WordPress.org
Get WordPress

Plugin Directory

Changeset 3199192


Ignore:
Timestamp:
11/29/2024 03:07:19 AM (16 months ago)
Author:
CodeBard
Message:

1.1.2

  • Added a nonce to ticket close/reopen button for more security
Location:
codebard-help-desk/trunk
Files:
4 edited

Legend:

Unmodified
Added
Removed

  • codebard-help-desk/trunk/index.php

    r2901981 r3199192  
    44    Plugin URI: https://codebard.com/codebard-help-desk-for-wordpress/
    55    Description: Extremely easy to use, unlimited Help Desk system that just works. Unlimited Tickets, Unlimited Agents, Unlimited Users, Unlimited Departments. Works out of the box and easily extensible.
    6     Version: 1.1.1
     6    Version: 1.1.2
    77    Author: CodeBard
    88    License: GPLv2
    … …  
    520520       
    521521        add_action( 'wp_ajax_'.$this->internal['prefix'].'dismiss_admin_notice', array( &$this, 'dismiss_admin_notice' ),10,1 );
    522        
    523         add_filter( 'pre_set_site_transient_update_plugins', array(&$this, 'check_for_update' ) );
    524                        
    525        
     522               
    526523        if($this->internal['requested_action']!='')
    527524        {

  • codebard-help-desk/trunk/plugin/includes/default_internal_vars.php

    r2901981 r3199192  
    1111        'plugin_id' => 'codebard-help-desk',
    1212        'prefix' => 'cb_p3_',
    13         'version' => '1.1.1',
     13        'version' => '1.1.2',
    1414        'plugin_name' => 'CodeBard Help Desk',
    1515       

  • codebard-help-desk/trunk/plugin/plugin.php

    r2643561 r3199192  
    3535    public function admin_init_p()
    3636    {
    37        
    38         // Updates are important - Add update nag if update exist
    39         add_filter( 'pre_set_site_transient_update_plugins', array(&$this, 'check_for_update' ),99 );
    4037       
    4138        // Do setup wizard if it was not done
    … …  
    257254       
    258255        $post=get_post($request[$this->internal['prefix'].'ticket_id']);
     256
     257        if ( !isset( $_REQUEST[$this->internal['prefix'] . 'ticket_status_toggle_nonce'] ) OR !wp_verify_nonce( sanitize_key( $_REQUEST[$this->internal['prefix'] . 'ticket_status_toggle_nonce'] ), 'cb_help_desk_ticket_status_toggle_nonce' ) ) {
     258            return;
     259        }
    259260       
    260261        $user_id = get_current_user_id();
    … …  
    46984699        $ticket_url = get_permalink($ticket_id);
    46994700
     4701        $ticket_status_toggle_nonce = wp_create_nonce( 'cb_help_desk_ticket_status_toggle_nonce' );
     4702
    47004703        if($this->get_ticket_status($ticket_id)=='open')
    47014704        {
    … …  
    47084711                $this->internal['prefix'].'ticket_id' => $ticket_id,
    47094712                $this->internal['prefix'].'action' => 'close_ticket',
     4713                $this->internal['prefix'].'ticket_status_toggle_nonce' => $ticket_status_toggle_nonce,
    47104714            ),
    47114715            $ticket_url );
     4716
    47124717        }
    47134718   
    … …  
    47224727                $this->internal['prefix'].'ticket_id' => $ticket_id,
    47234728                $this->internal['prefix'].'action' => 'reopen_ticket',
     4729                $this->internal['prefix'].'ticket_status_toggle_nonce' => $ticket_status_toggle_nonce,
    47244730            ),
    47254731            $ticket_url );
    … …  
    47494755       
    47504756    }
    4751     public function check_for_update($checked_data)
    4752     {
    4753             global $wp_version, $plugin_version, $plugin_base;
    4754        
    4755             if ( empty( $checked_data->checked ) ) {
    4756                 return $checked_data;
    4757             }
    4758 
    4759             if( isset( $checked_data->response[$this->internal['plugin_id'].'/index.php'] ) AND version_compare( $this->internal['version'], $checked_data->response[$this->internal['plugin_id'].'/index.php']->new_version, '<' ))
    4760             {
    4761                        
    4762             }
    4763             return $checked_data;
    4764        
    4765     }   
    47664757    public function upgrade_p($v1,$v2)
    47674758    {

  • codebard-help-desk/trunk/readme.txt

    r3051243 r3199192  
    77License: GPLv2
    88Requires at least: 4.0
    9 Tested up to: 6.2
    10 Stable Tag: 1.1.1
     9Tested up to: 6.7.1
     10Stable Tag: 1.1.2
    1111
    1212Multi Language Professional Support Ticket System with Unlimited Users, Unlimited Tickets, Unlimited Departments, Agents and many features
    … …  
    6161== Upgrade Notice ==
    6262
     63= 1.1.2 =
     64
     65* Added a nonce to ticket close/reopen button for more security
     66
    6367= 1.1.1 =
    6468
    … …  
    161165== Changelog ==
    162166
     167= 1.1.2 =
     168
     169* Added a nonce to ticket close/reopen button for more security
     170
    163171= 1.1.1 =
    164172
Note: See TracChangeset for help on using the changeset viewer.