Contact Form Email - Version 1.3.12

Version Description

  • Code improvements
Download this release

Release Info

Developer codepeople
Plugin Icon 128x128 Contact Form Email
Version 1.3.12
Comparing to
See all releases

Code changes from version 1.3.11 to 1.3.12

Files changed (4) hide show
  1. README.txt +5 -2
  2. cp-admin-int-list.inc.php +8 -0
  3. cp-admin-int-message-list.inc.php +15 -1
  4. form-to-email.php +1 -1
README.txt CHANGED
@@ -456,6 +456,9 @@ When you click a field already added into the contact form builder area, you can
456
 
457
  == Changelog ==
458
 
 
 
 
459
  = 1.3.11 =
460
  * Fixed captcha conflict
461
 
@@ -1090,5 +1093,5 @@ When you click a field already added into the contact form builder area, you can
1090
 
1091
  == Upgrade Notice ==
1092
 
1093
- = 1.3.11 =
1094
- * Fixed captcha conflict
456
 
457
  == Changelog ==
458
 
459
+ = 1.3.12 =
460
+ * Code improvements
461
+
462
  = 1.3.11 =
463
  * Fixed captcha conflict
464
 
1093
 
1094
  == Upgrade Notice ==
1095
 
1096
+ = 1.3.12 =
1097
+ * Code improvements
cp-admin-int-list.inc.php CHANGED
@@ -142,6 +142,12 @@ else if (isset($_GET['ac']) && $_GET['ac'] == 'st')
142
  }
143
  else if (isset($_POST["cp_cfte_rep_enable"]))
144
  {
 
 
 
 
 
 
145
  update_option( 'cp_cfte_rep_enable', sanitize_text_field($_POST["cp_cfte_rep_enable"]));
146
  update_option( 'cp_cfte_rep_days', sanitize_text_field($_POST["cp_cfte_rep_days"]));
147
  update_option( 'cp_cfte_rep_hour', sanitize_text_field($_POST["cp_cfte_rep_hour"]));
@@ -355,6 +361,7 @@ $nonce = wp_create_nonce( 'cfte_update_actions_plist' );
355
  <div class="inside">
356
  <p><strong>Important!</strong>: Use this area <strong>only</strong> if you are experiencing conflicts with third party plugins, with the theme scripts or with the character encoding.</p>
357
  <form name="updatesettings">
 
358
  Script load method:<br />
359
  <select id="ccscriptload" name="ccscriptload">
360
  <option value="0" <?php if (get_option('CP_CFTE_LOAD_SCRIPTS',"1") == "1") echo 'selected'; ?>>Classic (Recommended)</option>
@@ -389,6 +396,7 @@ $nonce = wp_create_nonce( 'cfte_update_actions_plist' );
389
  then check into the form <strong>Edit &amp; Settings</strong> button in the list at the at the top of this page.</p>
390
 
391
  <form name="updatereportsettings" action="" method="post">
 
392
  <table class="form-table">
393
  <tr valign="top">
394
  <td scope="row" colspan="2">Enable Reports?
142
  }
143
  else if (isset($_POST["cp_cfte_rep_enable"]))
144
  {
145
+ $verify_nonce = wp_verify_nonce( $_POST['rsave'], 'cfte_update_actions_plist');
146
+ if (!$verify_nonce)
147
+ {
148
+ echo 'Error: Form cannot be authenticated (nonce failed). Please contact our <a href="form2email.dwbooster.com/contact-us">support service</a> for verification and solution. Thank you.';
149
+ return;
150
+ }
151
  update_option( 'cp_cfte_rep_enable', sanitize_text_field($_POST["cp_cfte_rep_enable"]));
152
  update_option( 'cp_cfte_rep_days', sanitize_text_field($_POST["cp_cfte_rep_days"]));
153
  update_option( 'cp_cfte_rep_hour', sanitize_text_field($_POST["cp_cfte_rep_hour"]));
361
  <div class="inside">
362
  <p><strong>Important!</strong>: Use this area <strong>only</strong> if you are experiencing conflicts with third party plugins, with the theme scripts or with the character encoding.</p>
363
  <form name="updatesettings">
364
+ <input type="hidden" name="rsave" value="<?php echo $nonce; ?>">
365
  Script load method:<br />
366
  <select id="ccscriptload" name="ccscriptload">
367
  <option value="0" <?php if (get_option('CP_CFTE_LOAD_SCRIPTS',"1") == "1") echo 'selected'; ?>>Classic (Recommended)</option>
396
  then check into the form <strong>Edit &amp; Settings</strong> button in the list at the at the top of this page.</p>
397
 
398
  <form name="updatereportsettings" action="" method="post">
399
+ <input type="hidden" name="rsave" value="<?php echo $nonce; ?>">
400
  <table class="form-table">
401
  <tr valign="top">
402
  <td scope="row" colspan="2">Enable Reports?
cp-admin-int-message-list.inc.php CHANGED
@@ -16,6 +16,12 @@ $message = "";
16
 
