Changeset 3408763
- Timestamp:
- 12/03/2025 04:42:47 AM (4 months ago)
- Location:
- team-showcase-supreme/trunk
- Files:
-
- 10 edited
-
index.php (modified) (2 diffs)
-
readme.txt (modified) (2 diffs)
-
settings/helper/functions.php (modified) (1 diff)
-
settings/helper/team-member-save.php (modified) (3 diffs)
-
settings/preview-01-10.php (modified) (1 diff)
-
settings/preview-11-20.php (modified) (1 diff)
-
settings/preview-21-30.php (modified) (1 diff)
-
settings/preview-31-40.php (modified) (1 diff)
-
settings/preview-41-50.php (modified) (1 diff)
-
settings/team-member.php (modified) (5 diffs)
Legend:
- Unmodified
- Added
- Removed
-
team-showcase-supreme/trunk/index.php
r3400551 r3408763 9 9 Text Domain: team-showcase-supreme 10 10 Domain Path: /languages 11 Version: 8. 411 Version: 8.5 12 12 */ 13 13 if (!defined('ABSPATH')) … … 16 16 define('wpm_6310_plugin_url', plugin_dir_path(__FILE__)); 17 17 define('wpm_6310_plugin_dir_url', plugin_dir_url(__FILE__)); 18 define ('WPM_PLUGIN_CURRENT_VERSION', 8. 4);18 define ('WPM_PLUGIN_CURRENT_VERSION', 8.5); 19 19 define( 'WPM_6310_PLUGIN_LANGUAGE_PATH', dirname( plugin_basename( __FILE__ ) ) . '/languages' ); 20 20 -
team-showcase-supreme/trunk/readme.txt
r3400551 r3408763 4 4 Requires at least: 4.6.14 5 5 Tested up to: 6.8 6 Stable tag: 8. 46 Stable tag: 8.5 7 7 Requires PHP: 5.6 8 8 License: GPLv2 or later … … 183 183 184 184 == Changelog == 185 = 8.5 = 186 * FEATURE – Patch issue resolved for data import 187 185 188 = 8.4 = 186 189 * FEATURE – Patch issue resolved -
team-showcase-supreme/trunk/settings/helper/functions.php
r3396074 r3408763 3478 3478 } 3479 3479 3480 function wpm_6310_validate_input_list($fields, $value = '') {3481 $pattern = '/^(?:(?:c-\d+(?:##@@##)?(?:\d+(?:,\d+)*)?(?:##\|\|##)?|\d+(?:,\d+)*))+$/';3482 3483 if($value){3484 if (!preg_match($pattern, $value)) {3485 wp_die("Invalid format sss", 'Error', ['response' => 400]);3486 }3487 } else{3488 // Ensure $fields is always an array3489 if (!is_array($fields)) {3490 $fields = [$fields];3491 }3492 3493 foreach ($fields as $field) {3494 if (!isset($_POST[$field]) || !preg_match($pattern, $_POST[$field])) {3495 wp_die("Invalid format for {$field}.", 'Error', ['response' => 400]);3496 }3497 }3498 }3499 } -
team-showcase-supreme/trunk/settings/helper/team-member-save.php
r3396074 r3408763 3 3 // Combined validation checks 4 4 wpm_6310_validate_request('wpm_rearrange_action'); 5 wpm_6310_validate_input_list(['rearrange_list', 'order_type', 'rearrange_list_all']);6 5 7 6 $memberId = sanitize_text_field($_POST['rearrange_list']) . "||##||" . sanitize_text_field($_POST['order_type']) . "||##||" . sanitize_text_field($_POST['rearrange_list_all']); … … 26 25 $catOrder = implode(',', $catOrder); 27 26 } 28 wpm_6310_validate_input_list('', $catOrder);29 27 $wpdb->query($wpdb->prepare("UPDATE $style_table SET categoryids = %s WHERE id = %d", $catOrder, $id)); 30 28 } … … 116 114 } 117 115 } 118 wpm_6310_validate_input_list('', $memList[1]);119 wpm_6310_validate_input_list('', $mainStr);120 116 $newStr = $memIds . '||##||' . (isset($memList[1]) ? $memList[1] : 0) . '||##||' . $mainStr; 121 117 $wpdb->query($wpdb->prepare("UPDATE $style_table SET memberid = %s WHERE id = %d", $newStr, $id)); -
team-showcase-supreme/trunk/settings/preview-01-10.php
