WordPress.org
Get WordPress

Plugin Directory

Changeset 3374556


Ignore:
Timestamp:
10/07/2025 04:01:33 PM (6 months ago)
Author:
AmauriC
Message:

V11.72

Location:
wpappninja/trunk
Files:
4 edited

Legend:

Unmodified
Added
Removed

  • wpappninja/trunk/inc/api/push.php

    r3361359 r3374556  
    2323function wpmobile_getOauthToken() {
    2424
    25     if ($_GET['pagename'] == 'wpappninja' && $_GET['type'] == 'googlebearer') {
     25    if (get_wpappninja_option('debugpush', '0') === '1' && $_GET['pagename'] == 'wpappninja' && $_GET['type'] == 'googlebearer') {
    2626        echo 'OPTION: '. get_option('wpmobile_firebase_config', '');
    2727        echo "\r\n";
    … …  
    3535    $authConfigString = @file_get_contents(get_option('wpmobile_firebase_config', ''));
    3636
    37     if ($_GET['pagename'] == 'wpappninja' && $_GET['type'] == 'googlebearer') {
     37    if (get_wpappninja_option('debugpush', '0') === '1' && $_GET['pagename'] == 'wpappninja' && $_GET['type'] == 'googlebearer') {
    3838        echo 'FILE: '. $authConfigString;
    3939        echo "\r\n";
    … …  
    8787    if (is_wp_error($response)) {
    8888        $responseText = false;
    89         error_log('Erreur WP_HTTP: ' . $response->get_error_message());
     89        //error_log('Erreur WP_HTTP: ' . $response->get_error_message());
    9090    } else {
    9191        $responseText = wp_remote_retrieve_body($response);
    9292    }
    9393
    94     if ($_GET['pagename'] == 'wpappninja' && $_GET['type'] == 'googlebearer') {
     94    if (get_wpappninja_option('debugpush', '0') === '1' && $_GET['pagename'] == 'wpappninja' && $_GET['type'] == 'googlebearer') {
    9595        echo 'RESPONSE: '. $responseText;
    9696        echo "\r\n";

  • wpappninja/trunk/inc/functions/shortcodes.php

    r3361270 r3374556  
    411411        echo get_avatar( "", 90 );
    412412
    413     $__user = ( isset($_POST['uname']) ? $_POST['uname'] : '' );
    414     $__email = ( isset($_POST['uemail']) ? $_POST['uemail'] : '' );
     413            $__user  = isset($_POST['uname'])  ? sanitize_text_field($_POST['uname'])  : '';
     414            $__email = isset($_POST['uemail']) ? sanitize_email($_POST['uemail']) : '';
    415415
    416416
    … …  
    423423            <p class="login-username">
    424424                <label for="uanme">'.__('Username', 'wpappninja').'</label>
    425                 <input style="width: 100%;padding: 10px;background: #fff;border: 1px solid #eee;" type="text" name="uname" class="input input-with-value" value="'.$__user.'" size="20">
     425                <input style="width: 100%;padding: 10px;background: #fff;border: 1px solid #eee;" type="text" name="uname" class="input input-with-value" value="'.esc_attr($__user).'" size="20">
    426426            </p>           
    427427            <p class="login-username">
    428428                <label for="uemail">'.__('Email', 'wpappninja').'</label>
    429                 <input style="width: 100%;padding: 10px;background: #fff;border: 1px solid #eee;" type="email" name="uemail" class="input input-with-value" value="'.$__email.'" size="20">
     429                <input style="width: 100%;padding: 10px;background: #fff;border: 1px solid #eee;" type="email" name="uemail" class="input input-with-value" value="'.esc_attr($__email).'" size="20">
    430430            </p>
    431431

  • wpappninja/trunk/readme.txt

    r3361359 r3374556  
    1212
    1313== Changelog ==
     14
     15= 11.72 =
     16* Fix XSS on the login form
    1417
    1518= 11.71 =

  • wpappninja/trunk/wpappninja.php

    r3361359 r3374556  
    44Plugin URI: https://wpmobile.app/
    55Description: Android and iOS mobile application. Easy setup, free test.
    6 Version: 11.71
     6Version: 11.72
    77Author: Amauri
    88Author URI: https://wpmobile.app/
    … …  
    1515
    1616// common
    17 define( 'WPAPPNINJA_VERSION'            , '11.71' );
     17define( 'WPAPPNINJA_VERSION'            , '11.72' );
    1818define( 'WPAPPNINJA_VERSION_APP'        , '100' );
    1919
Note: See TracChangeset for help on using the changeset viewer.