WordPress.org
Get WordPress

Plugin Directory

Changeset 2958751


Ignore:
Timestamp:
08/27/2023 12:52:24 AM (3 years ago)
Author:
cnfang
Message:

2.7.25

Location:
wxsync/trunk
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • wxsync/trunk/readme.txt

    r2957767 r2958751  
    33Donate link: http://std.cloud
    44Tags: 微信公众号,免费,公众号文章采集,数据采集,微信公众号采集
    5 Stable tag: 2.7.24
     5Stable tag: 2.7.25
    66Tested up to: 6.3
    77License: GPLv2 or later
    … …  
    3232
    3333== Changelog ==
    34 2.7.24 修复bug
     342.7.25 修复bug
    3535
    36362.7.22 可采集新模板

  • wxsync/trunk/wxsync.php

    r2957767 r2958751  
    44Plugin URI: http://std.cloud
    55Description: 标准云微信公众号文章免费采集、<strong>任意公众号自动采集付费购买</strong>
    6 Version: 2.7.24
     6Version: 2.7.25
    77Author: 标准云(std.cloud)
    88Author URI: http://std.cloud
    … …  
    2424$GLOBALS['wxsync_tab'] = '';
    2525$GLOBALS['wxsync_error'] = array();
    26 $GLOBALS['wxsync_ver'] = '2.7.24';
     26$GLOBALS['wxsync_ver'] = '2.7.25';
    2727$GLOBALS['wxsync_code'] = 0;
    2828
    … …  
    147147            }
    148148
    149             $req['wxsync_settoken'] = esc_sql($req['wxsync_settoken']);
     149            $req['wxsync_settoken'] = wxsync_xss($req['wxsync_settoken']);
    150150
    151151            $sql = "select * from {$table_prefix}wxsync_config where id = 1";
    … …  
    212212                $str = '';
    213213            }else{
    214                 $obj['host'] = esc_sql($req['host']);
    215                 $obj['port'] = esc_sql($req['port']);
    216                 $obj['username'] = esc_sql($req['username']);
    217                 $obj['password'] = esc_sql($req['password']);
     214                $obj['host'] = wxsync_xss($req['host']);
     215                $obj['port'] = wxsync_xss($req['port']);
     216                $obj['username'] = wxsync_xss($req['username']);
     217                $obj['password'] = wxsync_xss($req['password']);
    218218                $str = json_encode($obj);
    219219            }
    … …  
    242242
    243243
    244             $str = esc_sql($req['wxsync_autoproxyset_token']);
     244            $str = wxsync_xss($req['wxsync_autoproxyset_token']);
    245245
    246246
    … …  
    261261    }
    262262
     263}
     264
     265function wxsync_xss($str){
     266    $str = esc_sql($str);
     267    $str = htmlspecialchars($str);
     268    return $str;
    263269}
    264270
Note: See TracChangeset for help on using the changeset viewer.