Social Login - Version 7.2.1

Version Description

SECURITY FIXES * Fixed sanitization issues

Download this release

Release Info

Developer cyberlord92
Plugin Icon 128x128 Social Login
Version 7.2.1
Comparing to
See all releases

Code changes from version 7.2.0 to 7.2.1

Files changed (3) hide show
  1. class-mo-openid-social-login-functions.php +2 -2
  2. miniorange_openid_sso_settings.php +135 -135
  3. readme.txt +9 -1
class-mo-openid-social-login-functions.php CHANGED
@@ -698,11 +698,11 @@ function mo_openid_process_custom_app_callback(){
698
  }
699
  else{
700
  if(isset($_REQUEST['code'] )){
701
- $code = $_REQUEST['code'];
702
  }
703
  else if(isset( $_REQUEST['error_reason'] )){
704
 
705
- echo $_REQUEST['error_description'] . "<br>";
706
  wp_die("Allow access to your profile to get logged in. Click <a href=".get_site_url().">here</a> to go back to the website.");
707
  }
708
  }
698
  }
699
  else{
700
  if(isset($_REQUEST['code'] )){
701
+ $code = sanitize_text_field($_REQUEST['code']);
702
  }
703
  else if(isset( $_REQUEST['error_reason'] )){
704
 
705
+ echo sanitize_text_field($_REQUEST['error_description']) . "<br>";
706
  wp_die("Allow access to your profile to get logged in. Click <a href=".get_site_url().">here</a> to go back to the website.");
707
  }
708
  }
miniorange_openid_sso_settings.php CHANGED
@@ -1,9 +1,9 @@
1
  <?php
2
  /**
3
  * Plugin Name: Social Login, Social Sharing by miniOrange
4
- * Plugin URI: https://www.miniorange.com/social-login
5
  * Description: Allow your users to login, comment and share with social login apps like Facebook, Google, Twitter, LinkedIn etc using customizable buttons.
6
- * Version: 7.2
7
  * Author: social login (miniOrange)
8
  * License URI: http://miniorange.com/usecases/miniOrange_User_Agreement.pdf
9
  */
@@ -13,7 +13,7 @@ include_once dirname( __FILE__ ) . '/class-mo-openid-login-widget.php';
13
  require('class-mo-openid-sso-customer.php');
14
  require('class-mo-openid-sso-shortcode-buttons.php');
15
  require('class-mo-openid-social-comment.php');
16
- define('MO_OPENID_SOCIAL_LOGIN_VERSION', '7.2');
17
  include dirname( __FILE__ ) . '/mo_openid_feedback_form.php';
18
  class Miniorange_OpenID_SSO {
19
 
@@ -878,7 +878,7 @@ Thank you.';
878
  }
879
  return;
880
  } else {
881
- $email = $_POST['email'];
882
 
883
  }
884
  }
@@ -942,121 +942,121 @@ Thank you.';
942
  wp_die('<strong>ERROR</strong>: Invalid Request.');
943
  } else {
944
 
945
- update_option( 'mo_openid_google_enable', isset( $_POST['mo_openid_google_enable']) ? $_POST['mo_openid_google_enable'] : 0);
946
- update_option( 'mo_openid_salesforce_enable', isset( $_POST['mo_openid_salesforce_enable']) ? $_POST['mo_openid_salesforce_enable'] : 0);
947
  if($this->if_custom_app_exists('facebook')) {
948
- update_option('mo_openid_facebook_enable', isset($_POST['mo_openid_facebook_enable']) ? $_POST['mo_openid_facebook_enable'] : 0);
949
  }
950
  else if(isset($_POST['mo_openid_facebook_enable'])) {
951
  update_option('mo_openid_facebook_enable',0);
952
  $this->mo_openid_show_facebook_error_message();
953
 
954
  }
955
- update_option( 'mo_openid_linkedin_enable', isset( $_POST['mo_openid_linkedin_enable']) ? $_POST['mo_openid_linkedin_enable'] : 0);
956
- update_option( 'mo_openid_windowslive_enable', isset( $_POST['mo_openid_windowslive_enable']) ? $_POST['mo_openid_windowslive_enable'] : 0);
957
- update_option( 'mo_openid_amazon_enable', isset( $_POST['mo_openid_amazon_enable']) ? $_POST['mo_openid_amazon_enable'] : 0);
958
- update_option( 'mo_openid_instagram_enable', isset( $_POST['mo_openid_instagram_enable']) ? $_POST['mo_openid_instagram_enable'] : 0);
959
- update_option( 'mo_openid_twitter_enable', isset( $_POST['mo_openid_twitter_enable']) ? $_POST['mo_openid_twitter_enable'] : 0);
960
- update_option( 'mo_openid_vkontakte_enable', isset( $_POST['mo_openid_vkontakte_enable']) ? $_POST['mo_openid_vkontakte_enable'] : 0);
961
- update_option( 'mo_openid_yahoo_enable', isset( $_POST['mo_openid_yahoo_enable']) ? $_POST['mo_openid_yahoo_enable'] : 0);
962
 
