- 2.1.12 pre-release;

README.md

@@ -41,7 +41,7 @@ Support requests in issues on this repository will be closed on sight.
 GNU Version 2 or Any Later Version
 
 ## Releases
-[Official Release Version: 2.1.11](https://github.com/ultimatemember/ultimatemember/releases/tag/2.1.11).
+[Official Release Version: 2.1.12](https://github.com/ultimatemember/ultimatemember/releases/tag/2.1.12).
 
 ## Changelog
 [ From v1.0.0 to latest version ](https://wordpress.org/plugins/ultimate-member/changelog/).

includes/core/class-fields.php

@@ -2587,7 +2587,7 @@ if ( ! class_exists( 'um\core\Fields' ) ) {
 					
 					if ( $this->is_error( $key ) ) {
 						$output .= $this->field_error( $this->show_error( $key ) );
-					}else if ( $this->is_notice( $key ) ) {
+					} elseif ( $this->is_notice( $key ) ) {
 						$output .= $this->field_notice( $this->show_notice( $key ) );
 					}
 

includes/core/class-member-directory.php

@@ -842,7 +842,7 @@ if ( ! class_exists( 'um\core\Member_Directory' ) ) {
 						COUNT( DISTINCT meta_value ) as amount
 						FROM {$wpdb->usermeta}
 						WHERE meta_key = 'birth_date' AND
-						      meta_value != ''",
+							  meta_value != ''",
 					ARRAY_A );
 
 					if ( empty( $meta ) || ! isset( $meta['amount'] ) || $meta['amount'] === 1 ) {
@@ -2604,8 +2604,8 @@ if ( ! class_exists( 'um\core\Member_Directory' ) ) {
 			UM()->admin()->check_ajax_nonce();
 
 			// we can't use function "sanitize_key" because it changes uppercase to lowercase
-			$filter_key = filter_input( INPUT_POST, 'key', FILTER_SANITIZE_STRING );
-			$directory_id = filter_input( INPUT_POST, 'directory_id', FILTER_SANITIZE_NUMBER_INT );
+			$filter_key = sanitize_text_field( $_REQUEST['key'] );
+			$directory_id = absint( $_REQUEST['directory_id'] );
 
 			$html = $this->show_filter( $filter_key, array( 'form_id' => $directory_id ), false, true );
 

readme.txt

@@ -7,7 +7,7 @@ Tags: community, member, membership, user-profile, user-registration
 Requires PHP: 5.6
 Requires at least: 5.0
 Tested up to: 5.5.1
-Stable tag: 2.1.11
+Stable tag: 2.1.12
 License: GNU Version 2 or Any Later Version
 License URI: http://www.gnu.org/licenses/gpl-3.0.txt
 
@@ -155,6 +155,23 @@ The plugin works with popular caching plugins by automatically excluding Ultimat
 * To learn more about version 2.1 please see this [docs](https://docs.ultimatemember.com/article/1512-upgrade-2-1-0)
 * UM2.1+ is a significant update to the Member Directories' code base from 2.0.x. Please make sure you take a full-site backup with restore point before updating the plugin
 
+= 2.1.12: October 29, 2020 =
+
+* Enhancements:
+
+  - Added ratings required notice and warning
+
+* Bugfixes:
+
+  - Fixed conflict with other plugins with user 'status' in admin
+  - Fixed security patch for UM forms handlers
+  - Fixed security patch for handlers on the edit users' roles
+  - Fixed member directory admin filtering by the field with uppercase in 'key'
+  - Fixed member directory sorting by the full name
+  - Fixed registration form with not editable role field
+  - Fixed PHP notice for the filter without field's label
+  - Fixed style of the textarea field
+
 = 2.1.11: October 6, 2020 =
 
 * Bugfixes:

ultimate-member.php

@@ -3,7 +3,7 @@
 Plugin Name: Ultimate Member
 Plugin URI: http://ultimatemember.com/
 Description: The easiest way to create powerful online communities and beautiful user profiles with WordPress
-Version: 2.1.12-rc.1
+Version: 2.1.12
 Author: Ultimate Member
 Author URI: http://ultimatemember.com/
 Text Domain: ultimate-member