SendinBlue Subscribe Form And WP SMTP - Version 3.1.29

Version Description

  • Fixed issue related to data sanitization.
Download this release

Release Info

Developer amarsib
Plugin Icon 128x128 SendinBlue Subscribe Form And WP SMTP
Version 3.1.29
Comparing to
See all releases

Code changes from version 3.1.28 to 3.1.29

Files changed (5) hide show
  1. inc/SendinblueApiClient.php +1 -1
  2. page/page-form.php +6 -4
  3. page/page-statistics.php +2 -2
  4. readme.txt +4 -1
  5. sendinblue.php +1 -1
inc/SendinblueApiClient.php CHANGED
@@ -14,7 +14,7 @@ class SendinblueApiClient
14
  const RESPONSE_CODE_CREATED = 201;
15
  const RESPONSE_CODE_ACCEPTED = 202;
16
  const RESPONSE_CODE_UNAUTHORIZED = 401;
17
- const PLUGIN_VERSION = '3.1.28';
18
  const USER_AGENT = 'sendinblue_plugins/wordpress';
19
 
20
  private $apiKey;
14
  const RESPONSE_CODE_CREATED = 201;
15
  const RESPONSE_CODE_ACCEPTED = 202;
16
  const RESPONSE_CODE_UNAUTHORIZED = 401;
17
+ const PLUGIN_VERSION = '3.1.29';
18
  const USER_AGENT = 'sendinblue_plugins/wordpress';
19
 
20
  private $apiKey;
page/page-form.php CHANGED
@@ -212,7 +212,7 @@ if ( ! class_exists( 'SIB_Page_Form' ) ) {
212
  ?>
213
  <input type="hidden" name="pid" value="<?php echo esc_attr( $_GET['pid'] ); ?>">
214
  <?php
215
- $lang = isset( $_GET['lang'] ) ? esc_attr( $_GET['lang'] ) : '';
216
  if ( $lang ) { ?>
217
  <input type="hidden" name="lang" value="<?php echo $lang; ?>">
218
  <?php
@@ -875,10 +875,12 @@ For your information, you cannot select a template with the tag [DOUBLEOPTIN].',
875
  // Subscription form.
876
  $formID = isset( $_POST['sib_form_id'] ) ? sanitize_text_field( $_POST['sib_form_id'] ) : '';
877
  $form_name = isset( $_POST['sib_form_name'] ) ? sanitize_text_field( $_POST['sib_form_name'] ) : '';
 
878
  $form_html = isset( $_POST['sib_form_html'] ) ? $_POST['sib_form_html'] : '';
879
  $list_ids = isset( $_POST['list_id'] ) ? maybe_serialize( $_POST['list_id'] ) : '';
 
