fc2c5456e4
Implement directory privacy settings and add rate limiting
...
Adds configurable privacy options for member directories, allowing restrictions on visibility based on roles or login status. Introduces rate limiting for unauthenticated AJAX requests to prevent brute-force attacks or abuse.
2025-12-11 17:36:42 +02:00
4d2a992843
- allow webp image format
2025-09-22 12:48:39 +03:00
823f98906f
* sorted deprecated function;
2024-11-29 14:24:35 +02:00
51f36e4dd2
* release preparations;
2024-11-15 02:12:17 +02:00
234e200d20
* release preparations;
2024-11-15 02:11:10 +02:00
2086ddb53f
* added um_image_upload_validation hook for 3rd-party validation during upload images;
2024-11-15 02:06:03 +02:00
daa3ba87ef
* fixed #1583 ;
2024-11-14 01:08:30 +02:00
349939ed75
* fixed checking profile_photo and cover_photo fields editable condition on profile image upload/crop handlers;
2024-11-12 16:50:09 +02:00
61ea1b3e8d
* maybe fixed CVE-2024-10528;
2024-11-05 11:55:07 +02:00
73365aeea4
* maybe fix for init download routing;
2024-10-02 13:47:42 +03:00
6d183cc983
* added UM()->common()->filesystem() class from new UI version;
...
* prepared to release;
2024-09-27 17:34:47 +03:00
b40edd26e6
- wp-admin assets refactoring (in process);
2023-11-03 17:31:18 +02:00
bf5c6a6d04
- review ajax_resize_image();
2023-06-26 14:55:17 +03:00
5a2a23802d
- fix ajax_resize_image()
2023-06-22 12:35:31 +03:00
76dba58342
- changed clear PHP filter_input to sanitaizing functions;
2023-04-24 03:30:56 +03:00
034d9e8b43
- fixed dynamically declared variables inside the classes;
2023-04-17 20:16:15 +03:00
07e664be80
- intermediate results with sanitizing form handlers;
2021-06-29 02:51:54 +03:00
635fbbcb14
- fixed the conflict with Disable Blog plugin (made download_routing callback more prior);
2021-03-12 15:14:45 +02:00
585870bb3d
- code review for image rotation;
2020-07-31 00:51:45 +03:00
2dad3d2704
- Fixed "get_profile_photo_size" function (avoid PHP notice with array_combine )
...
- Fixed password reset/change form when other forms are initialized at the same page
- Fixed getting extension updates on multisites
- Deprecated JS event 'um_before_modal_removed', use wp.hooks action 'um_before_modal_removed' instead
2020-07-06 14:20:29 +03:00
72a1e9a7c3
- small code formatting;
2020-03-02 16:47:56 +02:00
057cf81d40
Fix typo error
2020-02-13 12:13:51 +08:00
230dd24816
fix 'um_resize_image' action at registration form
2020-01-27 15:22:28 +02:00
2401d06875
- added fix for getting image/file custom fields from $_POST when form isn't validated;
2020-01-16 10:25:30 +02:00
2496825590
- fixed vulnerability with uploading cover/profile photo for other user ID;
...
- re-written member directory meta queries;
- fixed search line additional slashes;
2020-01-08 15:19:24 +02:00
627bbb0fae
- fixed issue with avatars/cover photos upload without crop;
2019-10-21 23:39:19 +03:00
fcffa188a0
- fixed avatar styles;
...
- fixed member directory styles;
2019-10-15 23:04:27 +03:00
c81c52dda5
- added ability to set cover/avatar size from predefined sizes in Ultimate Member -> Settings -> General -> Uploads;
2019-10-10 17:22:24 +03:00
879f01f9ac
fix ajax_resize_image()
2019-08-20 19:37:50 +03:00
ad28039422
Issue: Profile photo upload in pop up gets stuck on 'processing'
...
Link: https://secure.helpscout.net/conversation/933974856/33012?folderId=1651531
2019-08-20 19:32:51 +03:00
16c1382491
- 2.0.46 release;
2019-05-10 20:33:14 +03:00
dc4382acd3
- security fixes;
...
- download last upgrades fixes;
2019-05-10 15:43:14 +03:00
ca1a908aae
- 2.0.46 pre-release;
2019-05-09 00:52:42 +03:00
5efb7e0247
Remove old files from 'temp' directory
2019-02-27 15:37:28 +02:00
21f266f407
- fixed upload dir on UM upload process for avoid the conflicts;
2019-02-08 11:43:01 +02:00
0ceab69793
- added nonce fields;
2018-11-21 14:01:18 +02:00
955e0afacb
- fixed files/images download;
2018-11-19 21:50:59 +02:00
d935f46e1c
- hotfixes;
2018-11-18 23:15:06 +02:00
80b8838c6c
- fixed image download with cache;
2018-10-25 11:46:06 +03:00
3f9d0b71eb
- fixed files download for sites with cache;
...
- changes in scripts enqueue;
2018-10-23 10:48:55 +03:00
4409ecebd1
- fixed small notice;
...
- fixed issue with download files with opened PHP buffers;
2018-10-18 10:09:29 +03:00
bb4aff7ee3
- fixed multisite file/image download;
2018-10-04 16:50:47 +03:00
432a1c6741
- fixed PHP errors
2018-10-02 21:50:07 +03:00
202bf57c53
- fixed small notices;
2018-09-27 23:30:34 +03:00
fc298c53b7
- removed some deprecated variables;
...
- changed the structure of the menu item's custom fields;
2018-09-17 08:29:33 +03:00
e807082059
- fixed files/images upload download;
2018-09-16 21:55:06 +03:00
da74fa7000
- file uploading/downloading fixes;
2018-09-14 14:39:05 +03:00
95d6fe5974
- fixed some users cache;
2018-08-09 11:31:56 +03:00
df2ece0f1d
- fixed member directory notices;
2018-08-09 11:03:36 +03:00
b52d61a05b
- fixed file uploading process;
2018-08-07 18:05:13 +03:00
Mykyta Synelnikov