WordPress.org
Get WordPress

Plugin Directory

Changeset 2982510


Ignore:
Timestamp:
10/23/2023 09:48:11 AM (2 years ago)
Author:
mailmunch
Message:

bug fixed

Location:
mailmunch
Files:
8 edited
3 copied

Legend:

Unmodified
Added
Removed

  • mailmunch/tags/3.1.3/trunk/admin/class-mailmunch-admin.php

    r2210451 r2982510  
    130130
    131131    public function delete_widget() {
    132         $this->initiate_api();
    133         echo json_encode($this->mailmunch_api->deleteWidget($_POST['widget_id']));
     132    if (current_user_can('manage_options')) { // Check if the current user has 'manage_options' capability (typically administrators).
     133            $this->initiate_api();
     134            echo json_encode($this->mailmunch_api->deleteWidget($_POST['widget_id']));
     135    } else {
     136            echo json_encode(array('error' => 'Permission denied.')); // Optionally, you can return an error message.
     137    }
     138    exit;
     139    }
     140
     141    public function change_email_status() {
     142        if (current_user_can('manage_options')) { // Check if the current user has 'manage_options' capability (typically administrators).
     143            $this->initiate_api();
     144            echo json_encode($this->mailmunch_api->changeEmailStatus($_POST['email_id'], $_POST['email_status']));
     145        } else {
     146            echo json_encode(array('error' => 'Permission denied.')); // Optionally, you can return an error message.
     147        }
    134148        exit;
    135149    }
    136    
    137     public function change_email_status() {
    138         $this->initiate_api();
    139         echo json_encode($this->mailmunch_api->changeEmailStatus($_POST['email_id'], $_POST['email_status']));
    140         exit;
    141     }
    142    
     150
    143151    public function delete_email() {
    144         $this->initiate_api();
    145         echo json_encode($this->mailmunch_api->deleteEmail($_POST['email_id']));
     152        if (current_user_can('manage_options')) { // Check if the current user has 'manage_options' capability (typically administrators).
     153            $this->initiate_api();
     154            echo json_encode($this->mailmunch_api->deleteEmail($_POST['email_id']));
     155        } else {
     156            echo json_encode(array('error' => 'Permission denied.')); // Optionally, you can return an error message.
     157        }
    146158        exit;
    147159    }
    … …  
    263275     */
    264276    public function settings_page() {
    265         $this->initiate_api();
    266         if ($_POST) {
    267             $this->mailmunch_api->setSetting('auto_embed', $_POST['auto_embed']);
    268             $this->mailmunch_api->setSetting('landing_pages_enabled', $_POST['landing_pages_enabled']);
    269         }
    270         require_once(plugin_dir_path(__FILE__) . 'partials/mailmunch-settings.php');
     277    $this->initiate_api();
     278
     279    // Add nonce check
     280    if (isset($_POST['mailmunch_settings_nonce']) && wp_verify_nonce($_POST['mailmunch_settings_nonce'], 'mailmunch_settings_action')) {
     281            // Nonce is valid; process the form data
     282            if (isset($_POST['auto_embed'])) {
     283                $this->mailmunch_api->setSetting('auto_embed', $_POST['auto_embed']);
     284            }
     285            if (isset($_POST['landing_pages_enabled'])) {
     286                $this->mailmunch_api->setSetting('landing_pages_enabled', $_POST['landing_pages_enabled']);
     287            }
     288    }
     289
     290    require_once(plugin_dir_path(__FILE__) . 'partials/mailmunch-settings.php');
    271291    }
    272292

  • mailmunch/tags/3.1.3/trunk/admin/partials/mailmunch-settings.php

    r1623385 r2982510  
    11<form method="POST" id="mailmunch-settings">
     2<?php wp_nonce_field('mailmunch_settings_action', 'mailmunch_settings_nonce'); ?>
    23<?php
    34  $autoEmbed = $this->mailmunch_api->getSetting('auto_embed');

  • mailmunch/tags/3.1.3/trunk/includes/class-mailmunch.php

    r2210464 r2982510  
    2424define( 'MAILMUNCH_POST_TYPE', 'mailmunch_page' );
    2525define( 'MAILMUNCH_PLUGIN_DIRECTORY', 'mailmunch' );
    26 define( 'MAILMUNCH_VERSION', '3.1.2' );
     26define( 'MAILMUNCH_VERSION', '3.1.3' );
    2727
    2828/**

  • mailmunch/tags/3.1.3/trunk/mailmunch.php

    r2210464 r2982510  
    1717 * Plugin URI:        http://www.mailmunch.com
    1818 * Description:       The best free plugin to get more email subscribers. Beautiful signup forms and landing pages that integrate with MailChimp, Constant Contact, AWeber, Campaign Monitor and more.
    19  * Version:           3.1.2
     19 * Version:           3.1.3
    2020 * Author:            MailMunch
    2121 * Author URI:        http://www.mailmunch.com

