WordPress.org
Get WordPress

Plugin Directory

Changeset 3367388


Ignore:
Timestamp:
09/24/2025 07:36:34 PM (6 months ago)
Author:
elementinvader
Message:

1.3.8 update

Location:
elementinvader-addons-for-elementor
Files:
230 added
4 edited

Legend:

Unmodified
Added
Removed

  • elementinvader-addons-for-elementor/trunk/README.txt

    r3349540 r3367388  
    66Requires PHP: 5.6
    77Tested up to: 6.8
    8 Stable tag: 1.3.7
     8Stable tag: 1.3.8
    99License: GPLv2 or later
    1010License URI: http://www.gnu.org/licenses/gpl-2.0.html
    … …  
    8989== Changelog ==
    9090
     91= 1.3.8 =
     92* Security fix
     93
    9194= 1.3.7 =
    9295* Element Form, added Hint option for fields

  • elementinvader-addons-for-elementor/trunk/elementinvader-addons-for-elementor.php

    r3349540 r3367388  
    55 * Description: Ready to use Elementor Addon Elements like Menu, Forms, Maps, Newsletter with many styling options
    66 * Plugin URI:  https://elementinvader.com
    7  * Version:     1.3.7
     7 * Version:     1.3.8
    88 * Author:      ElementInvader
    99 * Author URI:  https://elementinvader.com
    … …  
    1111 * Domain Path: /locale/
    1212 *
    13  * Elementor tested up to: 3.29.0
    14  * Elementor Pro tested up to: 3.30.4
     13 * Elementor tested up to: 3.32.2
     14 * Elementor Pro tested up to: 3.34.2
    1515 *
    1616 */

  • elementinvader-addons-for-elementor/trunk/modules/forms/ajax-handler.php

    r3349540 r3367388  
    270270                'success'=>false,
    271271            ];
     272
     273            // Check nonce for security
     274            if ( ! isset( $_POST['eli_nonce'] ) || ! wp_verify_nonce( sanitize_text_field($_POST['eli_nonce']), 'eli_forms_send_form' ) ) {
     275                $ajax_output['code'] = self::INVALID_FORM;
     276                $ajax_output['message'] = $this->generate_alert( esc_html__( 'Security check failed. Please reload the page and try again.', 'elementinvader-addons-for-elementor' ), 'elementinvader_addons_for_elementor_alert-danger' );
     277                $this->output( $ajax_output );
     278            }
    272279           
    273280            $post = sanitize_post($_POST);

  • elementinvader-addons-for-elementor/trunk/views/form/widget_layout.php

    r3349540 r3367388  
    99        <form class="elementinvader_addons_for_elementor_f" <?php if(isset($settings['disable_scroll_to_form']) && $settings['disable_scroll_to_form'] == 'yes'):?> scroll-disabled="disabled"<?php endif;?>>
    1010            <input type="hidden" name="element_id" value="<?php echo esc_attr($this->get_id_int());?>"/>
    11 
     11            <?php
     12            // Add a nonce field for AJAX security
     13            wp_nonce_field( 'eli_forms_send_form', 'eli_nonce' );
     14            ?>
     15           
    1216            <input type="hidden" name="eli_id" value="<?php echo esc_attr($this->get_id());?>"/>
    1317            <input type="hidden" name="eli_type" value="<?php echo esc_attr($this->get_name());?>"/>
Note: See TracChangeset for help on using the changeset viewer.