10h30/ultimatemember
1
0
Fork 0
mirror of https://github.com/10h30/ultimatemember.git synced 2026-07-18 22:23:37 +09:00
Code Issues Packages Projects Releases Wiki Activity

- fixed some styles;

Browse Source 
- fixed modal fonticons close;
- fixed vulnerability with sanitizing $_POST;
This commit is contained in:
nikitasinelnikov
2020-02-14 11:54:12 +02:00
parent f0cf88ac32
commit 9698241362
9 changed files with 390 additions and 358 deletions
Download Patch File Download Diff File Expand all files Collapse all files
includes/admin/core/class-admin-enqueue.php
+1 -1
View File
@@ -270,7 +270,7 @@ if ( ! class_exists( 'um\admin\core\Admin_Enqueue' ) ) {
wp_register_style( 'um_admin_modal', $this->css_url . 'um-admin-modal.css', array( 'wp-color-picker' ), ultimatemember_version );
wp_enqueue_style( 'um_admin_modal' );
wp_register_script( 'um_admin_modal', $this->js_url . 'um-admin-modal.js', array( 'jquery', 'editor', 'wp-util', 'wp-color-picker', 'wp-tinymce' ), ultimatemember_version, true );
wp_register_script( 'um_admin_modal', $this->js_url . 'um-admin-modal.js', array( 'jquery', 'editor', 'wp-util', 'wp-color-picker', 'wp-tinymce', 'wp-i18n' ), ultimatemember_version, true );
wp_enqueue_script( 'um_admin_modal' );
}
includes/admin/core/class-admin-metabox.php
+5 -1
View File
@@ -20,6 +20,7 @@ if ( ! class_exists( 'um\admin\core\Admin_Metabox' ) ) {
*/
private $form_nonce_added = false;
private $directory_nonce_added = false;
private $custom_nonce_added = false;
/**
@@ -787,7 +788,10 @@ if ( ! class_exists( 'um\admin\core\Admin_Metabox' ) ) {
$path = str_replace('}','', $path );
include_once $path . 'includes/admin/templates/'. $box['id'] . '.php';
wp_nonce_field( basename( __FILE__ ), 'um_admin_save_metabox_custom_nonce' );
if ( ! $this->custom_nonce_added ) {
$this->custom_nonce_added = true;
wp_nonce_field( basename( __FILE__ ), 'um_admin_save_metabox_custom_nonce' );
}
}
includes/admin/core/class-admin-upgrade.php
+1 -1
View File
@@ -353,7 +353,7 @@ if ( ! class_exists( 'um\admin\core\Admin_Upgrade' ) ) {
exit('');
} else {
ob_start();
include_once $this->packages_dir . DIRECTORY_SEPARATOR . $_POST['pack'] . DIRECTORY_SEPARATOR . 'init.php';
include_once $this->packages_dir . DIRECTORY_SEPARATOR . sanitize_text_field( $_POST['pack'] ) . DIRECTORY_SEPARATOR . 'init.php';
ob_get_flush();
exit;
}