WpDevArt Facebook comments - Version 2.5.2

Version Description

=

  • Security bug fixed.
Download this release

Release Info

Developer wpdevart
Plugin Icon 128x128 WpDevArt Facebook comments
Version 2.5.2
Comparing to
See all releases

Code changes from version 2.5.1 to 2.5.2

Files changed (4) hide show
  1. facebook-comment.php +1 -1
  2. includes/admin_menu.php +4 -4
  3. includes/library.php +6 -1
  4. readme.txt +5 -1
facebook-comment.php CHANGED
@@ -4,7 +4,7 @@
4
  * Plugin URI: https://wpdevart.com/wordpress-facebook-comments-plugin
5
  * Author URI: https://wpdevart.com
6
  * Description: Social (Facebook) comments plugin will help you to display Facebook Comments box on your website. You can use Facebook Comments on your pages/posts.
7
- * Version: 2.5.1
8
  * Author: wpdevart
9
  * License: GNU/GPLv3 http://www.gnu.org/licenses/gpl-3.0.html
10
  */
4
  * Plugin URI: https://wpdevart.com/wordpress-facebook-comments-plugin
5
  * Author URI: https://wpdevart.com
6
  * Description: Social (Facebook) comments plugin will help you to display Facebook Comments box on your website. You can use Facebook Comments on your pages/posts.
7
+ * Version: 2.5.2
8
  * Author: wpdevart
9
  * License: GNU/GPLv3 http://www.gnu.org/licenses/gpl-3.0.html
10
  */
includes/admin_menu.php CHANGED
@@ -137,20 +137,20 @@ class wpdevart_comment_admin_menu{
137
  if(isset($_POST['wpdevart_comment_options_nonce']) && wp_verify_nonce( $_POST['wpdevart_comment_options_nonce'],'wpdevart_comment_options_nonce')){
138
  foreach($this->databese_parametrs[$_POST['curent_page']] as $key => $value){
139
  if(isset($_POST[$key]))
140
- update_option($key,$_POST[$key]);
141
  else{
142
  $kk=0;
143
- printf($this->text_parametrs['error_in_saving'],$key);
144
  }
145
  }
146
  }
147
  else{
148
- die($this->text_parametrs['authorize_problem']);
149
  }
150
  if($kk==0){
151
  exit;
152
  }
153
- die($this->text_parametrs['parametrs_sucsses_saved']);
154
  }
155
 
156
  /*###################### The main menu function ##################*/
137
  if(isset($_POST['wpdevart_comment_options_nonce']) && wp_verify_nonce( $_POST['wpdevart_comment_options_nonce'],'wpdevart_comment_options_nonce')){
138
  foreach($this->databese_parametrs[$_POST['curent_page']] as $key => $value){
139
  if(isset($_POST[$key]))
140
+ update_option($key,sanitize_text_field($_POST[$key]));
141
  else{
142
  $kk=0;
143
+ printf($this->text_parametrs['error_in_saving'],esc_html($key));
144
  }
145
  }
146
  }
147
  else{
148
+ die(esc_html($this->text_parametrs['authorize_problem']));
149
  }
150
  if($kk==0){
151
  exit;
152
  }
153
+ die(esc_html($this->text_parametrs['parametrs_sucsses_saved']));
154
  }
155
 
156
  /*###################### The main menu function ##################*/
includes/library.php CHANGED
@@ -47,9 +47,14 @@ class wpdevart_comment_setting{
47
  "locale" => $params['locale'],
48
  );
49
  $comment_box_src=add_query_arg($comment_box_array_query,'https://www.facebook.com/plugins/comments.php');
 
 
 
 
 
50
 
51
  $output_code.='<div id="'.esc_attr($params['iframe_id']).'" style="width:'.( (strpos($params['width'],'%')===false)?esc_attr($params['width']).'px':esc_attr($params['width'])).';text-align:'.esc_attr($params['title_text_position']).';">
52
- <span style="padding: 10px;font-size:'.esc_attr($params['title_text_font_size']).'px;font-family:'.esc_attr($params['title_text_font_famely']).';color:'.esc_attr($params['title_text_color']).';">'.esc_html($params['title_text']).'</span>
53
  <div class="fb-comments" data-href="'.esc_url($params['curent_url']).'" data-order-by="'.esc_attr($params['order_type']).'" data-numposts="'.esc_attr($params['count_of_comments']).'" data-width="'.esc_attr($params['width']).'" style="display:block;"></div></div>';
54
  $output_code.= '<style>#'.esc_attr($params['iframe_id']).' span,#'.esc_attr($params['iframe_id']).' iframe{'.( (strpos($params['width'],'%')===false)?'':'width:'.esc_attr($params['width']).' !important;').'} #'.esc_attr($params['iframe_id']).' iframe{max-height: 100% !important;}</style>';
55
  return $output_code;
47
  "locale" => $params['locale'],
48
  );
49
  $comment_box_src=add_query_arg($comment_box_array_query,'https://www.facebook.com/plugins/comments.php');
50
+ $allowed_html = [
51
+ 'br' => [],
52
+ 'em' => [],
53
+ 'strong' => [],
54
+ ];
55
 
56
  $output_code.='<div id="'.esc_attr($params['iframe_id']).'" style="width:'.( (strpos($params['width'],'%')===false)?esc_attr($params['width']).'px':esc_attr($params['width'])).';text-align:'.esc_attr($params['title_text_position']).';">
57
+ <span style="padding: 10px;font-size:'.esc_attr($params['title_text_font_size']).'px;font-family:'.esc_attr($params['title_text_font_famely']).';color:'.esc_attr($params['title_text_color']).';">'.wp_kses($params['title_text'],$allowed_html).'</span>
58
  <div class="fb-comments" data-href="'.esc_url($params['curent_url']).'" data-order-by="'.esc_attr($params['order_type']).'" data-numposts="'.esc_attr($params['count_of_comments']).'" data-width="'.esc_attr($params['width']).'" style="display:block;"></div></div>';
59
  $output_code.= '<style>#'.esc_attr($params['iframe_id']).' span,#'.esc_attr($params['iframe_id']).' iframe{'.( (strpos($params['width'],'%')===false)?'':'width:'.esc_attr($params['width']).' !important;').'} #'.esc_attr($params['iframe_id']).' iframe{max-height: 100% !important;}</style>';
60
  return $output_code;
readme.txt CHANGED
@@ -3,7 +3,7 @@ Contributors: wpdevart
3
  Tags: Facebook, facebook comments, social comments, comments, wordpress comments
4
  Requires at least: 2.9
5
  Tested up to: 5.9
6
- Stable tag: 2.5.1
7
  License: GPLv3
8
  License URI: http://www.gnu.org/licenses/gpl-3.0.html
9
 
@@ -104,6 +104,10 @@ Yes, If you are logged in(Fb account) then you will see the moderate options for
104
 
105
  == Changelog ==
106
 
 
 
 
 
107
  = 2.5.1 ==
108
 
109
  * Bug fixed - Security Notice.
3
  Tags: Facebook, facebook comments, social comments, comments, wordpress comments
4
  Requires at least: 2.9
5
  Tested up to: 5.9
6
+ Stable tag: 2.5.2
7
  License: GPLv3
8
  License URI: http://www.gnu.org/licenses/gpl-3.0.html
9
 
104
 
105
  == Changelog ==
106
 
107
+ = 2.5.2 ==
108
+
109
+ * Security bug fixed.
110
+
111
  = 2.5.1 ==
112
 
113
  * Bug fixed - Security Notice.