WordPress.org
Get WordPress

Plugin Directory

Changeset 3039978


Ignore:
Timestamp:
02/23/2024 01:58:51 AM (2 years ago)
Author:
RewardsFuel
Message:

Added nonce validation and sanitization of key.

Location:
contests-from-rewards-fuel/trunk
Files:
13 edited

Legend:

Unmodified
Added
Removed

  • contests-from-rewards-fuel/trunk/Readme.txt

    r2959523 r3039978  
    55Requires at least: 3.0.1
    66Requires PHP: 5.4
    7 Tested up to: 6.3
    8 Stable tag: 2.0.62
     7Tested up to: 6.4.3
     8Stable tag: 2.0.63
    99License: MIT
    1010License URI: https://RewardsFuel.com/wp_license.txt
    … …  
    107107
    108108==Changelog==
    109 V 2.0.62 - Fixed some bugs
     109V 2.0.63 - Fixed some bugs
    110110
    111111==Upgrade Notice==

  • contests-from-rewards-fuel/trunk/contests-from-rewards-fuel.php

    r2959523 r3039978  
    1010 *
    1111 * @link              https://RewardsFuel.com
    12  * @since             2.0.62
     12 * @since             2.0.63
    1313 * @package           Contests_From_Rewards_Fuel
    1414 *
    … …  
    1717 * Plugin URI:        https://RewardsFuel.com
    1818 * Description:       Run contests which add incentive for subscribing and more
    19  * Version:           2.0.62
     19 * Version:           2.0.63
    2020 * Author:            Rewards Fuel LLC
    2121 * Author URI:        https://RewardsFuel.com
    … …  
    3333/**
    3434 * Currently plugin version.
    35  * Start at version 2.0.62 and use SemVer - https://semver.org
     35 * Start at version 2.0.63 and use SemVer - https://semver.org
    3636 * Rename this for your plugin and update it as you release new versions.
    3737 */
    38 define( 'CONTESTS_FROM_REWARDS_FUEL_VERSION', '2.0.62' );
     38define( 'CONTESTS_FROM_REWARDS_FUEL_VERSION', '2.0.63' );
    3939define( 'CONTESTS_FROM_REWARDS_FUEL_BASE_URL', plugin_dir_url(__FILE__) );
    4040define( 'CONTESTS_FROM_REWARDS_FUEL_FILE_ROOT',  plugin_dir_path( __FILE__ ) );
    … …  
    7474 * not affect the page life cycle.
    7575 *
    76  * @since    2.0.62
     76 * @since    2.0.63
    7777 */
    7878function run_contests_from_rewards_fuel() {

  • contests-from-rewards-fuel/trunk/includes/Class_rf.php

    r2959523 r3039978  
    99            $this->version = CONTESTS_FROM_REWARDS_FUEL_VERSION;
    1010        } else {
    11             $this->version = '2.0.62';
     11            $this->version = '2.0.63';
    1212        }
    1313        $this->cl = $this;

  • contests-from-rewards-fuel/trunk/includes/class-contests-from-rewards-fuel-activator.php

    r2959523 r3039978  
    55 *
    66 * @link       https://RewardsFuel.com
    7  * @since      2.0.62
     7 * @since      2.0.63
    88 *
    99 * @package    Contests_From_Rewards_Fuel
    … …  
    1616 * This class defines all code necessary to run during the plugin's activation.
    1717 *
    18  * @since      2.0.62
     18 * @since      2.0.63
    1919 * @package    Contests_From_Rewards_Fuel
    2020 * @subpackage Contests_From_Rewards_Fuel/includes
    … …  
    2828     * Long Description.
    2929     *
    30      * @since    2.0.62
     30     * @since    2.0.63
    3131     */
    3232    public function __construct() {

