Context Navigation

Changeset 3313475

Timestamp:

06/17/2025 07:02:07 PM (9 months ago)

Author:

dogrow

Message:

Security updated

Location:

falling-cherry-flower/trunk

Files:

-                      r3313468
+                      r3313475
 == ChangeLog ==
+= Version 1.1 =
+* Security updated
 = Version 1.0 =

-                      r1726492
+                      r3313475
 Plugin URI: https://php.dogrow.net/wordpressplugin/falling-cherry-flower/
 Description: Falling cherry flower effect on the screen
 Version: 1.0
+Version: 1.1
 Author: DOGROW.NET
 Author https://php.dogrow.net/
 …
     // type
     if(isset($this->m_shortcode_arg['type'])){
+      if(file_exists($path_me.'/img/'.$this->m_shortcode_arg['type'])){
+        $ary_prm['type'] = $this->m_shortcode_arg['type'];
+      $type = basename( sanitize_text_field( $this->m_shortcode_arg['type'] ) );
+      if(preg_match( '/^[a-zA-Z0-9_\-]+$/', $type)){
+        if(file_exists($path_me.'/img/'.$type)){
+          $ary_prm['type'] = $type;
+        }
+      }
+    }
 …
     // speed
     if(isset($this->m_shortcode_arg['speed'])){
       $speed = $this->m_shortcode_arg['speed'];
+      $speed = intval( $this->m_shortcode_arg['speed'] );
       if((0 <= $speed) && ($speed <= 5)){
         $ary_prm['speed'] = $speed;
 …
+    }
     //------------------------------------------------------------------
+    $img_dir = plugins_url('img/'.$ary_prm['type'], __FILE__).'/';
+    $img_dir = plugins_url( 'img/'.$ary_prm['type'].'/', __FILE__ );
+    $img_dir = esc_url_raw( trailingslashit( $img_dir ) );    // 出力前にエスケープ
     //------------------------------------------------------------------
 echo <<< EOM

Note: See TracChangeset for help on using the changeset viewer.