WordPress.org
Get WordPress

Plugin Directory

Changeset 3149293


Ignore:
Timestamp:
09/10/2024 01:53:49 PM (19 months ago)
Author:
adreastrian
Message:

releasing v1.8.1

Location:
fluent-support
Files:
522 added
4 edited

Legend:

Unmodified
Added
Removed

  • fluent-support/trunk/app/Hooks/Handlers/EmailVerificationHandler.php

    r3136133 r3149293  
    1818        }
    1919
    20         $hash = wp_hash_password($formData['email']) . time() . '_' . $verifcationCode;
     20        $string = $formData['email'] . '-' . wp_generate_uuid4() . mt_rand(1, 99999999);
     21        $hash = wp_hash_password($string);
     22        $hash = sanitize_title($hash, '', 'display');
     23        $hash .= $formData['email'] . '-' . time();
     24
    2125        $data = array(
    2226            'login_hash'       => $hash,

  • fluent-support/trunk/app/Http/Controllers/CustomerPortalController.php

    r3136133 r3149293  
    3333        $userIP = $request->getIp();
    3434        $search = $request->getSafe('search', 'sanitize_text_field');
    35         $filters = $request->getSafe('filters', 'sanitize_text_field');
    36         $sorting = $request->getSafe('sorting', 'sanitize_text_field');
     35        $filters = $request->getSafe([
     36            'filters.product_id' => 'intval',
     37            'filters.status_type' => 'sanitize_text_field'
     38        ]);
     39
     40        $sorting = $request->getSafe([
     41            'sorting.sortBy' => 'sanitize_sql_orderby',
     42            'sorting.sortType' => 'sanitize_sql_orderby'
     43        ]);
    3744
    3845        try {

  • fluent-support/trunk/fluent-support.php

    r3136134 r3149293  
    33 * Plugin Name: Fluent Support
    44 * Description: The Ultimate Support Plugin For Your WordPress.
    5  * Version: 1.8.0
     5 * Version: 1.8.1
    66 * Author: WPManageNinja LLC
    77 * Author URI: https://wpmanageninja.com
    … …  
    1212*/
    1313
    14 define('FLUENT_SUPPORT_VERSION', '1.8.0');
    15 define('FLUENT_SUPPORT_PRO_MIN_VERSION', '1.8.0');
     14define('FLUENT_SUPPORT_VERSION', '1.8.1');
     15define('FLUENT_SUPPORT_PRO_MIN_VERSION', '1.8.1');
    1616define('FLUENT_SUPPORT_UPLOAD_DIR', 'fluent-support');
    1717define('FLUENT_SUPPORT_PLUGIN_URL', plugin_dir_url(__FILE__));

  • fluent-support/trunk/readme.txt

    r3136133 r3149293  
    44Requires at least: 5.6
    55Tested up to: 6.6
    6 Stable tag: 1.8.0
     6Stable tag: 1.8.1
    77Requires PHP: 7.3
    88License: GPLv2 or later
    … …  
    235235
    236236== Changelog ==
     237
     238= 1.8.1 (Date: Sep 10, 2024) =
     239* Fixed - Email verification vulnerability issue in signup
     240* Fixed - Customer portal ticket fetching vulnerability issue
    237241
    238242= 1.8.0 (Date: Aug 15, 2024) =
Note: See TracChangeset for help on using the changeset viewer.