r3396074 r3408763 23 23 } 24 24 } 25 wpm_6310_validate_input_list('', $membersId);25 26 26 $wpdb->query($wpdb->prepare("INSERT INTO {$style_table} (name, style_name, css, slider, memberid) VALUES ( %s, %s, %s, %s, %s )", array($name, $style_name, $css, $slider, $membersId))); 27 27 $redirect_id = $wpdb->insert_id; -
team-showcase-supreme/trunk/settings/preview-11-20.php
r3396074 r3408763 24 24 } 25 25 26 wpm_6310_validate_input_list('', $membersId);26 27 27 $wpdb->query($wpdb->prepare("INSERT INTO {$style_table} (name, style_name, css, slider, memberid) VALUES ( %s, %s, %s, %s, %s )", array($name, $style_name, $css, $slider, $membersId))); 28 28 $redirect_id = $wpdb->insert_id; -
team-showcase-supreme/trunk/settings/preview-21-30.php
r3396074 r3408763 24 24 } 25 25 26 wpm_6310_validate_input_list('', $membersId);26 27 27 $wpdb->query($wpdb->prepare("INSERT INTO {$style_table} (name, style_name, css, slider, memberid) VALUES ( %s, %s, %s, %s, %s )", array($name, $style_name, $css, $slider, $membersId))); 28 28 $redirect_id = $wpdb->insert_id; -
team-showcase-supreme/trunk/settings/preview-31-40.php
r3396074 r3408763 23 23 } 24 24 25 wpm_6310_validate_input_list('', $membersId);25 26 26 $wpdb->query($wpdb->prepare("INSERT INTO {$style_table} (name, style_name, css, slider, memberid) VALUES ( %s, %s, %s, %s, %s )", array($name, $style_name, $css, $slider, $membersId))); 27 27 $redirect_id = $wpdb->insert_id; -
team-showcase-supreme/trunk/settings/preview-41-50.php
r3396074 r3408763 23 23 } 24 24 25 wpm_6310_validate_input_list('', $membersId);25 26 26 $wpdb->query($wpdb->prepare("INSERT INTO {$style_table} (name, style_name, css, slider, memberid) VALUES ( %s, %s, %s, %s, %s )", array($name, $style_name, $css, $slider, $membersId))); 27 27 $redirect_id = $wpdb->insert_id; -
team-showcase-supreme/trunk/settings/team-member.php
r3396074 r3408763 71 71 $selMember = $wpdb->get_row($wpdb->prepare("SELECT * FROM $member_table WHERE id = %d ", $_POST['member_id']), ARRAY_A); 72 72 if($selMember['iconids']){ 73 wpm_6310_validate_input_list('', $selMember['iconids']);74 75 73 $iconUrl = explode("||||", $selMember['iconurl']); 76 74 $iconIds = explode(",", $selMember['iconids']); … … 157 155 $iconUrl = ""; 158 156 159 if (isset($_POST['icon_link'] ) && $_POST['icon_link']) {157 if (isset($_POST['icon_link'], $_POST['icon_name']) && is_array($_POST['icon_link']) && is_array($_POST['icon_name'])) { 160 158 $icon_name = array_map('sanitize_text_field', $_POST['icon_name']); 161 159 $icon_link = array_map('sanitize_text_field', $_POST['icon_link']); … … 175 173 $myData[8] = $iconIds; 176 174 $myData[9] = $iconUrl; 177 wpm_6310_validate_input_list('', $iconIds);178 175 179 176 $catList = ""; … … 285 282 $iconIds = ""; 286 283 $iconUrl = ""; 287 if (isset($_POST['icon_link'] ) && $_POST['icon_link']) {284 if (isset($_POST['icon_link'], $_POST['icon_name']) && is_array($_POST['icon_link']) && is_array($_POST['icon_name'])) { 288 285 $icon_name = array_map('sanitize_text_field', $_POST['icon_name']); 289 286 $icon_link = array_map('sanitize_text_field', $_POST['icon_link']); … … 303 300 $myData[8] = $iconIds; 304 301 $myData[9] = $iconUrl; 305 wpm_6310_validate_input_list('', $iconIds);306 302 307 303 $catList = "";
Note: See TracChangeset
for help on using the changeset viewer.