  • mailmunch/tags/3.1.3/trunk/readme.txt

    r2791140 r2982510  
    33Tags: signup form, newsletter, newsletters, subscribe, popup, exit popup, exit intent, subscribers, subscription, popover, lightbox, analytics, collect email, optin, optin form, optin forms, double optin, list builder, email form, lead, leads, mailchimp, mailchimp form, mailchimp newsletter, mailchimp plugin, mailchimp signup, mailchimp signup forms, mailchimp signup form, mailchimp widget, mailchimp subscribe, constant contact, contact contact form, constant contact newsletter, constant contact plugin, constant contact signup, constant contact signup forms, constant contact signup form, constant contact widget, constant contact subscribe, aweber, aweber form, aweber forms, aweber signup form, aweber plugin
    44Requires at least: 3.0.1
    5 Tested up to: 6.0.2
    6 Stable tag: 3.1.2
     5Tested up to: 6.2.2
     6Stable tag: 3.1.3
    77License: GPLv2 or later
    88License URI: http://www.gnu.org/licenses/gpl-2.0.html

  • mailmunch/trunk/admin/class-mailmunch-admin.php

    r2210451 r2982510  
    130130
    131131    public function delete_widget() {
    132         $this->initiate_api();
    133         echo json_encode($this->mailmunch_api->deleteWidget($_POST['widget_id']));
     132    if (current_user_can('manage_options')) { // Check if the current user has 'manage_options' capability (typically administrators).
     133            $this->initiate_api();
     134            echo json_encode($this->mailmunch_api->deleteWidget($_POST['widget_id']));
     135    } else {
     136            echo json_encode(array('error' => 'Permission denied.')); // Optionally, you can return an error message.
     137    }
     138    exit;
     139    }
     140
     141    public function change_email_status() {
     142        if (current_user_can('manage_options')) { // Check if the current user has 'manage_options' capability (typically administrators).
     143            $this->initiate_api();
     144            echo json_encode($this->mailmunch_api->changeEmailStatus($_POST['email_id'], $_POST['email_status']));
     145        } else {
     146            echo json_encode(array('error' => 'Permission denied.')); // Optionally, you can return an error message.
     147        }
    134148        exit;
    135149    }
    136    
    137     public function change_email_status() {
    138         $this->initiate_api();
    139         echo json_encode($this->mailmunch_api->changeEmailStatus($_POST['email_id'], $_POST['email_status']));
    140         exit;
    141     }
    142    
     150
    143151    public function delete_email() {
    144         $this->initiate_api();
    145         echo json_encode($this->mailmunch_api->deleteEmail($_POST['email_id']));
     152        if (current_user_can('manage_options')) { // Check if the current user has 'manage_options' capability (typically administrators).
     153            $this->initiate_api();
     154            echo json_encode($this->mailmunch_api->deleteEmail($_POST['email_id']));
     155        } else {
     156            echo json_encode(array('error' => 'Permission denied.')); // Optionally, you can return an error message.
     157        }
    146158        exit;
    147159    }
    … …  
    263275     */
    264276    public function settings_page() {
    265         $this->initiate_api();
    266         if ($_POST) {
    267             $this->mailmunch_api->setSetting('auto_embed', $_POST['auto_embed']);
    268             $this->mailmunch_api->setSetting('landing_pages_enabled', $_POST['landing_pages_enabled']);
    269         }
    270         require_once(plugin_dir_path(__FILE__) . 'partials/mailmunch-settings.php');
     277    $this->initiate_api();
     278
     279    // Add nonce check
     280    if (isset($_POST['mailmunch_settings_nonce']) && wp_verify_nonce($_POST['mailmunch_settings_nonce'], 'mailmunch_settings_action')) {
     281            // Nonce is valid; process the form data
     282            if (isset($_POST['auto_embed'])) {
     283                $this->mailmunch_api->setSetting('auto_embed', $_POST['auto_embed']);
     284            }
     285            if (isset($_POST['landing_pages_enabled'])) {
     286                $this->mailmunch_api->setSetting('landing_pages_enabled', $_POST['landing_pages_enabled']);
     287            }
     288    }
     289
     290    require_once(plugin_dir_path(__FILE__) . 'partials/mailmunch-settings.php');
    271291    }
    272292

  • mailmunch/trunk/admin/partials/mailmunch-settings.php

    r1623385 r2982510  
    11<form method="POST" id="mailmunch-settings">
     2<?php wp_nonce_field('mailmunch_settings_action', 'mailmunch_settings_nonce'); ?>
    23<?php
    34  $autoEmbed = $this->mailmunch_api->getSetting('auto_embed');

  • mailmunch/trunk/includes/class-mailmunch.php

    r2210464 r2982510  
    2424define( 'MAILMUNCH_POST_TYPE', 'mailmunch_page' );
    2525define( 'MAILMUNCH_PLUGIN_DIRECTORY', 'mailmunch' );
    26 define( 'MAILMUNCH_VERSION', '3.1.2' );
     26define( 'MAILMUNCH_VERSION', '3.1.3' );
    2727
    2828/**

  • mailmunch/trunk/mailmunch.php

    r2210464 r2982510  
    1717 * Plugin URI:        http://www.mailmunch.com
    1818 * Description:       The best free plugin to get more email subscribers. Beautiful signup forms and landing pages that integrate with MailChimp, Constant Contact, AWeber, Campaign Monitor and more.
    19  * Version:           3.1.2
     19 * Version:           3.1.3
    2020 * Author:            MailMunch
    2121 * Author URI:        http://www.mailmunch.com
Note: See TracChangeset for help on using the changeset viewer.