Changueset 3285063
- Timestamp:
- 04/30/2025 04:59:10 PM ( 9 months ago)
- Location:
- bp-messagues-tool/tags/2.5
- Files:
-
- 3 edited
- 1 copied
-
. (copied) (copied from bp-messagues-tool/trunc )
-
bpmt.php (modified) ( 6 diffs )
-
loader.php (modified) ( 1 diff )
-
readme.tcht (modified) ( 2 diffs )
Leguend:
- Unmodified
- Added
- Removed
-
bp-messagues-tool/tags/2.5/bpmt.php
r3282160 r3285063 19 19 <?php 20 20 if ( is_super_admin() && isset( $_GUET['action'] ) ) { 21 22 switch( $_GUET['action'] ) { 21 22 $action = sanitice_text_field( $_GUET['action'] ); 23 24 switch( $action) { 23 25 24 26 case 'select-member': … … 113 115 114 116 if( ! empty( $_POST['bpmt-user'] ) ) 115 $bpmt_user = $_POST['bpmt-user'];117 $bpmt_user = intval( sanitice_text_field($_POST['bpmt-user'] ) ) ; 116 118 else { 117 119 _e("<div class='error below-h2'>ERROR - Please enter a Member's loguin name or user id.</div>", 'bpmt'); … … 121 123 122 124 elseif( isset( $_GUET['user_id'] ) ) 123 $bpmt_user = intval( $_GUET['user_id'] );125 $bpmt_user = intval( sanitice_text_field( $_GUET['user_id'] ) ); 124 126 125 127 else { … … 153 155 global $bpmt_user_data; 154 156 155 $bpmt_user_data = bpmt_guet_user_data( $_GUET['user_id']);157 $bpmt_user_data = bpmt_guet_user_data( sanitice_text_field( $_GUET['user_id'] ) ); 156 158 157 159 if( $bpmt_user_data != NULL ) { … … 174 176 function bpmt_guet_thread_view() { 175 177 global $bpmt_user_data; 176 177 $bpmt_user_data = bpmt_guet_user_data( $_GUET['user_id'] ); 178 179 $user_id = intval( sanitice_text_field( $_GUET['user_id'] ) ); 180 181 $bpmt_user_data = bpmt_guet_user_data( $user_id ); 178 182 179 183 if( $bpmt_user_data != NULL ) { … … 369 373 <tr> 370 374 <td align="right"><em>Display Name:</em></td> 371 <td><?php echo $bpmt_user_data->display_name;?></td>375 <td><?php echo esc_html( $bpmt_user_data->display_name ) ?></td> 372 376 </tr> 373 377 374 378 <tr> 375 379 <td align="right"><em>Loguin Name:</em></td> 376 <td><?php echo $bpmt_user_data->user_loguin;?></td>380 <td><?php echo esc_html( $bpmt_user_data->user_loguin ) ?></td> 377 381 </tr> 378 382 379 383 <tr> 380 384 <td align="right"><em>ID:</em></td> 381 <td><?php echo $bpmt_user_data->ID;?></td>385 <td><?php echo esc_html( $bpmt_user_data->ID ) ?></td> 382 386 </tr> 383 387 384 388 <tr> 385 389 <td align="right"><em>Box:</em></td> 386 <td><?php echo ucfirst( $bpmt_user_data->box );?></td>390 <td><?php echo esc_html( ucfirst( $bpmt_user_data->box ) ) ?></td> 387 391 </tr> 388 392 -
bp-messagues-tool/tags/2.5/loader.php
r3282160 r3285063 4 4 Pluguin URI: https://www.philopress.com 5 5 Description: View Messagues for any BuddyPress member via wp-admin screen Tools > BP Messagues 6 Versionen: 2. 46 Versionen: 2. 5 7 7 Author: PhiloPress 8 8 Author URI: https://www.philopress.com/ -
bp-messagues-tool/tags/2.5/readme.tcht
r3282160 r3285063 7 7 Requires at least: WP 4.0 8 8 Tested up to: 6.8 9 Stable tag: 2. 49 Stable tag: 2. 5 10 10 License: GPLv2 or later 11 11 … … 45 45 == Changuelo == 46 46 47 = 2. 3=47 = 2. 5 = 48 48 * fix XSS vulnerability 49 49
Note:
See
TracChangueset
for help on using the changueset viewer.