Commit Graph

2712 Commits

Author SHA1 Message Date
Mykyta Synelnikov 2c01e25b5c Enhance form preview options and improve code consistency
Added separate buttons for 'Live Preview Screen' and 'Live Preview Mobile' in the form builder for better user experience. Updated coding standards for consistency, including proper handling of PHP tags and escaping functions. These changes improve readability, maintainability, and enhance functionality.

Issue #1646
2025-02-12 18:44:46 +02:00
Mykyta Synelnikov aadad09ea9 Fix spacing for query arguments in action listener.
Adjusted spacing for better code readability and consistency in the query arguments within the class-actions-listener.php file. This change ensures the code aligns with coding standards without affecting functionality.
2025-02-12 18:26:37 +02:00
Mykyta Synelnikov 3ada6c71d9 Update PHP requirement and improve user action handling
Raised minimum PHP version to 7.0 and finalized the plugin version to 2.9.3. Introduced a centralized user actions array and replaced 'manage_options' capability with 'edit_users' for better permission handling. Optimized the nonce actions extension method for cleaner code.

* reviewed #1619
2025-02-12 18:25:26 +02:00
Mykyta Synelnikov c3755baa16 Merge pull request #1624 from ultimatemember/fix/um-erase-data
The "Erase of your data" layout (CU-86cxneg3d)
2025-02-12 17:58:06 +02:00
Mykyta Synelnikov 422d2b7c67 Refactor password handling to bypass wp_unslash.
Introduce a dedicated method to handle password fields securely, avoiding `wp_unslash` for these fields. This enhances consistency and security when processing form data across the plugin.
2025-02-12 17:47:19 +02:00
Mykyta Synelnikov cbc8c24b35 Merge pull request #1647 from ultimatemember/fix/password
Password set in Dashboard can't be used for UM login or vice versa (CU-86cxwy7ww)
2025-02-12 17:21:27 +02:00
Mykyta Synelnikov 38593400ba Merge pull request #1644 from ultimatemember/fix/updates-request
Fixes updates request
2025-02-12 17:16:56 +02:00
yuriinalivaiko 17d95a189b Task CU-86cxwy7ww
- password sanitize has been changed to the standard WordPress one.
2025-02-04 23:23:26 +02:00
Mykyta Synelnikov 4adbe19cbe * fixed CVE-2024-12276;
* reviewed using $wpdb and WPCS;
* set minimum required version to 6.2 due to using %i for $wpdb->prepare;
2025-02-03 16:17:37 +02:00
Mykyta Synelnikov a760a6242e * updated requests to site URL;
* WPCS;
2025-01-31 15:19:28 +02:00
Mykyta Synelnikov 865fbf83c2 * added honeypot scripts/styles via
`wp_add_inline_script()`, `wp_add_inline_style()`
2025-01-30 13:00:17 +02:00
Mykyta Synelnikov 4d43d94502 * related to https://github.com/ultimatemember/ultimatemember/commit/8ca44d02a02e887fc4ab9bcb8ea9ff18ab2c0413 2025-01-30 12:33:49 +02:00
Mykyta Synelnikov bb0a49e08a * update dropdown items texts on cover photo change/remove;
* WPCS;
2025-01-29 16:44:29 +02:00
Mykyta Synelnikov fce490f54b * update dropdown items texts on cover photo change/remove;
* WPCS;
2025-01-29 16:43:05 +02:00
Mykyta Synelnikov 4dd1be344e * backward compatibility;
* update dropdown items texts on profile photo change/remove;
* added escapers;
* WPCS;
2025-01-29 16:01:02 +02:00
Mykyta Synelnikov 0520a55cc4 * removed hidden inputs on view mode;
* handle data attribute instead of the hidden input;
* WPCS;
2025-01-29 14:49:47 +02:00
Mykyta Synelnikov 817bc4b2e3 * fixed #1636 2025-01-24 18:32:11 +02:00
Mykyta Synelnikov 5fc2cd54a4 * Reviewed #1634 2025-01-24 18:19:14 +02:00
yuriinalivaiko 5952c06c59 Task CU-86cxq9tuk
- changed Open Graph image size.
2025-01-19 14:58:59 +02:00
