WordPress.org
Get WordPress

Plugin Directory

Changeset 2529552


Ignore:
Timestamp:
05/11/2021 08:00:38 AM (5 years ago)
Author:
textoptimizer
Message:

Fix issue with sanitizing curl fields, fix issue on loading screen

Location:
textoptimizer
Files:
4 edited

Legend:

Unmodified
Added
Removed

  • textoptimizer/tags/4.4.1/js/textoptimizer.js

    r2527948 r2529552  
    545545// Show loading screen
    546546function show_loading() {
     547    jQuery(".scene").removeClass("active");
    547548    $(".loading-screen").css('display', 'block');
    548549    var girl_num = Math.floor((Math.random() * 3) + 1);

  • textoptimizer/tags/4.4.1/textoptimizer.php

    r2529307 r2529552  
    8383        $method = sanitize_text_field($_POST["method"]);
    8484        $curlFields = json_decode(stripslashes($_POST["curlFields"]), true);
     85        $curlFields = array_map( 'wp_filter_post_kses', $curlFields );
    8586
    86         if(isset($curlFields['user'])) {
    87             $curlFields['user']['email'] = sanitize_email($curlFields['user']['email']);
    88         }
    89 
    90         if(isset($curlFields['query'])) {
    91             $curlFields['query'] = sanitize_text_field($curlFields['query']);
    92         }
    93        
    94         if(isset($curlFields['preference_role_type'])) {
    95             $curlFields['preference_role_type'] = sanitize_text_field($curlFields['preference_role_type']);
    96         }
    97        
    98         if(isset($curlFields['content'])) {
    99             $curlFields['content'] = wp_filter_post_kses($curlFields['content']);
    100         }
    101        
    10287        if($method == 'GET') {
    10388            $url = $url.'?'.http_build_query($curlFields);

  • textoptimizer/trunk/js/textoptimizer.js

    r2527948 r2529552  
    545545// Show loading screen
    546546function show_loading() {
     547    jQuery(".scene").removeClass("active");
    547548    $(".loading-screen").css('display', 'block');
    548549    var girl_num = Math.floor((Math.random() * 3) + 1);

  • textoptimizer/trunk/textoptimizer.php

    r2529307 r2529552  
    8383        $method = sanitize_text_field($_POST["method"]);
    8484        $curlFields = json_decode(stripslashes($_POST["curlFields"]), true);
     85        $curlFields = array_map( 'wp_filter_post_kses', $curlFields );
    8586
    86         if(isset($curlFields['user'])) {
    87             $curlFields['user']['email'] = sanitize_email($curlFields['user']['email']);
    88         }
    89 
    90         if(isset($curlFields['query'])) {
    91             $curlFields['query'] = sanitize_text_field($curlFields['query']);
    92         }
    93        
    94         if(isset($curlFields['preference_role_type'])) {
    95             $curlFields['preference_role_type'] = sanitize_text_field($curlFields['preference_role_type']);
    96         }
    97        
    98         if(isset($curlFields['content'])) {
    99             $curlFields['content'] = wp_filter_post_kses($curlFields['content']);
    100         }
    101        
    10287        if($method == 'GET') {
    10388            $url = $url.'?'.http_build_query($curlFields);
Note: See TracChangeset for help on using the changeset viewer.