Header Footer Code Manager - Version 1.1.24

Version Description

2022-06-25 * FIXED: XSS Security Vulnerability fix

Download this release

Release Info

Developer 99robots
Plugin Icon 128x128 Header Footer Code Manager
Version 1.1.24
Comparing to
See all releases

Code changes from version 1.1.23 to 1.1.24

Files changed (5) hide show
  1. 99robots-header-footer-code-manager.php +1 -1
  2. includes/class-hfcm-snippets-list.php +7 -7
  3. includes/hfcm-add-edit.php +2 -2
  4. includes/hfcm-tools.php +2 -2
  5. readme.txt +4 -1
99robots-header-footer-code-manager.php CHANGED
@@ -3,7 +3,7 @@
3
  * Plugin Name: Header Footer Code Manager
4
  * Plugin URI: https://draftpress.com/products
5
  * Description: Header Footer Code Manager by 99 Robots is a quick and simple way for you to add tracking code snippets, conversion pixels, or other scripts required by third party services for analytics, tracking, marketing, or chat functions. For detailed documentation, please visit the plugin's <a href="https://draftpress.com/"> official page</a>.
6
- * Version: 1.1.23
7
  * Requires at least: 4.9
8
  * Requires PHP: 5.6.20
9
  * Author: 99robots
3
  * Plugin Name: Header Footer Code Manager
4
  * Plugin URI: https://draftpress.com/products
5
  * Description: Header Footer Code Manager by 99 Robots is a quick and simple way for you to add tracking code snippets, conversion pixels, or other scripts required by third party services for analytics, tracking, marketing, or chat functions. For detailed documentation, please visit the plugin's <a href="https://draftpress.com/"> official page</a>.
6
+ * Version: 1.1.24
7
  * Requires at least: 4.9
8
  * Requires PHP: 5.6.20
9
  * Author: 99robots
includes/class-hfcm-snippets-list.php CHANGED
@@ -459,19 +459,19 @@ class Hfcm_Snippets_List extends WP_List_Table
459
  }
460
 
461
  //All link
462
- $class = 'all' === $current ? ' class="current"' : '';
463
  $all_url = remove_query_arg( 'customvar' );
464
- $views['all'] = "<a href='{$all_url }' {$class} >" . esc_html__( 'All', '99robots-header-footer-code-manager' ) . ' (' . $this->record_count() . ')</a>';
465
 
466
  //Foo link
467
  $foo_url = add_query_arg( 'customvar', 'active' );
468
- $class = ('active' === $current ? ' class="current"' : '');
469
- $views['active'] = "<a href='{$foo_url}' {$class} >" . esc_html__( 'Active', '99robots-header-footer-code-manager' ) . ' (' . $this->record_count( 'active' ) . ')</a>';
470
 
471
  //Bar link
472
  $bar_url = add_query_arg( 'customvar', 'inactive' );
473
- $class = ('inactive' === $current ? ' class="current"' : '');
474
- $views['inactive'] = "<a href='{$bar_url}' {$class} >" . esc_html__( 'Inactive', '99robots-header-footer-code-manager' ) . ' (' . $this->record_count( 'inactive' ) . ')</a>';
475
 
476
  return $views;
477
  }
@@ -570,7 +570,7 @@ class Hfcm_Snippets_List extends WP_List_Table
570
  $input_id = $input_id . '-search-input';
571
  ?>
572
  <p class="search-box">
573
- <label class="screen-reader-text" for="<?php echo esc_attr( $input_id ); ?>"><?php echo $text; ?>:</label>
574
  <input type="search" id="<?php echo esc_attr( $input_id ); ?>" name="s"
575
  value="<?php _admin_search_query(); ?>"/>
576
  <?php submit_button( $text, '', '', false, array( 'id' => 'search-submit' ) ); ?>
459
  }
460
 
461
  //All link
462
+ $class = 'all' === $current ? 'current' : '';
463
  $all_url = remove_query_arg( 'customvar' );
464
+ $views['all'] = '<a href="'. esc_html($all_url).'" class="'. esc_html($class).'">' . esc_html__( 'All', '99robots-header-footer-code-manager' ) . ' (' .esc_html__($this->record_count()) . ')</a>';
465
 
466
  //Foo link
467
  $foo_url = add_query_arg( 'customvar', 'active' );
468
+ $class = ('active' === $current ? 'current' : '');
469
+ $views['active'] = '<a href="'. esc_html($foo_url).'" class="'. esc_html($class).'">' . esc_html__( 'Active', '99robots-header-footer-code-manager' ) . ' (' . esc_html__($this->record_count( 'active' )) . ')</a>';
470
 
471
  //Bar link
472
  $bar_url = add_query_arg( 'customvar', 'inactive' );
473
+ $class = ('inactive' === $current ? 'current' : '');
474
+ $views['inactive'] = '<a href="'. esc_html($bar_url).'" class="'. esc_html($class).'">' . esc_html__( 'Inactive', '99robots-header-footer-code-manager' ) . ' (' . esc_html__($this->record_count( 'inactive' )) . ')</a>';
475
 