880
  $dependTheme = isset( $_POST['sib_css_type'] ) ? sanitize_text_field( $_POST['sib_css_type'] ) : '';
881
- $customCss = isset( $_POST['sib_form_css'] ) ? $_POST['sib_form_css'] : '';
882
  $gCaptcha = isset( $_POST['sib_add_captcha'] ) ? sanitize_text_field( $_POST['sib_add_captcha'] ) : '0';
883
  $gCaptchaSecret = isset( $_POST['sib_captcha_secret'] ) ? sanitize_text_field( $_POST['sib_captcha_secret'] ) : '';
884
  $gCaptchaSite = isset( $_POST['sib_captcha_site'] ) ? sanitize_text_field( $_POST['sib_captcha_site'] ) : '';
@@ -1069,8 +1071,8 @@ For your information, you cannot select a template with the tag [DOUBLEOPTIN].',
1069
  }
1070
  }
1071
  $formData = array(
1072
- 'html' => isset( $_POST['frmData'] ) ? $_POST['frmData'] : '',
1073
- 'css' => isset( $_POST['frmCss'] ) ? esc_attr($_POST['frmCss']) : '',
1074
  'dependTheme' => isset( $_POST['isDepend'] ) ? sanitize_text_field($_POST['isDepend']) : '',
1075
  'gCaptcha' => $gCaptcha,
1076
  'gCaptcha_site' => isset( $_POST['gCaptchaSite'] ) ? sanitize_text_field($_POST['gCaptchaSite']) : ''
212
  ?>
213
  <input type="hidden" name="pid" value="<?php echo esc_attr( $_GET['pid'] ); ?>">
214
  <?php
215
+ $lang = isset( $_GET['lang'] ) ? sanitize_text_field( $_GET['lang'] ) : '';
216
  if ( $lang ) { ?>
217
  <input type="hidden" name="lang" value="<?php echo $lang; ?>">
218
  <?php
875
  // Subscription form.
876
  $formID = isset( $_POST['sib_form_id'] ) ? sanitize_text_field( $_POST['sib_form_id'] ) : '';
877
  $form_name = isset( $_POST['sib_form_name'] ) ? sanitize_text_field( $_POST['sib_form_name'] ) : '';
878
+ // phpcs:disable
879
  $form_html = isset( $_POST['sib_form_html'] ) ? $_POST['sib_form_html'] : '';
880
  $list_ids = isset( $_POST['list_id'] ) ? maybe_serialize( $_POST['list_id'] ) : '';
881
+ // phpcs:enable
882
  $dependTheme = isset( $_POST['sib_css_type'] ) ? sanitize_text_field( $_POST['sib_css_type'] ) : '';
883
+ $customCss = isset( $_POST['sib_form_css'] ) ? sanitize_text_field( $_POST['sib_form_css'] ) : '';
884
  $gCaptcha = isset( $_POST['sib_add_captcha'] ) ? sanitize_text_field( $_POST['sib_add_captcha'] ) : '0';
885
  $gCaptchaSecret = isset( $_POST['sib_captcha_secret'] ) ? sanitize_text_field( $_POST['sib_captcha_secret'] ) : '';
886
  $gCaptchaSite = isset( $_POST['sib_captcha_site'] ) ? sanitize_text_field( $_POST['sib_captcha_site'] ) : '';
1071
  }
1072
  }
1073
  $formData = array(
1074
+ 'html' => isset( $_POST['frmData'] ) ? $_POST['frmData'] : '',// phpcs:ignore
1075
+ 'css' => isset( $_POST['frmCss'] ) ? sanitize_text_field($_POST['frmCss']) : '',
1076
  'dependTheme' => isset( $_POST['isDepend'] ) ? sanitize_text_field($_POST['isDepend']) : '',
1077
  'gCaptcha' => $gCaptcha,
1078
  'gCaptcha_site' => isset( $_POST['gCaptchaSite'] ) ? sanitize_text_field($_POST['gCaptchaSite']) : ''
page/page-statistics.php CHANGED
@@ -161,13 +161,13 @@ if ( ! class_exists( 'SIB_Page_Statistics' ) ) {
161
  <?php
162
  if (!empty($emailCampaigns)) {
163
  foreach ($emailCampaigns as $campaign) { ?>
164
- <tr id="<?php echo str_replace(' ', '-', $campaign['name']);?>">
165
  <td width="1%" class="sort ui-sortable-handle">
166
  <input type="hidden" name="method_order[flat_rate]" value="">
167
  </td>
168
  <td class=""><?php echo esc_attr( $campaign['name'] );?></td>
169
  <td class="sib-statistics-data-value"><?php echo esc_attr( $campaign['statistics']['globalStats']['sent'] );?></td>
170
- <td class="sib-statistics-data-value"><?php echo empty($campaign['statistics']['globalStats']['sent']) ? 0 : round($campaign['statistics']['globalStats']['delivered'] * 100 / $campaign['statistics']['globalStats']['sent'], 2);?>%</td>
171
  <td class="sib-statistics-data-value"><?php echo !empty($campaign['statistics']['globalStats']['viewed']) ? esc_attr( $campaign['statistics']['globalStats']['viewed'] ) : 0;?></td>
172
  <td class="sib-statistics-data-value"><?php echo !empty($campaign['statistics']['globalStats']['clickers']) ? esc_attr( $campaign['statistics']['globalStats']['clickers'] ) : 0;?></td>
173
  <td class="sib-statistics-data-value"><?php echo !empty($campaign['statistics']['globalStats']['unsubscriptions']) ? esc_attr( $campaign['statistics']['globalStats']['unsubscriptions'] ) : 0; ?></td>
161
  <?php
162
  if (!empty($emailCampaigns)) {
163
  foreach ($emailCampaigns as $campaign) { ?>
164
+ <tr id="<?php echo str_replace(' ', '-', esc_attr( $campaign['name'] ));?>">
165
  <td width="1%" class="sort ui-sortable-handle">
166
  <input type="hidden" name="method_order[flat_rate]" value="">
167
  </td>
168
  <td class=""><?php echo esc_attr( $campaign['name'] );?></td>
169
  <td class="sib-statistics-data-value"><?php echo esc_attr( $campaign['statistics']['globalStats']['sent'] );?></td>
170
+ <td class="sib-statistics-data-value"><?php echo empty($campaign['statistics']['globalStats']['sent']) ? 0 : round(esc_attr( $campaign['statistics']['globalStats']['delivered'] ) * 100 / esc_attr( $campaign['statistics']['globalStats']['sent'] ), 2);?>%</td>
171
  <td class="sib-statistics-data-value"><?php echo !empty($campaign['statistics']['globalStats']['viewed']) ? esc_attr( $campaign['statistics']['globalStats']['viewed'] ) : 0;?></td>
172
  <td class="sib-statistics-data-value"><?php echo !empty($campaign['statistics']['globalStats']['clickers']) ? esc_attr( $campaign['statistics']['globalStats']['clickers'] ) : 0;?></td>
173
  <td class="sib-statistics-data-value"><?php echo !empty($campaign['statistics']['globalStats']['unsubscriptions']) ? esc_attr( $campaign['statistics']['globalStats']['unsubscriptions'] ) : 0; ?></td>
readme.txt CHANGED
@@ -4,7 +4,7 @@ Tags: Email Marketing, Newsletter, Sendinblue, Forms, smtp, marketing automation
4
  Requires at least: 4.4
5
  Tested up to: 5.8
6
  Requires PHP: 5.6
7
- Stable tag: 3.1.26
8
  License: GPLv2 or later
9
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
10
 