  • contests-from-rewards-fuel/trunk/includes/class-contests-from-rewards-fuel-admin.php

    r2959523 r3039978  
    55 *
    66 * @link       https://RewardsFuel.com
    7  * @since      2.0.62
     7 * @since      2.0.63
    88 *
    99 * @package    Contests_From_Rewards_Fuel
    … …  
    2424     * The array of actions registered with WordPress.
    2525     *
    26      * @since    2.0.62
     26     * @since    2.0.63
    2727     * @access   protected
    2828     * @var      array $actions The actions registered with WordPress to fire when the plugin loads.
    … …  
    5454    //added on activation hook
    5555    public static function ajax_handler(){
    56         if (!defined('DOING_AJAX'))
    57             return false;
     56        if (!defined('DOING_AJAX') || !wp_verify_nonce($_REQUEST['nonce'], 'rf_ajax_nonce')) {
     57            wp_die('Invalid nonce');
     58        }
     59
    5860        try {
    5961            $capability = "edit_posts";
    … …  
    6264                    Contests_From_Rewards_Fuel_Admin::get_contests();
    6365                }
    64                 if (isset($_REQUEST["update_rewards_fuel_api_key"])) {
    65                     update_option("rewards_fuel_api_key", $_REQUEST["update_rewards_fuel_api_key"]);
     66                if (isset($_REQUEST["update_rewards_fuel_api_key"]) && current_user_can('administrator')) {
     67                    $api_key = sanitize_text_field($_REQUEST["update_rewards_fuel_api_key"]);
     68                    update_option("rewards_fuel_api_key", $api_key);
    6669                    wp_die();
    6770                }

  • contests-from-rewards-fuel/trunk/includes/class-contests-from-rewards-fuel-deactivator.php

    r2959523 r3039978  
    55 *
    66 * @link       https://RewardsFuel.com
    7  * @since      2.0.62
     7 * @since      2.0.63
    88 *
    99 * @package    Contests_From_Rewards_Fuel
    … …  
    1616 * This class defines all code necessary to run during the plugin's deactivation.
    1717 *
    18  * @since      2.0.62
     18 * @since      2.0.63
    1919 * @package    Contests_From_Rewards_Fuel
    2020 * @subpackage Contests_From_Rewards_Fuel/includes
    … …  
    2828     * Long Description.
    2929     *
    30      * @since    2.0.62
     30     * @since    2.0.63
    3131     */
    3232    public static function deactivate() {

  • contests-from-rewards-fuel/trunk/includes/class-contests-from-rewards-fuel-entry-methods.php

    r2959523 r3039978  
    88 *
    99 * @link       https://RewardsFuel.com
    10  * @since      2.0.62
     10 * @since      2.0.63
    1111 *
    1212 * @package    Contests_From_Rewards_Fuel
    … …  
    2323 * version of the plugin.
    2424 *
    25  * @since      2.0.62
     25 * @since      2.0.63
    2626 * @package    Contests_From_Rewards_Fuel
    2727 * @subpackage Contests_From_Rewards_Fuel/includes
    … …  
    3838     * the public-facing side of the site.
    3939     *
    40      * @since    2.0.62
     40     * @since    2.0.63
    4141     */
    4242    public function __construct() {

  • contests-from-rewards-fuel/trunk/includes/class-contests-from-rewards-fuel-i18n.php

    r2959523 r3039978  
    88 *
    99 * @link       https://RewardsFuel.com
    10  * @since      2.0.62
     10 * @since      2.0.63
    1111 *
    1212 * @package    Contests_From_Rewards_Fuel
    … …  
    2020 * so that it is ready for translation.
    2121 *
    22  * @since      2.0.62
     22 * @since      2.0.63
    2323 * @package    Contests_From_Rewards_Fuel
    2424 * @subpackage Contests_From_Rewards_Fuel/includes
    … …  
    3030     * Load the plugin text domain for translation.
    3131     *
    32      * @since    2.0.62
     32     * @since    2.0.63
    3333     */
    3434    public function load_plugin_textdomain() {

  • contests-from-rewards-fuel/trunk/includes/class-contests-from-rewards-fuel-loader.php