963
- update_option( 'mo_openid_default_login_enable', isset( $_POST['mo_openid_default_login_enable']) ? $_POST['mo_openid_default_login_enable'] : 0);
964
- update_option( 'mo_openid_default_register_enable', isset( $_POST['mo_openid_default_register_enable']) ? $_POST['mo_openid_default_register_enable'] : 0);
965
- update_option( 'mo_openid_default_comment_enable', isset( $_POST['mo_openid_default_comment_enable']) ? $_POST['mo_openid_default_comment_enable'] : 0);
966
 
967
 
968
 
969
  // GDPR options
970
- update_option( 'mo_openid_gdpr_consent_enable', isset( $_POST['mo_openid_gdpr_consent_enable']) ? $_POST['mo_openid_gdpr_consent_enable'] : 0);
971
  if(get_option('mo_openid_gdpr_consent_enable') == 1 && (!mo_openid_restrict_user())) {
972
- update_option('mo_openid_privacy_policy_url', isset($_POST['mo_openid_privacy_policy_url']) ? $_POST['mo_openid_privacy_policy_url'] : get_option('mo_openid_privacy_policy_url'));
973
- update_option('mo_openid_privacy_policy_text', isset($_POST['mo_openid_privacy_policy_text']) ? $_POST['mo_openid_privacy_policy_text'] : get_option('mo_openid_privacy_policy_text'));
974
  update_option('mo_openid_gdpr_consent_message', isset($_POST['mo_openid_gdpr_consent_message']) ? stripslashes($_POST['mo_openid_gdpr_consent_message']) : get_option('mo_openid_gdpr_consent_message'));
975
  }
976
  //Redirect URL
977
- update_option( 'mo_openid_login_redirect', $_POST['mo_openid_login_redirect']);
978
- update_option( 'mo_openid_login_redirect_url', $_POST['mo_openid_login_redirect_url'] );
979
- update_option( 'mo_openid_relative_login_redirect_url', isset( $_POST['mo_openid_relative_login_redirect_url']) ? $_POST['mo_openid_relative_login_redirect_url'] : "" );
980
 
981
  //Logout Url
982
- update_option( 'mo_openid_logout_redirection_enable', isset( $_POST['mo_openid_logout_redirection_enable']) ? $_POST['mo_openid_logout_redirection_enable'] : 0);
983
- update_option( 'mo_openid_logout_redirect', $_POST['mo_openid_logout_redirect']);
984
- update_option( 'mo_openid_logout_redirect_url', $_POST['mo_openid_logout_redirect_url'] );
985
 
986
  //auto register
987
- update_option( 'mo_openid_auto_register_enable', isset( $_POST['mo_openid_auto_register_enable']) ? $_POST['mo_openid_auto_register_enable'] : 0);
988
- update_option( 'mo_openid_register_disabled_message', $_POST['mo_openid_register_disabled_message']);
989
 
990
 
991
  //email notification
992
- update_option( 'mo_openid_email_enable', isset( $_POST['mo_openid_email_enable']) ? $_POST['mo_openid_email_enable'] : 0);
993
 
994
  //Customized text
995
- update_option('mo_openid_login_widget_customize_text',$_POST['mo_openid_login_widget_customize_text'] );
996
- update_option( 'mo_openid_login_button_customize_text',$_POST['mo_openid_login_button_customize_text'] );
997
 
998
  //profile completion
999
- update_option('mo_openid_enable_profile_completion', isset( $_POST['mo_openid_enable_profile_completion']) ? $_POST['mo_openid_enable_profile_completion'] : 0);
1000
 
1001
  if(get_option('mo_openid_enable_profile_completion') == 1) {
1002
 
1003
- update_option('mo_profile_complete_title', $_POST['mo_profile_complete_title']);
1004
- update_option('mo_profile_complete_username_label', $_POST['mo_profile_complete_username_label']);
1005
- update_option('mo_profile_complete_email_label', $_POST['mo_profile_complete_email_label']);
1006
- update_option('mo_profile_complete_submit_button', $_POST['mo_profile_complete_submit_button']);
1007
- update_option('mo_profile_complete_instruction', $_POST['mo_profile_complete_instruction']);
1008
- update_option('mo_profile_complete_extra_instruction', $_POST['mo_profile_complete_extra_instruction']);
1009
- update_option('mo_profile_complete_uname_exist', $_POST['mo_profile_complete_uname_exist']);
1010
-
1011
- update_option('mo_email_verify_resend_otp_button', $_POST['mo_email_verify_resend_otp_button']);
1012
- update_option('mo_email_verify_back_button', $_POST['mo_email_verify_back_button']);
1013
- update_option('mo_email_verify_title', $_POST['mo_email_verify_title']);
1014
- update_option('mo_email_verify_message', $_POST['mo_email_verify_message']);
1015
- update_option('mo_email_verify_verification_code_instruction', $_POST['mo_email_verify_verification_code_instruction']);
1016
- update_option('mo_email_verify_wrong_otp', $_POST['mo_email_verify_wrong_otp']);
1017
 