476
  return $views;
477
  }
570
  $input_id = $input_id . '-search-input';
571
  ?>
572
  <p class="search-box">
573
+ <label class="screen-reader-text" for="<?php echo esc_attr( $input_id ); ?>"><?php echo esc_html($text); ?>:</label>
574
  <input type="search" id="<?php echo esc_attr( $input_id ); ?>" name="s"
575
  value="<?php _admin_search_query(); ?>"/>
576
  <?php submit_button( $text, '', '', false, array( 'id' => 'search-submit' ) ); ?>
includes/hfcm-add-edit.php CHANGED
@@ -50,7 +50,7 @@ wp_enqueue_script( 'hfcm_showboxes' );
50
  endif;
51
 
52
  if ( $update ) :
53
- $hfcm_form_action = admin_url( 'admin.php?page=hfcm-request-handler&id=' . $id );
54
  else :
55
  $hfcm_form_action = admin_url( 'admin.php?page=hfcm-request-handler' );
56
  endif;
@@ -394,7 +394,7 @@ wp_enqueue_script( 'hfcm_showboxes' );
394
  <?php if ( $update ) :
395
  $delete_nonce = wp_create_nonce( 'hfcm_delete_snippet' );
396
  ?>
397
- <a onclick="return nnr_confirm_delete_snippet();" href="<?php echo esc_url( admin_url( 'admin.php?page=hfcm-list&action=delete&_wpnonce=' . $delete_nonce . '&snippet=' . $id ) ); ?>"
398
  class="button button-secondary button-large nnr-btndelete"><?php esc_html_e( 'Delete', '99robots-header-footer-code-manager' ); ?></a>
399
  <?php endif; ?>
400
  </div>
50
  endif;
51
 
52
  if ( $update ) :
53
+ $hfcm_form_action = admin_url( 'admin.php?page=hfcm-request-handler&id=' . absint($id) );
54
  else :
55
  $hfcm_form_action = admin_url( 'admin.php?page=hfcm-request-handler' );
56
  endif;
394
  <?php if ( $update ) :
395
  $delete_nonce = wp_create_nonce( 'hfcm_delete_snippet' );
396
  ?>
397
+ <a onclick="return nnr_confirm_delete_snippet();" href="<?php echo esc_url( admin_url( 'admin.php?page=hfcm-list&action=delete&_wpnonce=' . $delete_nonce . '&snippet=' . absint($id) ) ); ?>"
398
  class="button button-secondary button-large nnr-btndelete"><?php esc_html_e( 'Delete', '99robots-header-footer-code-manager' ); ?></a>
399
  <?php endif; ?>
400
  </div>
includes/hfcm-tools.php CHANGED
@@ -56,9 +56,9 @@ wp_enqueue_script( 'hfcm_showboxes' );
56
  <li>
57
  <label>
58
  <input type="checkbox"
59
- id="keys-snippet_<?php echo $nnr_hfcm_snippet->script_id; ?>"
60
  name="nnr_hfcm_snippets[]"
61
- value="snippet_<?php echo $nnr_hfcm_snippet->script_id; ?>"> <?php echo $nnr_hfcm_snippet->name; ?>
62
  </label>
63
  </li>
64
  <?php
56
  <li>
57
  <label>
58
  <input type="checkbox"
59
+ id="keys-snippet_<?php echo absint($nnr_hfcm_snippet->script_id); ?>"
60
  name="nnr_hfcm_snippets[]"
61
+ value="snippet_<?php echo absint($nnr_hfcm_snippet->script_id); ?>"> <?php echo esc_html($nnr_hfcm_snippet->name); ?>
62
  </label>
63
  </li>
64
  <?php
readme.txt CHANGED
@@ -4,7 +4,7 @@ Tags: header, footer, code manager, snippet, functions.php, tracking, google ana
4
  Requires at least: 4.9
5
  Requires PHP: 5.6.20
6
  Tested up to: 6.0
7
- Stable tag: 1.1.23
8
  License: GPLv2 or later
9
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
10
  Donate link: https://draftpress.com
@@ -114,6 +114,9 @@ A. Free plugins rely on user feedback. Therefore, the best thing you can do for
114
  A. If your script is not supported, just let us know and we'll look into it immediately. We will do our best to ensure all reputable services are supported. When requesting support for a particular script, it would be nice to get a sample of the script so that we can see its structure.
115
 
116
  == Changelog ==
 
 
 
117
  = 1.1.23 = 2022-06-10
118
  * UPDATED: Compatibility with WordPress 6.0
119
 
4
  Requires at least: 4.9
5
  Requires PHP: 5.6.20
6
  Tested up to: 6.0
7
+ Stable tag: 1.1.24
8
  License: GPLv2 or later
9
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
10
  Donate link: https://draftpress.com
114
  A. If your script is not supported, just let us know and we'll look into it immediately. We will do our best to ensure all reputable services are supported. When requesting support for a particular script, it would be nice to get a sample of the script so that we can see its structure.
115
 
116
  == Changelog ==
117
+ = 1.1.24 = 2022-06-25
118
+ * FIXED: XSS Security Vulnerability fix
119
+
120
  = 1.1.23 = 2022-06-10
121
  * UPDATED: Compatibility with WordPress 6.0
122