WordPress.org
Get WordPress

Plugin Directory

Changeset 2750397


Ignore:
Timestamp:
06/30/2022 05:32:34 PM (4 years ago)
Author:
wptipsntricks
Message:

.1.9.6 commit

Location:
wp-video-lightbox/trunk
Files:
3 edited

Legend:

Unmodified
Added
Removed

  • wp-video-lightbox/trunk/readme.txt

    r2749984 r2750397  
    55Requires at least: 3.0
    66Tested up to: 6.0
    7 Stable tag: 1.9.5
     7Stable tag: 1.9.6
    88License: GPLv2 or later
    99
    … …  
    124124== Changelog ==
    125125
    126 = 1.9.5 =
     126= 1.9.6 =
    127127* Made some security improvements in the settings. The issues were reported by WPScan.
    128128

  • wp-video-lightbox/trunk/wp-video-lightbox.php

    r2749984 r2750397  
    22/*
    33Plugin Name: WP Video Lightbox
    4 Version: 1.9.5
     4Version: 1.9.6
    55Plugin URI: https://www.tipsandtricks-hq.com/?p=2700
    66Author: Tips and Tricks HQ, Ruhul Amin
    … …  
    1616    class WP_Video_Lightbox
    1717    {
    18         var $version = '1.9.5';
     18        var $version = '1.9.6';
    1919        var $db_version = '1.0';
    2020        var $plugin_url;

  • wp-video-lightbox/trunk/wpvl-settings.php

    r2749984 r2750397  
    124124            $wpvl_prettyPhoto->slideshow = sanitize_text_field($_POST["slideshow"]);
    125125            $wpvl_prettyPhoto->autoplay_slideshow = (isset($_POST["autoplay_slideshow"]))?'true':'false';
    126             $wpvl_prettyPhoto->opacity = sanitize_text_field($_POST["opacity"]);
     126            $wpvl_prettyPhoto->opacity = (float)$_POST["opacity"];
    127127            $wpvl_prettyPhoto->show_title = (isset($_POST["show_title"]))?'true':'false';
    128128            $wpvl_prettyPhoto->allow_resize = (isset($_POST["allow_resize"]))?'true':'false';
    129129            $wpvl_prettyPhoto->allow_expand = (isset($_POST["allow_expand"]))?'true':'false';
    130             $wpvl_prettyPhoto->default_width = sanitize_text_field($_POST["default_width"]);
    131             $wpvl_prettyPhoto->default_height = sanitize_text_field($_POST["default_height"]);
     130            $wpvl_prettyPhoto->default_width = absint($_POST["default_width"]);
     131            $wpvl_prettyPhoto->default_height = absint($_POST["default_height"]);
    132132            $wpvl_prettyPhoto->counter_separator_label = sanitize_text_field($_POST["counter_separator_label"]);
    133133            $wpvl_prettyPhoto->theme = sanitize_text_field($_POST["theme"]);
    134             $wpvl_prettyPhoto->horizontal_padding = sanitize_text_field($_POST["horizontal_padding"]);
     134            $wpvl_prettyPhoto->horizontal_padding = absint($_POST["horizontal_padding"]);
    135135            $wpvl_prettyPhoto->hideflash = (isset($_POST["hideflash"]))?'true':'false';
    136136            $wpvl_prettyPhoto->wmode = sanitize_text_field($_POST["wmode"]);
    … …  
    189189        <tr valign="top">
    190190        <th scope="row"><label for="slideshow"><?php _e('Slideshow', 'wp-video-lightbox')?></label></th>
    191         <td><input name="slideshow" type="text" id="slideshow" value="<?php echo $wpvl_prettyPhoto->slideshow; ?>" class="regular-text">
     191        <td><input name="slideshow" type="text" id="slideshow" value="<?php echo esc_attr($wpvl_prettyPhoto->slideshow); ?>" class="regular-text">
    192192        <p class="description"><?php echo sprintf(__('%s OR interval time in ms [default: %s]', 'wp-video-lightbox'), 'false', '5000')?></p></td>
    193193        </tr>
    … …  
    203203        <tr valign="top">
    204204        <th scope="row"><label for="opacity"><?php _e('Opacity', 'wp-video-lightbox')?></label></th>
    205         <td><input name="opacity" type="text" id="opacity" value="<?php echo $wpvl_prettyPhoto->opacity; ?>" class="regular-text">
     205        <td><input name="opacity" type="text" id="opacity" value="<?php echo esc_attr($wpvl_prettyPhoto->opacity); ?>" class="regular-text">
    206206        <p class="description"><?php echo sprintf(__('Value between %s and %s [default: %s]', 'wp-video-lightbox'), '0', '1', '0.8')?></p></td>
    207207        </tr>
    … …  
    323323        <tr valign="top">
    324324        <th scope="row"><label for="opacity"><?php _e('Overlay gallery max', 'wp-video-lightbox')?></label></th>
    325         <td><input name="overlay_gallery_max" type="text" id="overlay_gallery_max" value="<?php echo $wpvl_prettyPhoto->overlay_gallery_max; ?>" class="regular-text">
     325        <td><input name="overlay_gallery_max" type="text" id="overlay_gallery_max" value="<?php echo esc_attr($wpvl_prettyPhoto->overlay_gallery_max); ?>" class="regular-text">
    326326        <p class="description"><?php echo sprintf(__('Maximum number of pictures in the overlay gallery [default: %s]', 'wp-video-lightbox'), '30')?></p></td>
    327327        </tr>
Note: See TracChangeset for help on using the changeset viewer.