17
  if (isset($_GET['delmark']) && $_GET['delmark'] != '')
18
  {
 
 
 
 
 
 
19
  for ($i=0; $i<=$records_per_page; $i++)
20
  if (isset($_GET['c'.$i]) && $_GET['c'.$i] != '')
21
  $wpdb->query('DELETE FROM `'.$wpdb->prefix.$this->table_messages.'` WHERE id='.intval($_GET['c'.$i]));
@@ -23,6 +29,12 @@ if (isset($_GET['delmark']) && $_GET['delmark'] != '')
23
  }
24
  else if (isset($_GET['del']) && $_GET['del'] == 'all')
25
  {
 
 
 
 
 
 
26
  if ($this->item == '' || $this->item == 0)
27
  $wpdb->query('DELETE FROM `'.$wpdb->prefix.$this->table_messages.'`');
28
  else
@@ -124,7 +136,7 @@ $nonce = wp_create_nonce( 'cfte_message_actions_plist' );
124
  {
125
  if (confirm('Are you sure that you want to delete ALL messages for this form?'))
126
  {
127
- document.location = 'admin.php?page=<?php echo $this->menu_parameter; ?>&cal=<?php echo intval($_GET["cal"]); ?>&list=1&del=all&r='+Math.random();
128
  }
129
  }
130
  function cp_markall()
@@ -199,6 +211,8 @@ echo paginate_links( array(
199
  <input type="hidden" name="cal" value="<?php echo intval($_GET["cal"]); ?>" />
200
  <input type="hidden" name="list" value="1" />
201
  <input type="hidden" name="delmark" value="1" />
 
 
202
  <table class=" widefat fixed pages" cellspacing="0" width="100%">
203
  <thead >
204
  <tr>
16
 
17
  if (isset($_GET['delmark']) && $_GET['delmark'] != '')
18
  {
19
+ $verify_nonce = wp_verify_nonce( $_GET['rsave'], 'cfte_message_actions_plist');
20
+ if (!$verify_nonce)
21
+ {
22
+ echo 'Error: Form cannot be authenticated (nonce failed). Please contact our <a href="form2email.dwbooster.com/contact-us">support service</a> for verification and solution. Thank you.';
23
+ return;
24
+ }
25
  for ($i=0; $i<=$records_per_page; $i++)
26
  if (isset($_GET['c'.$i]) && $_GET['c'.$i] != '')
27
  $wpdb->query('DELETE FROM `'.$wpdb->prefix.$this->table_messages.'` WHERE id='.intval($_GET['c'.$i]));
29
  }
30
  else if (isset($_GET['del']) && $_GET['del'] == 'all')
31
  {
32
+ $verify_nonce = wp_verify_nonce( $_GET['rsave'], 'cfte_message_actions_plist');
33
+ if (!$verify_nonce)
34
+ {
35
+ echo 'Error: Form cannot be authenticated (nonce failed). Please contact our <a href="form2email.dwbooster.com/contact-us">support service</a> for verification and solution. Thank you.';
36
+ return;
37
+ }
38
  if ($this->item == '' || $this->item == 0)
39
  $wpdb->query('DELETE FROM `'.$wpdb->prefix.$this->table_messages.'`');
40
  else
136
  {
137
  if (confirm('Are you sure that you want to delete ALL messages for this form?'))
138
  {
139
+ document.location = 'admin.php?page=<?php echo $this->menu_parameter; ?>&cal=<?php echo intval($_GET["cal"]); ?>&rsave=<?php echo $nonce; ?>&list=1&del=all&r='+Math.random();
140
  }
141
  }
142
  function cp_markall()
211
  <input type="hidden" name="cal" value="<?php echo intval($_GET["cal"]); ?>" />
212
  <input type="hidden" name="list" value="1" />
213
  <input type="hidden" name="delmark" value="1" />
214
+ <input type="hidden" name="rsave" value="<?php echo $nonce; ?>" />
215
+
216
  <table class=" widefat fixed pages" cellspacing="0" width="100%">
217
  <thead >
218
  <tr>
form-to-email.php CHANGED
@@ -3,7 +3,7 @@
3
  Plugin Name: Contact Form Email
4
  Plugin URI: https://form2email.dwbooster.com/download
5
  Description: Contact form that sends the data to email and also to a database list and CSV file.
6
- Version: 1.3.11
7
  Author: CodePeople
8
  Author URI: https://form2email.dwbooster.com
9
  Text Domain: contact-form-to-email
3
  Plugin Name: Contact Form Email
4
  Plugin URI: https://form2email.dwbooster.com/download
5
  Description: Contact form that sends the data to email and also to a database list and CSV file.
6
+ Version: 1.3.12
7
  Author: CodePeople
8
  Author URI: https://form2email.dwbooster.com
9
  Text Domain: contact-form-to-email