    r2959523 r3039978  
    55 *
    66 * @link       https://RewardsFuel.com
    7  * @since      2.0.62
     7 * @since      2.0.63
    88 *
    99 * @package    Contests_From_Rewards_Fuel
    … …  
    2727     * The array of actions registered with WordPress.
    2828     *
    29      * @since    2.0.62
     29     * @since    2.0.63
    3030     * @access   protected
    3131     * @var      array $actions The actions registered with WordPress to fire when the plugin loads.
    … …  
    4343     * Add a new action to the collection to be registered with WordPress.
    4444     *
    45      * @since    2.0.62
     45     * @since    2.0.63
    4646     * @param    string $hook The name of the WordPress action that is being registered.
    4747     * @param    object $component A reference to the instance of the object on which the action is defined.
    … …  
    5858     * Add a new filter to the collection to be registered with WordPress.
    5959     *
    60      * @since    2.0.62
     60     * @since    2.0.63
    6161     * @param    string $hook The name of the WordPress filter that is being registered.
    6262     * @param    object $component A reference to the instance of the object on which the filter is defined.
    … …  
    7474     * collection.
    7575     *
    76      * @since    2.0.62
     76     * @since    2.0.63
    7777     * @access   private
    7878     * @param    array $hooks The collection of hooks that is being registered (that is, actions or filters).
    … …  
    102102     * Register the filters and actions with WordPress.
    103103     *
    104      * @since    2.0.62
     104     * @since    2.0.63
    105105     */
    106106    public function run()

  • contests-from-rewards-fuel/trunk/includes/class-contests-from-rewards-fuel.php

    r2959523 r3039978  
    88 *
    99 * @link       https://RewardsFuel.com
    10  * @since      2.0.62
     10 * @since      2.0.63
    1111 *
    1212 * @package    Contests_From_Rewards_Fuel
    … …  
    2323 * version of the plugin.
    2424 *
    25  * @since      2.0.62
     25 * @since      2.0.63
    2626 * @package    Contests_From_Rewards_Fuel
    2727 * @subpackage Contests_From_Rewards_Fuel/includes
    … …  
    3838     * the public-facing side of the site.
    3939     *
    40      * @since    2.0.62
     40     * @since    2.0.63
    4141     */
    4242    public function __construct() {
    … …  
    6767     * with WordPress.
    6868     *
    69      * @since    2.0.62
     69     * @since    2.0.63
    7070     * @access   private
    7171     */
    … …  
    107107     * with WordPress.
    108108     *
    109      * @since    2.0.62
     109     * @since    2.0.63
    110110     * @access   private
    111111     */
    … …  
    119119     * of the plugin.
    120120     *
    121      * @since    2.0.62
     121     * @since    2.0.63
    122122     * @access   private
    123123     */
    … …  
    133133     * of the plugin.
    134134     *
    135      * @since    2.0.62
     135     * @since    2.0.63
    136136     * @access   private
    137137     */
    … …  
    146146     * Run the loader to execute all of the hooks with WordPress.
    147147     *
    148      * @since    2.0.62
     148     * @since    2.0.63
    149149     */
    150150    public function run() {

  • contests-from-rewards-fuel/trunk/public/class-contests-from-rewards-fuel-public.php

    r2959523 r3039978  
    3030     * The ID of this plugin.
    3131     *
    32      * @since    2.0.62
     32     * @since    2.0.63
    3333     * @access   private
    3434     * @var      string    $plugin_name    The ID of this plugin.
    … …  
    3939     * Initialize the class and set its properties.
    4040     *
    41      * @since    2.0.62
     41     * @since    2.0.63
    4242     * @param      string    $plugin_name       The name of the plugin.
    4343     * @param      string    $version    The version of this plugin.
    … …  
    5454     * Register the stylesheets for the public-facing side of the site.
    5555     *
    56      * @since    2.0.62
     56     * @since    2.0.63
    5757     */
    5858    public function enqueue_styles() {
    … …  
    7575     * Register the JavaScript for the public-facing side of the site.
    7676     *
    77      * @since    2.0.62
     77     * @since    2.0.63
    7878     */
    7979    public function enqueue_scripts() {

  • contests-from-rewards-fuel/trunk/public/partials/contests-from-rewards-fuel-public-display.php

    r2959523 r3039978  
    77 *
    88 * @link       https://RewardsFuel.com
    9  * @since      2.0.62
     9 * @since      2.0.63
    1010 *
    1111 * @package    Contests_From_Rewards_Fuel

  • contests-from-rewards-fuel/trunk/uninstall.php

    r2959523 r3039978  
    2121 *
    2222 * @link       https://RewardsFuel.com
    23  * @since      2.0.62
     23 * @since      2.0.63
    2424 *
    2525 * @package    Contests_From_Rewards_Fuel
Note: See TracChangeset for help on using the changeset viewer.