@@ -116,6 +116,9 @@ In order to create a signup form, you need to:
116
 
117
  == Changelog ==
118
 
 
 
 
119
  = 3.1.28 =
120
  * Updated bootstrap version from 3.2 to 3.4.1.
121
 
4
  Requires at least: 4.4
5
  Tested up to: 5.8
6
  Requires PHP: 5.6
7
+ Stable tag: 3.1.29
8
  License: GPLv2 or later
9
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
10
 
116
 
117
  == Changelog ==
118
 
119
+ = 3.1.29 =
120
+ * Fixed issue related to data sanitization.
121
+
122
  = 3.1.28 =
123
  * Updated bootstrap version from 3.2 to 3.4.1.
124
 
sendinblue.php CHANGED
@@ -3,7 +3,7 @@
3
  * Plugin Name: Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue
4
  * Plugin URI: https://www.sendinblue.com/?r=wporg
5
  * Description: Manage your contact lists, subscription forms and all email and marketing-related topics from your wp panel, within one single plugin
6
- * Version: 3.1.28
7
  * Author: Sendinblue
8
  * Author URI: https://www.sendinblue.com/?r=wporg
9
  * License: GPLv2 or later
3
  * Plugin Name: Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue
4
  * Plugin URI: https://www.sendinblue.com/?r=wporg
5
  * Description: Manage your contact lists, subscription forms and all email and marketing-related topics from your wp panel, within one single plugin
6
+ * Version: 3.1.29
7
  * Author: Sendinblue
8
  * Author URI: https://www.sendinblue.com/?r=wporg
9
  * License: GPLv2 or later