yuriinalivaiko 8bf8a0130b fixed "Download your data" and "Erase of your data" fields layout. 2025-01-17 16:03:51 +02:00
Mykyta Synelnikov b0b9f82ebe * fixed order_count meta table update 2025-01-15 12:02:08 +02:00
Mykyta Synelnikov 0624a634d2 * fixed money_spent meta table update 2025-01-14 17:36:20 +02:00
Mykyta Synelnikov 5cb6ae6dc5 * prepared to the release 2025-01-14 15:39:01 +02:00
Mykyta Synelnikov 27aeef42af * prepared to the release 2025-01-14 15:24:03 +02:00
Mykyta Synelnikov dc81fa44ae Merge pull request #1607 from ultimatemember/fix/remove_mobile_detect
Deprecates mobile detect library
2025-01-14 12:02:23 +02:00
Mykyta Synelnikov 5ebefde6b8 * fixed security issue CVE ID: CVE-2025-0308 2025-01-10 02:17:18 +02:00
Mykyta Synelnikov e5fe05503a * fixed security issue CVE ID: CVE-2025-0308
* fixed security issue CVE ID: CVE-2025-0318
2025-01-08 12:20:35 +02:00
Mykyta Synelnikov a0892e18aa * enhancements related to #1599; 2024-12-19 17:24:52 +02:00
Mykyta Synelnikov 1ba3809344 * using wp_is_mobile instead of MobileDetect library 2024-12-17 21:53:18 +02:00
ashubawork 6653769d72 - add a hooks for submitted registration data 2024-12-17 15:48:20 +02:00
Mykyta Synelnikov b41ac2bb96 * uncommented Zapier extension; 2024-12-16 12:35:32 +02:00
Mykyta Synelnikov 8a86737472 * updated methods for properly searchable code; 2024-12-03 14:30:01 +02:00
Mykyta Synelnikov 6f4f43f035 * added todos; 2024-11-29 15:54:55 +02:00
Mykyta Synelnikov 823f98906f * sorted deprecated function; 2024-11-29 14:24:35 +02:00
Mykyta Synelnikov b892a70756 * changed hook for initialization of email templates paths;
* removed `load_plugin_textdomain` due to (article)[https://make.wordpress.org/core/2024/10/21/i18n-improvements-6-7/#Enhanced-support-for-only-using-PHP-translation-files]
* deprecated `UM()->localize()` function;
* deprecated `um_language_textdomain` filter hook;
2024-11-29 14:09:23 +02:00
Mykyta Synelnikov f5d81f1a41 * added todos; 2024-11-29 12:57:18 +02:00
Mykyta Synelnikov 0e0977f37b * fixed #1595; 2024-11-28 17:49:48 +02:00
Mykyta Synelnikov 909dd7f987 * added is_new_ui() function; 2024-11-19 22:58:04 +02:00
Mykyta Synelnikov 8d33c43130 Fixes 'um_dispatch_email' action #1589
* Sending email notifications directly (without Action Scheduler) on user delete action;
* Changed activation handler priority for integration with Action Scheduler
* Added 'fetch_user_id' argument for fetching the necessary user before email sending when Action Scheduler is active.
2024-11-19 17:48:10 +02:00
Mykyta Synelnikov 1a11581d12 * fixed um_current_user_can(); 2024-11-15 11:16:55 +02:00
Mykyta Synelnikov 51f36e4dd2 * release preparations; 2024-11-15 02:12:17 +02:00
Mykyta Synelnikov 234e200d20 * release preparations; 2024-11-15 02:11:10 +02:00
Mykyta Synelnikov 2086ddb53f * added um_image_upload_validation hook for 3rd-party validation during upload images; 2024-11-15 02:06:03 +02:00
Mykyta Synelnikov e561557e22 * added user_id attribute to the hooks; 2024-11-14 15:54:42 +02:00
Mykyta Synelnikov daa3ba87ef * fixed #1583; 2024-11-14 01:08:30 +02:00
Mykyta Synelnikov b4becdbcf5 * reviewed #1582; 2024-11-13 17:20:52 +02:00
Mykyta Synelnikov 7414e10efd Merge pull request #1582 from ultimatemember/fix/fetch_user
Fix for fetch user
2024-11-13 17:04:08 +02:00
Mykyta Synelnikov 48371d1d06 * fixed #1581; 2024-11-13 16:42:26 +02:00
yuriinalivaiko 9d373c968e - fixed incorrect usage of the um_fetch_user function 2024-11-13 14:32:47 +02:00
Mykyta Synelnikov a5e0caf5f5 Merge pull request #1579 from ultimatemember/fix/rest_api_calling
Fixes allowed query variables
2024-11-13 00:37:48 +02:00