WordPress.org
Get WordPress

Plugin Directory

Changeset 3019962


Ignore:
Timestamp:
01/10/2024 04:59:06 PM (2 years ago)
Author:
anderly
Message:

Release 1.3.8, see readme.txt for the changelog.

Location:
disable-user-login
Files:
8 edited
1 copied

Legend:

Unmodified
Added
Removed

  • disable-user-login/tags/1.3.8/assets/js/admin.js

    r2944363 r3019962  
    1717            var $this = $(this);
    1818            var action = $this.attr('data-dul-action');
     19            var nonce = $this.attr('data-dul-nonce');
    1920            var user_id = $this.data('dul-user-id');
    2021
    … …  
    2526                    action: action
    2627                },
    27                 nonce: SSDUL.nonces.quick_links
     28                nonce: nonce //SSDUL.nonces.quick_links
    2829            };
    2930

  • disable-user-login/tags/1.3.8/disable-user-login.php

    r2952359 r3019962  
    44 * Plugin URI:  http://wordpress.org/plugins/disable-user-login
    55 * Description: Provides the ability to disable user accounts and prevent them from logging in.
    6  * Version:     1.3.7
     6 * Version:     1.3.8
    77 *
    88 * Author:      Saint Systems

  • disable-user-login/tags/1.3.8/includes/class-ss-disable-user-login-plugin.php

    r2952359 r3019962  
    1616     * @var string
    1717     */
    18     private static $version = '1.3.7';
     18    private static $version = '1.3.8';
    1919
    2020    /**
    … …  
    166166                $label = _x( 'Enable', 'user row action', 'disable-user-login' );
    167167            }
    168             $actions[ 'disable_user_login' ] = "<a class='dul-quick-links' href='#' data-dul-action='$action' data-dul-user-id='$user_object->ID'>" . $label . '</a>';
     168            $nonce = wp_create_nonce( sprintf( 'ssdul_enable_disable_user_%s', $user_object->ID ) );
     169            $actions[ 'disable_user_login' ] = "<a class='dul-quick-links' href='#' data-dul-action='$action' data-dul-nonce='$nonce' data-dul-user-id='$user_object->ID'>" . $label . '</a>';
    169170        }
    170171        return $actions;
    … …  
    322323    public function enable_disable_user() {
    323324
    324         check_ajax_referer( 'ssdul_quick_links', 'nonce' );
     325        // check_ajax_referer( 'ssdul_quick_links', 'nonce' );
    325326
    326327        if ( empty( $_POST['data'] ) ) return;
    … …  
    331332
    332333        $action = $data['action'];
     334
     335        check_ajax_referer( sprintf( 'ssdul_enable_disable_user_%s', $user_id ), 'nonce' );
    333336
    334337        if ( ! $this->can_disable( $user_id ) ) {

  • disable-user-login/tags/1.3.8/readme.txt

    r2952359 r3019962  
    44Tags: users, user, login, account, disable
    55Requires at least: 4.7.0
    6 Tested up to: 6.3
     6Tested up to: 6.4.2
    77Requires PHP: 5.6
    8 Stable tag: 1.3.7
    9 Version: 1.3.7
     8Stable tag: 1.3.8
     9Version: 1.3.8
    1010License: GPLv3
    1111
    … …  
    4949
    5050== Changelog ==
     51
     52= 1.3.8 =
     53* Improved user-specific nonce validation.
    5154
    5255= 1.3.7 =

  • disable-user-login/trunk/assets/js/admin.js

    r2944363 r3019962  
    1717            var $this = $(this);
    1818            var action = $this.attr('data-dul-action');
     19            var nonce = $this.attr('data-dul-nonce');
    1920            var user_id = $this.data('dul-user-id');
    2021
    … …  
    2526                    action: action
    2627                },
    27                 nonce: SSDUL.nonces.quick_links
     28                nonce: nonce //SSDUL.nonces.quick_links
    2829            };
    2930

  • disable-user-login/trunk/disable-user-login.php

    r2952359 r3019962  
    44 * Plugin URI:  http://wordpress.org/plugins/disable-user-login
    55 * Description: Provides the ability to disable user accounts and prevent them from logging in.
    6  * Version:     1.3.7
     6 * Version:     1.3.8
    77 *
    88 * Author:      Saint Systems

  • disable-user-login/trunk/includes/class-ss-disable-user-login-plugin.php

    r2952359 r3019962  
    1616     * @var string
    1717     */
    18     private static $version = '1.3.7';
     18    private static $version = '1.3.8';
    1919
    2020    /**
    … …  
    166166                $label = _x( 'Enable', 'user row action', 'disable-user-login' );
    167167            }
    168             $actions[ 'disable_user_login' ] = "<a class='dul-quick-links' href='#' data-dul-action='$action' data-dul-user-id='$user_object->ID'>" . $label . '</a>';
     168            $nonce = wp_create_nonce( sprintf( 'ssdul_enable_disable_user_%s', $user_object->ID ) );
     169            $actions[ 'disable_user_login' ] = "<a class='dul-quick-links' href='#' data-dul-action='$action' data-dul-nonce='$nonce' data-dul-user-id='$user_object->ID'>" . $label . '</a>';
    169170        }
    170171        return $actions;
    … …  
    322323    public function enable_disable_user() {
    323324
    324         check_ajax_referer( 'ssdul_quick_links', 'nonce' );
     325        // check_ajax_referer( 'ssdul_quick_links', 'nonce' );
    325326
    326327        if ( empty( $_POST['data'] ) ) return;
    … …  
    331332
    332333        $action = $data['action'];
     334
     335        check_ajax_referer( sprintf( 'ssdul_enable_disable_user_%s', $user_id ), 'nonce' );
    333336
    334337        if ( ! $this->can_disable( $user_id ) ) {

  • disable-user-login/trunk/readme.txt

    r2952359 r3019962  
    44Tags: users, user, login, account, disable
    55Requires at least: 4.7.0
    6 Tested up to: 6.3
     6Tested up to: 6.4.2
    77Requires PHP: 5.6
    8 Stable tag: 1.3.7
    9 Version: 1.3.7
     8Stable tag: 1.3.8
     9Version: 1.3.8
    1010License: GPLv3
    1111
    … …  
    4949
    5050== Changelog ==
     51
     52= 1.3.8 =
     53* Improved user-specific nonce validation.
    5154
    5255= 1.3.7 =
Note: See TracChangeset for help on using the changeset viewer.