1018
  $_POST['custom_otp_msg']=stripslashes( $_POST['custom_otp_msg']);
1019
- update_option('custom_otp_msg',$_POST['custom_otp_msg']);
1020
  }
1021
  //account-linking
1022
- update_option( 'mo_openid_account_linking_enable', isset( $_POST['mo_openid_account_linking_enable']) ? $_POST['mo_openid_account_linking_enable'] : 0);
1023
 
1024
  if(get_option('mo_openid_account_linking_enable') == 1 && (!mo_openid_restrict_user())) {
1025
 
1026
- update_option('mo_account_linking_title', $_POST['mo_account_linking_title']);
1027
- update_option('mo_account_linking_new_user_button', $_POST['mo_account_linking_new_user_button']);
1028
- update_option('mo_account_linking_existing_user_button', $_POST['mo_account_linking_existing_user_button']);
1029
- update_option('mo_account_linking_new_user_instruction', $_POST['mo_account_linking_new_user_instruction']);
1030
- update_option('mo_account_linking_existing_user_instruction', $_POST['mo_account_linking_existing_user_instruction']);
1031
- update_option('mo_account_linking_extra_instruction', $_POST['mo_account_linking_extra_instruction']);
1032
  }
1033
 
1034
  update_option('mo_openid_login_widget_customize_logout_name_text',sanitize_text_field($_POST['mo_openid_login_widget_customize_logout_name_text']));
1035
  update_option( 'mo_openid_login_widget_customize_logout_text',sanitize_text_field($_POST['mo_openid_login_widget_customize_logout_text']));
1036
- update_option('moopenid_logo_check', isset( $_POST['moopenid_logo_check']) ? $_POST['moopenid_logo_check'] : 0);
1037
- update_option('mo_login_openid_login_widget_customize_textcolor',$_POST['mo_login_openid_login_widget_customize_textcolor']);
1038
- update_option('mo_openid_login_theme',$_POST['mo_openid_login_theme'] );
1039
  update_option( 'mo_openid_message', 'Your settings are saved successfully.' );
1040
 
1041
  //customization of icons
1042
- update_option('mo_login_icon_custom_size',$_POST['mo_login_icon_custom_size'] );
1043
- update_option('mo_login_icon_space',$_POST['mo_login_icon_space'] );
1044
- update_option('mo_login_icon_custom_width',$_POST['mo_login_icon_custom_width'] );
1045
- update_option('mo_login_icon_custom_height',$_POST['mo_login_icon_custom_height'] );
1046
- update_option('mo_openid_login_custom_theme',$_POST['mo_openid_login_custom_theme'] );
1047
- update_option( 'mo_login_icon_custom_color', $_POST['mo_login_icon_custom_color'] );
1048
- update_option('mo_login_icon_custom_boundary',$_POST['mo_login_icon_custom_boundary']);
1049
 
1050
  // avatar
1051
- update_option( 'moopenid_social_login_avatar', isset( $_POST['moopenid_social_login_avatar']) ? $_POST['moopenid_social_login_avatar'] : 0);
1052
 
1053
 
1054
  if(isset($_POST['mapping_value_default']))
1055
- update_option('mo_openid_login_role_mapping', isset( $_POST['mapping_value_default']) ? $_POST['mapping_value_default'] : 'subscriber');
1056
 
1057
  if(mo_openid_is_customer_valid() && !mo_openid_get_customer_plan('Do It Yourself')){
1058
  //Attribute collection
1059
- update_option( 'moopenid_user_attributes', isset( $_POST['moopenid_user_attributes']) ? $_POST['moopenid_user_attributes'] : 0);
1060
  }
1061
 
1062
  $this->mo_openid_show_success_message();
@@ -1076,14 +1076,14 @@ Thank you.';
1076
  // woocommerce display options
1077
  if(!mo_openid_restrict_user()) {
1078
 
