WordPress.org
Get WordPress

Plugin Directory

Changeset 2933272


Ignore:
Timestamp:
07/03/2023 08:59:06 AM (3 years ago)
Author:
app360my
Message:

1.4.3

  • bugfix | Encode GET method URL query value for app360 register & login API
Location:
app360/trunk
Files:
3 edited

Legend:

Unmodified
Added
Removed

  • app360/trunk/app360.php

    r2910565 r2933272  
    1111 * Plugin URI: https://www.app360.my/
    1212 * Description: App360 CRM allows the integration between WooCommerce and App360
    13  * Version: 1.4.2
     13 * Version: 1.4.3
    1414 * Author: App360
    1515 * License: GPLv2 or later

  • app360/trunk/readme.txt

    r2910565 r2933272  
    44Requires at least: 5.6
    55Tested up to: 5.8
    6 Stable tag: 1.4.2
     6Stable tag: 1.4.3
    77License: GPLv2 or later
    88
    … …  
    3838
    3939== Changelog ==
     40= 1.4.3 =
     41*Release Date - 03 July 2023*
     42
     43* bugfix  | Encode GET method URL query value for app360 register & login API
     44
    4045= 1.4.2 =
    4146*Release Date - 10 May 2023*

  • app360/trunk/registration.php

    r2910565 r2933272  
    105105
    106106                $url = $app360_api_domain.'/client/register?';
    107                 $url .= 'email='.$email;
    108                 $url .= '&contact='.$contact;
    109                 $url .= '&password='.$password;
    110                 $url .= '&password_confirm='.$password;
    111                 $url .= '&fullname='.$username;
    112                 $url .= '&birthday='.$birthday;
     107                $url .= 'email='.urlencode($email);
     108                $url .= '&contact='.urlencode($contact);
     109                $url .= '&password='.urlencode($password);
     110                $url .= '&password_confirm='.urlencode($password);
     111                $url .= '&fullname='.urlencode($username);
     112                $url .= '&birthday='.urlencode($birthday);
    113113                $headers = array();
    114114                $headers['Content-type'] = 'application/json';
    … …  
    268268                    else{// could not find the phone number
    269269                        $url = $app360_api_domain.'/client/login?';
    270                         $url .= 'username='.sanitize_text_field($_POST['username']);
    271                         $url .= '&password='.$_POST['password'];
     270                        $url .= 'username='.urlencode(sanitize_text_field($_POST['username']));
     271                        $url .= '&password='.urlencode($_POST['password']);
    272272                        $headers = array();
    273273                        $headers['Content-type'] = 'application/json';
    … …  
    413413                    else{// could not find the email address
    414414                        $url = $app360_api_domain.'/client/login?';
    415                         $url .= 'username='.sanitize_text_field($_POST['username']);
    416                         $url .= '&password='.$_POST['password'];
     415                        $url .= 'username='.urlencode(sanitize_text_field($_POST['username']));
     416                        $url .= '&password='.urlencode($_POST['password']);
    417417                        $headers = array();
    418418                        $headers['Content-type'] = 'application/json';
Note: See TracChangeset for help on using the changeset viewer.