WordPress.org
Get WordPress

Plugin Directory

Changeset 3254966


Ignore:
Timestamp:
03/12/2025 06:23:31 PM (13 months ago)
Author:
listamester
Message:

security fix

Location:
listamester/trunk
Files:
3 edited

Legend:

Unmodified
Added
Removed

  • listamester/trunk/includes/class-listamester.php

    r3225538 r3254966  
    4545     */
    4646    public function shortcode( $atts ) {
    47         $id     = $atts['id'];
     47        $id     = $this->safe_input($atts['id']);
    4848        $mode   = $atts['mode'];
    4949        $output = '';
    … …  
    186186    }
    187187
     188    private function safe_input($x) {
     189        if (!$x) return '';
     190        $ans = '';
     191        for ($i = 0; $i < strlen($x); $i++) {
     192            $c = $x[$i];
     193            if (ctype_alnum($c)) $ans = $ans . $c;
     194        }
     195        return $ans;
     196    }
     197   
    188198    /**
    189199     * Get resource.

  • listamester/trunk/listamester.php

    r3225538 r3254966  
    33 * Plugin Name: Listamester
    44 * Description: Hírlevélküldő, email marketing szolgáltatás WordPress-hez
    5  * Version: 2.3.5
     5 * Version: 2.3.6
    66 * Author: Listamester
    77 * Author URI: https://listamester.hu

  • listamester/trunk/readme.txt

    r3225538 r3254966  
    55Tested up to: 6.7.1
    66Requires PHP: 7.4.0
    7 Stable tag: 2.3.5
     7Stable tag: 2.3.6
    88License: GPLv2 or later
    99License URI: http://www.gnu.org/licenses/gpl-2.0.html
Note: See TracChangeset for help on using the changeset viewer.