Plugin Directory

Changeset 3424980


Ignore:
Timestamp:
12/22/2025 01:06:43 AM (3 months ago)
Author:
ivole
Message:

5.94.0

Location:
customer-reviews-woocommerce
Files:
875 added
5 edited

Legend:

Unmodified
Added
Removed
  • customer-reviews-woocommerce/trunk/class-ivole.php

    r3420486 r3424980  
    8585
    8686class Ivole {
    87     const CR_VERSION = '5.93.1';
     87    const CR_VERSION = '5.94.0';
    8888
    8989    public function __construct() {
  • customer-reviews-woocommerce/trunk/includes/reminders/class-cr-local-forms-ajax.php

    r2971571 r3424980  
    5454                        $req->order = new stdClass();
    5555                        $req->order->id = $record->orderId;
    56                         $req->order->display_name = $_POST['displayName'];
     56                        $req->order->display_name = sanitize_text_field( $_POST['displayName'] );
    5757                        $req->order->items = array();
    5858                        foreach( $db_items as $item ) {
     
    7474                        $db_items = json_encode( $db_items );
    7575                        $update_result = $wpdb->update( $table_name, array(
    76                             'displayName' => $_POST['displayName'],
     76                            'displayName' => $req->order->display_name,
    7777                            'items' => $db_items
    7878                        ), array( 'formId' => $_POST['formId'] ) );
  • customer-reviews-woocommerce/trunk/ivole.php

    r3420486 r3424980  
    44Description: Customer Reviews for WooCommerce plugin helps you get more customer reviews for your shop by sending automated reminders and coupons.
    55Plugin URI: https://wordpress.org/plugins/customer-reviews-woocommerce/
    6 Version: 5.93.1
     6Version: 5.94.0
    77Author: CusRev
    88Author URI: https://www.cusrev.com/business/
  • customer-reviews-woocommerce/trunk/readme.txt

    r3420486 r3424980  
    55Tested up to: 6.9
    66Requires PHP: 7.2
    7 Stable tag: 5.93.1
     7Stable tag: 5.94.0
    88License: GPLv3 or later
    99License URI: https://www.gnu.org/licenses/gpl.html
     
    235235== Changelog ==
    236236
     237= 5.94.0 =
     238* Bug fix: vulnerability in Ajax requests for local aggregated review forms
    237239= 5.93.1 =
    238240* Bug fix: incorrect version in the schema URL for Google Product Reviews
  • customer-reviews-woocommerce/trunk/templates/form-customer.php

    r2803660 r3424980  
    99    <div class="cr-form-customer-title-ctr">
    1010        <div class="cr-form-customer-title">
    11             <?php echo $cr_form_cust_title; ?>
     11            <?php echo esc_html( $cr_form_cust_title ); ?>
    1212        </div>
    1313    </div>
     
    1717                <div class="cr-form-customer-name-preview">
    1818                    <div class="cr-form-customer-name-preview-name">
    19                         <?php echo $cr_form_cust_preview_name; ?>
     19                        <?php echo esc_html( $cr_form_cust_preview_name ); ?>
    2020                    </div>
    2121                </div>
     
    2323                    <?php if ( $cr_form_cust_name ) : ?>
    2424                    <div class="cr-form-customer-name-option<?php if( $cr_form_cust_preview_name === $cr_form_cust_name ) echo ' cr-form-active-name' ?>">
    25                         <span><?php echo $cr_form_cust_name; ?></span>
     25                        <span><?php echo esc_html( $cr_form_cust_name ); ?></span>
    2626                    </div>
    2727                    <?php endif; ?>
    2828                    <?php if ( $cr_form_cust_name_w_dot ) : ?>
    2929                        <div class="cr-form-customer-name-option<?php if( $cr_form_cust_preview_name === $cr_form_cust_name_w_dot ) echo ' cr-form-active-name' ?>">
    30                             <span><?php echo $cr_form_cust_name_w_dot; ?></span>
     30                            <span><?php echo esc_html( $cr_form_cust_name_w_dot ); ?></span>
    3131                        </div>
    3232                    <?php endif; ?>
    3333                    <?php if ( $cr_form_cust_f_name ) : ?>
    3434                        <div class="cr-form-customer-name-option<?php if( $cr_form_cust_preview_name === $cr_form_cust_f_name ) echo ' cr-form-active-name' ?>">
    35                             <span><?php echo $cr_form_cust_f_name; ?></span>
     35                            <span><?php echo esc_html( $cr_form_cust_f_name ); ?></span>
    3636                        </div>
    3737                    <?php endif; ?>
    3838                    <div class="cr-form-customer-name-option<?php if( $cr_form_cust_preview_name === $cr_form_cust_anonymous ) echo ' cr-form-active-name' ?>">
    39                         <span><?php echo $cr_form_cust_anonymous; ?></span>
     39                        <span><?php echo esc_html( $cr_form_cust_anonymous ); ?></span>
    4040                    </div>
    4141                </div>
     
    4848</div>
    4949<div class="cr-form-submit">
    50     <span class="cr-form-submit-label"><?php echo $cr_form_submit; ?></span>
     50    <span class="cr-form-submit-label"><?php echo esc_html( $cr_form_submit ); ?></span>
    5151    <span class="cr-form-submit-loader"></span>
    5252</div>
Note: See TracChangeset for help on using the changeset viewer.