options[$name][$valObj->value] = array();
    11061107                    if (isset($postVal[$valObj->value]['label'])) {
    1107                         $default_options[$name][$valObj->value]['label'] = $postVal[$valObj->value]['label'];
     1108                        $label = wp_kses($postVal[$valObj->value]['label'], $this->allowedFieldTags);
     1109                        $default_options[$name][$valObj->value]['label'] = $label;
    11081110                    }
    11091111                    foreach ($valObj->checkboxes as $cbObj) {

  • wp-customer-reviews/trunk/include/templates/frontend_review_form.html

    r2371707 r2520157  
    3030                            &nbsp; Check this box to confirm you are human.
    3131                        </label>
    32                         <input type="checkbox" class="wpcr3_fakehide wpcr3_fconfirm3" name="wpcr3_fconfirm3" checked="checked"
    33                             value="1" />
     32                        <input type="checkbox" class="wpcr3_fakehide wpcr3_fconfirm3" name="wpcr3_fconfirm3" checked="checked" value="1" />
    3433                    </td>
    3534                </tr>

  • wp-customer-reviews/trunk/include/templates/frontend_review_item_reviews.html

    r2371707 r2520157  
    1414    <div class="wpcr3_review_ratingValue">{{stars}}</div>
    1515    <div class="wpcr3_review_datePublished" itemprop="datePublished">{{post_date}}</div>
    16     <div class="wpcr3_review_author">by
     16    <div class="wpcr3_review_author">&nbsp;by&nbsp;
    1717        <span class="wpcr3_caps">
    1818            {{:wpcr3_review_website}}
    … …  
    2222            {{wpcr3_review_name}}
    2323            {{/wpcr3_review_website}}
    24         </span> on
     24        </span>&nbsp;on&nbsp;
    2525        <span class="wpcr3_item_name">
    2626            {{:on_same_page}}

  • wp-customer-reviews/trunk/js/wp-customer-reviews.js

    r2369676 r2520157  
    7474    var div2 = parent.find('.wpcr3_div_2'), submit = div2.find('.wpcr3_submit_btn');
    7575    var c1 = parent.find('.wpcr3_fconfirm1'), c2 = parent.find('.wpcr3_fconfirm2'), c3 = parent.find('.wpcr3_fconfirm3');
    76     var fake_website = parent.find('.wpcr3_fake_website'), fake_url = parent.find('.wpcr3_fake_url');
     76    var fake_website = parent.find('.wpcr3_fake_website');
    7777   
    7878    if (submit.hasClass('wpcr3_disabled')) { return false; }

  • wp-customer-reviews/trunk/readme.txt

    r2432852 r2520157  
    44Tags: business, google, hcard, schema.org, hproduct, hreview, microformat, microformats, mu, places, plugin, product, rating, ratings, rdfa, review, review box, review widget, reviews, seo, service, snippet, snippets, testimonial, testimonials, widget, wordpressmu, wpmu
    55Requires at least: 3.0.0
    6 Tested up to: 5.6
    7 Stable tag: 3.5.5
     6Tested up to: 5.7
     7Stable tag: 3.5.6
    88License: MIT
    99License URI: http://opensource.org/licenses/MIT
    … …  
    6363== Changelog ==
    6464
     65= 3.5.6 =
     66* 04/22/2021
     67* [Update] Added compatibility with WordPress 5.7
     68* [Bugfix] Space missing around "by" and "on". You may need to deactivate/activate the plugin to see this change.
     69* [Security] Prevented low-risk XSS which could be injected by an administrator user role.
     70
    6571= 3.5.5 =
    6672* 12/06/2020

  • wp-customer-reviews/trunk/wp-customer-reviews-3.php

    r2432852 r2520157  
    22/*
    33 * Plugin Name: WP Customer Reviews
    4  * Plugin URI: http://www.gowebsolutions.com/wp-customer-reviews/
     4 * Plugin URI: https://www.gowebsolutions.com/wp-customer-reviews/
    55 * Description: Allows your visitors to leave business / product reviews. Testimonials are in Microdata / Microformat and may display star ratings in search results.
    6  * Version: 3.5.5
     6 * Version: 3.5.6
    77 * Author: Go Web Solutions
    8  * Author URI: http://www.gowebsolutions.com/
     8 * Author URI: https://www.gowebsolutions.com/
    99 * Text Domain: wp-customer-reviews
    1010 * License: MIT
    1111 *
    12  * Copyright (c) 2020 Go Web Solutions
     12 * Copyright (c) 2021 Go Web Solutions
    1313 *
    1414 * Permission is hereby granted, free of charge, to any person obtaining a copy
    … …  
    3636    var $prefix = 'wpcr3';
    3737    var $dashname = 'wp-customer-reviews-3';
    38     var $url = 'http://www.gowebsolutions.com/wp-customer-reviews/';
    39     var $support_link = 'http://wordpress.org/tags/wp-customer-reviews?forum_id=10';
    40     var $prolink = 'http://www.gowebsolutions.com/wp-customer-reviews/';
     38    var $url = 'https://www.gowebsolutions.com/wp-customer-reviews/';
     39    var $support_link = 'https://wordpress.org/support/plugin/wp-customer-reviews/';
     40    var $prolink = 'https://www.gowebsolutions.com/wp-customer-reviews/';
    4141    var $plugin_info = false;
    4242    var $plugin_version = '0.0.0';
    … …  
    821821       
    822822        $required = ($fieldArr['require'] == 1);
     823
    823824        $data = array(
    824825            'name' => $this->prefix.'_'.$name,
    825             'label' => $fieldArr['label'],
     826            'label' => wp_kses($fieldArr['label'], $this->allowedFieldTags),
    826827            'required' => $required ? '*' : '',
    827828            'class' => $required ? $this->prefix.'_required' : '',
    … …  
    869870        }
    870871       
    871         $has_required_fields = strpos($input_fields, $this->prefix.'_required') !== false;
     872        $has_required_fields = strpos($input_fields, $this->prefix.'_required') !== false;
    872873        $rating_field = $this->get_rating_field();
    873874        $review_field = $this->get_review_field();
Note: See TracChangeset for help on using the changeset viewer.