WordPress.org
Get WordPress

Plugin Directory

Changeset 3050928


Ignore:
Timestamp:
03/14/2024 09:48:24 AM (2 years ago)
Author:
scribit
Message:

Version 1.2.1

Location:
proofreading/trunk
Files:
6 edited

Legend:

Unmodified
Added
Removed

  • proofreading/trunk/README.txt

    r3049591 r3050928  
    55Requires at least: 4.0
    66Tested up to: 6.4.3
    7 Stable tag: 1.2
     7Stable tag: 1.2.1
    88Requires PHP: 5.6
    99License: GPLv2 or later
    … …  
    6767== Changelog ==
    6868
     69= 1.2.1 =
     70* Security fixes
     71* Added prepare statements to queries
     72
    6973= 1.2 =
    7074* Security fixes

  • proofreading/trunk/admin/includes/class-ajax-handler.php

    r2978549 r3050928  
    3535            wp_send_json_error();
    3636        }
     37
     38        if (!isset($_REQUEST['language']) || strlen($_REQUEST['language']) > 2) return;
    3739       
    3840        require_once plugin_dir_path( __FILE__ ) . 'class-languagetool.php';
    … …  
    4042       
    4143        global $wpdb;
    42         $included_rules = $wpdb->get_var("SELECT `included_rules` FROM {$wpdb->prefix}proofreading_rules_settings WHERE lang_code = '" . $_REQUEST['language'] . "'");
     44        $sql = $wpdb->prepare("SELECT `included_rules` FROM {$wpdb->prefix}proofreading_rules_settings WHERE lang_code = %s", $_REQUEST['language']);
     45        $included_rules = $wpdb->get_var($sql);
    4346       
    4447        $body = $lt->check($_REQUEST['post_text'], $_REQUEST['language'], $included_rules);
    … …  
    6063        $lang = esc_sql($_POST['lang_code']);
    6164       
    62         $rules = $wpdb->get_results("SELECT `name`, `key`
     65        $sql = $wpdb->prepare("SELECT `name`, `key`
    6366            FROM {$wpdb->prefix}proofreading_rules
    64             WHERE lang_code = '$lang'
    65             ORDER BY `name` ASC", ARRAY_A);
     67            WHERE lang_code = %s
     68            ORDER BY `name` ASC", $lang);
     69        $rules = $wpdb->get_results($sql, ARRAY_A);
    6670           
    67         $included_rules = $wpdb->get_var("SELECT `included_rules` FROM {$wpdb->prefix}proofreading_rules_settings
    68             WHERE lang_code = '$lang'");
     71        $sql = $wpdb->prepare("SELECT `included_rules`
     72            FROM {$wpdb->prefix}proofreading_rules_settings
     73            WHERE lang_code = %s", $lang);
     74        $included_rules = $wpdb->get_var($sql);
    6975       
    7076        $rules_included_keys = array();

  • proofreading/trunk/admin/partials/proofreading-admin-display.php

    r3049309 r3050928  
    5757                global $wpdb;
    5858
    59                 $rules = $wpdb->get_results("SELECT `name`, `key`
     59                $_POST['proofreading-language-rules-settings'] = esc_sql($_POST['proofreading-language-rules-settings']);
     60
     61                $sql = $wpdb->prepare("SELECT `name`, `key`
    6062                    FROM {$wpdb->prefix}proofreading_rules
    61                     WHERE lang_code = '". $_POST['proofreading-language-rules-settings'] ."'
    62                     ORDER BY `name` ASC", ARRAY_A);
     63                    WHERE lang_code = %s
     64                    ORDER BY `name` ASC", $_POST['proofreading-language-rules-settings']);
     65                $rules = $wpdb->get_results($sql, ARRAY_A);
    6366                $rules = array_column( $rules, 'key' );
    6467               
    … …  
    6972                }
    7073
    71                 $wpdb->delete( "{$wpdb->prefix}proofreading_rules_settings", array( 'lang_code' => esc_attr($_POST['proofreading-language-rules-settings']) ), array( '%s' ) );
     74                $wpdb->delete( "{$wpdb->prefix}proofreading_rules_settings", array( 'lang_code' => $_POST['proofreading-language-rules-settings'] ), array( '%s' ) );
    7275                $wpdb->insert(
    7376                    "{$wpdb->prefix}proofreading_rules_settings",
    7477                    array(
    75                         'lang_code' => esc_attr($_POST['proofreading-language-rules-settings']),
     78                        'lang_code' => $_POST['proofreading-language-rules-settings'],
    7679                        'included_rules' => implode(',', $_POST['rules'])
    7780                    ),

  • proofreading/trunk/includes/class-proofreading-activator.php

    r2205884 r3050928  
    7171            if ( $i = strrpos( $wp_lang, '-' ) ) $wp_lang = substr( $wp_lang, 0, $i );
    7272           
    73             $res = $wpdb->get_col("SELECT code FROM `{$wpdb->prefix}proofreading_languages` WHERE longCode = '$wp_lang';");
     73            $sql = $wpdb->prepare("SELECT code
     74                FROM `{$wpdb->prefix}proofreading_languages`
     75                WHERE longCode = %s", $wp_lang);
     76            $res = $wpdb->get_col($sql);
     77
    7478            if ( count($res) > 0 ) update_option( 'proofreading-language-default', $res[0]);
    75            
    7679        }
    7780       
    7881        update_option( PROOFREADING_VERSION_SETTINGNAME , PROOFREADING_VERSION );
    79        
    8082    }
    81 
    8283}

  • proofreading/trunk/proofreading-consts.php

    r3049309 r3050928  
    88 */
    99
    10 define( 'PROOFREADING_VERSION', '1.2' );
     10define( 'PROOFREADING_VERSION', '1.2.1' );
    1111
    1212define( 'PROOFREADING_VERSION_SETTINGNAME', 'proofreading-version' );   // From version 1.0.7

  • proofreading/trunk/proofreading.php

    r3049309 r3050928  
    1616 * Plugin URI:        https://www.scribit.it/en/wordpress-plugins/proofreading-wordpress-plugin-corrects-your-errors/
    1717 * Description:       Proofreading allows you to correct texts on your Wordpress site. This plugin allows you to proofread in 30 different languages on articles and pages of your site also providing useful tips for the improvement of your writings.
    18  * Version:           1.2
     18 * Version:           1.2.1
    1919 * Author:            Scribit
    2020 * Author URI:        https://www.scribit.it/
Note: See TracChangeset for help on using the changeset viewer.