WordPress.org
Get WordPress

Plugin Directory

Changeset 3416129


Ignore:
Timestamp:
12/10/2025 08:54:54 AM (4 months ago)
Author:
tharkun69
Message:

1.0.3

  • Fix of CVE-2025-12824
  • Tested with Version 6.9
Location:
player-leaderboard/trunk
Files:
6 edited

Legend:

Unmodified
Added
Removed

  • player-leaderboard/trunk/admin/class-player-leaderboard-admin.php

    r2695478 r3416129  
    125125
    126126        add_submenu_page(
    127             null,
     127            $this->plugin_name,
    128128            'New Competition',
    129129            __('New Competition', 'player-leaderboard'),
    … …  
    134134
    135135        add_submenu_page(
    136             null,
     136            $this->plugin_name,
    137137            __('Player Leaderboard', 'player-leaderboard'),
    138138            __('Players', 'player-leaderboard'),
    … …  
    143143
    144144        add_submenu_page(
    145             null,
     145            $this->plugin_name,
    146146            'New Player',
    147147            __('New Player', 'player-leaderboard'),
    … …  
    152152
    153153        add_submenu_page(
    154             null,
     154            $this->plugin_name,
    155155            __('Player Leaderboard', 'player-leaderboard'),
    156156            __('Results', 'player-leaderboard'),
    … …  
    161161
    162162        add_submenu_page(
    163             null,
     163            $this->plugin_name,
    164164            'New Result',
    165165            __('New Result', 'player-leaderboard'),
    … …  
    170170
    171171        add_submenu_page(
    172             null,
     172            $this->plugin_name,
    173173            'New Results',
    174174            __('New Results', 'player-leaderboard'),
    … …  
    177177            array($this, 'load_admin_results_multiple')
    178178        );
     179    }
     180
     181    /**
     182     * Filter sub menu entries
     183     *
     184     * @since    1.0.3
     185     *
     186     */
     187    public function filter_submenu_file($submenu_file) {
     188
     189        remove_submenu_page($this->plugin_name, $this->plugin_name . '');
     190        remove_submenu_page($this->plugin_name, $this->plugin_name . '-competition');
     191        remove_submenu_page($this->plugin_name, $this->plugin_name . '-players');
     192        remove_submenu_page($this->plugin_name, $this->plugin_name . '-player');
     193        remove_submenu_page($this->plugin_name, $this->plugin_name . '-results');
     194        remove_submenu_page($this->plugin_name, $this->plugin_name . '-result');
     195        remove_submenu_page($this->plugin_name, $this->plugin_name . '-results-multiple');
     196
     197        return null;
    179198    }
    180199

  • player-leaderboard/trunk/admin/partials/player-leaderboard-competition.php

    r2696034 r3416129  
    180180                            <?php } else { ?>
    181181                                <?php switch ($competition->type) {
    182                                     case 1: $type = __('Female', 'player-leaderboard'); break;
    183                                     case 2: $type = __('Male', 'player-leaderboard'); break;
     182                                    case 1: $type = __('Single', 'player-leaderboard'); break;
     183                                    case 2: $type = __('Double', 'player-leaderboard'); break;
     184                                    case 3: $type = __('Team', 'player-leaderboard'); break;
    184185                                    default: $type = __('Unknown', 'player-leaderboard'); break;
    185186                                } ?>

  • player-leaderboard/trunk/includes/class-player-leaderboard.php

    r2695478 r3416129  
    9292     * @since    1.0.0
    9393     */
    94     public function load_plugin_textdomain() 
     94    public function load_plugin_textdomain()
    9595    {
    9696        load_plugin_textdomain(
    … …  
    112112    private function set_locale()
    113113    {
    114         add_action('plugins_loaded', array($this, 'load_plugin_textdomain'));
     114        add_action('init', array($this, 'load_plugin_textdomain'));
    115115    }
    116116
    … …  
    137137
    138138        add_action('plugins_loaded', array($plugin_admin, 'db_check'));
     139
     140        add_filter('submenu_file', array($plugin_admin, 'filter_submenu_file'));
    139141    }
    140142

  • player-leaderboard/trunk/player-leaderboard.php

    r2696034 r3416129  
    1717 * Plugin URI:        https://www.software-kunze.de/plugin-player-leaderboard/
    1818 * Description:       Management of a player leaderboard
    19  * Version:           1.0.2
     19 * Version:           1.0.3
    2020 * Author:            Alexander Kunze Software Consulting
    2121 * Author URI:        https://www.software-kunze.de
    … …  
    3737 * Rename this for your plugin and update it as you release new versions.
    3838 */
    39 define('Player_Leaderboard', '1.0.2');
     39define('Player_Leaderboard', '1.0.3');
    4040
    4141global $player_leaderboard_db_version;
    … …  
    301301function run_player_leaderboard()
    302302{
    303     $description = __('Management of a player leaderboard', 'player-leaderboard');
    304303    $plugin = new Player_Leaderboard();
    305304    $plugin->run();

  • player-leaderboard/trunk/public/class-player-leaderboard-public.php

    r2469356 r3416129  
    14041404     *
    14051405     * @since    1.0.0
     1406     *
     1407     * 1.0.3 - Fix of CVE-2025-12824 - No direct use of attribute 'mode' / sanitize_file_name
    14061408     */
    14071409    public function public_shortcode($atts, $content = null)
    … …  
    14171419
    14181420        ob_start();
    1419         include 'partials/player-leaderboard-public-'. $mode . '.php';
     1421        switch ($mode)
     1422        {
     1423            case 'ranking':
     1424                include 'partials/' . sanitize_file_name('player-leaderboard-public-ranking.php');
     1425                break;
     1426            case 'matrix':
     1427                include 'partials/' . sanitize_file_name('player-leaderboard-public-matrix.php');
     1428                break;
     1429            case 'standing':
     1430            default:
     1431                include 'partials/' . sanitize_file_name('player-leaderboard-public-standing.php');
     1432                break;
     1433        }
    14201434        return ob_get_clean();
    14211435    }

  • player-leaderboard/trunk/readme.txt

    r2696034 r3416129  
    44Tags: Player Leaderboard, Ranking, Badminton, Squash, Tennis, Table Tennis, Rangliste
    55Requires at least: 4.9
    6 Tested up to: 5.9.2
    7 Stable tag: 1.0.2
     6Tested up to: 6.9
     7Stable tag: 1.0.3
    88Requires PHP: 5.2.4
    99License: GPLv2 or later
    … …  
    4444== Changelog ==
    4545
     46= 1.0.3 =
     47* Fix of CVE-2025-12824
     48* Tested with Version 6.9
     49
     50= 1.0.2 =
     51Bugfix: Correct usage of button styles
     52
     53= 1.0.1 =
     54* Backend Redesign
     55
    4656= 1.0.0 =
    4757* Implemented basic features
    4858* Bugfix: Correct plugin title and icon
    4959
    50 = 1.0.1 =
    51 * Backend Redesign
    52 
    53 = 1.0.2 =
    54 Bugfix: Correct usage of button styles
    55 
    5660== Upgrade Notice ==
    5761
Note: See TracChangeset for help on using the changeset viewer.