Context Navigation

Changeset 2718709

Timestamp:

05/05/2022 04:21:12 PM (4 years ago)

Author:

era404

Message:

Another security patch for admin pager, as suggested by Erwan Le Rousseau (thank you);

Location:

stafflist/trunk

Files:

-                      r2717317
+                      r2718709
 == Changelog ==
+= 3.1.7 =
+* Another security patch for admin pager, as suggested by Erwan Le Rousseau (thank you);
 = 3.1.6 =
 * Added wp_nonce_url and check_admin_referer to admin delete record feature to defend against CSRF, as suggested by Hassan Khan Yusufzai (thank you);

-                      r2717317
+                      r2718709
 Plugin URI: http://wordpress.org/plugins/stafflist/
 Description: A super simplified staff directory tool
 Version: 3.1.6
+Version: 3.1.7
 Author: era404
 Author URI: http://www.era404.com
 …
     global  $stafflisturl;
             $stafflisturl = STAFFLIST_URL . ($w ? "&search={$w}" : "") . ($s ? "&s={$s}" : "");
+            $stafflisturl = STAFFLIST_URL . ($w ? "&search=".esc_attr($w) : "") . ($s ? "&s=".esc_attr($s) : "");
     echo renderAdminPager($pg);

Note: See TracChangeset for help on using the changeset viewer.