1079
- update_option('mo_openid_woocommerce_login_form', isset($_POST['mo_openid_woocommerce_login_form']) ? $_POST['mo_openid_woocommerce_login_form'] : 0);
1080
- update_option('mo_openid_woocommerce_before_login_form', isset($_POST['mo_openid_woocommerce_before_login_form']) ? $_POST['mo_openid_woocommerce_before_login_form'] : 0);
1081
- update_option('mo_openid_woocommerce_center_login_form', isset($_POST['mo_openid_woocommerce_center_login_form']) ? $_POST['mo_openid_woocommerce_center_login_form'] : 0);
1082
- update_option('mo_openid_woocommerce_register_form_start', isset($_POST['mo_openid_woocommerce_register_form_start']) ? $_POST['mo_openid_woocommerce_register_form_start'] : 0);
1083
- update_option('mo_openid_woocommerce_center_register_form', isset($_POST['mo_openid_woocommerce_center_register_form']) ? $_POST['mo_openid_woocommerce_center_register_form'] : 0);
1084
- update_option('mo_openid_woocommerce_register_form_end', isset($_POST['mo_openid_woocommerce_register_form_end']) ? $_POST['mo_openid_woocommerce_register_form_end'] : 0);
1085
- update_option('mo_openid_woocommerce_before_checkout_billing_form', isset($_POST['mo_openid_woocommerce_before_checkout_billing_form']) ? $_POST['mo_openid_woocommerce_before_checkout_billing_form'] : 0);
1086
- update_option('mo_openid_woocommerce_after_checkout_billing_form', isset($_POST['mo_openid_woocommerce_after_checkout_billing_form']) ? $_POST['mo_openid_woocommerce_after_checkout_billing_form'] : 0);
1087
  }
1088
  }
1089
  }else if( isset($_POST['mo_openid_save_buddypress_field_nonce']) and isset( $_POST['option'] ) and $_POST['option'] == "mo_openid_save_buddypress_field" ){
@@ -1093,9 +1093,9 @@ Thank you.';
1093
  } else {
1094
  //buddypress display options
1095
  if(!mo_openid_restrict_user()) {
1096
- update_option('mo_openid_bp_before_register_page', isset($_POST['mo_openid_bp_before_register_page']) ? $_POST['mo_openid_bp_before_register_page'] : 0);
1097
- update_option('mo_openid_bp_before_account_details_fields', isset($_POST['mo_openid_bp_before_account_details_fields']) ? $_POST['mo_openid_bp_before_account_details_fields'] : 0);
1098
- update_option('mo_openid_bp_after_register_page', isset($_POST['mo_openid_bp_after_register_page']) ? $_POST['mo_openid_bp_after_register_page'] : 0);
1099
  }
1100
  }
1101
  }
@@ -1106,19 +1106,19 @@ Thank you.';
1106
  } else {
1107
 
1108
  //commenting
1109
- update_option( 'mo_openid_social_comment_fb', isset( $_POST['mo_openid_social_comment_fb']) ? $_POST['mo_openid_social_comment_fb'] : 0);
1110
- update_option( 'mo_openid_social_comment_google', isset( $_POST['mo_openid_social_comment_google']) ? $_POST['mo_openid_social_comment_google'] : 0);
1111
- update_option( 'mo_openid_social_comment_default', isset( $_POST['mo_openid_social_comment_default']) ? $_POST['mo_openid_social_comment_default'] : 0);
1112
 
1113
  //comment position
1114
- update_option( 'mo_openid_social_comment_blogpost', isset( $_POST['mo_openid_social_comment_blogpost']) ? $_POST['mo_openid_social_comment_blogpost'] : 0);
1115
- update_option( 'mo_openid_social_comment_static', isset( $_POST['mo_openid_social_comment_static']) ? $_POST['mo_openid_social_comment_static'] : 0);
1116
 
1117
  //comment labels
1118
- update_option('mo_openid_social_comment_default_label',$_POST['mo_openid_social_comment_default_label'] );
1119
- update_option('mo_openid_social_comment_fb_label',$_POST['mo_openid_social_comment_fb_label'] );
1120
- update_option('mo_openid_social_comment_google_label',$_POST['mo_openid_social_comment_google_label'] );
1121
- update_option('mo_openid_social_comment_heading_label',$_POST['mo_openid_social_comment_heading_label'] );
1122
 
1123
  update_option( 'mo_openid_message', 'Your settings are saved successfully.' );
1124
  $this->mo_openid_show_success_message();
@@ -1136,9 +1136,9 @@ Thank you.';
1136
  wp_die('<strong>ERROR</strong>: Invalid Request.');
1137
  } else {
1138
  // Contact Us query
1139
- $email = $_POST['mo_openid_contact_us_email'];
1140
- $phone = $_POST['mo_openid_contact_us_phone'];
1141
- $query = $_POST['mo_openid_contact_us_query'];
1142
  $customer = new CustomerOpenID();
1143
  if ( $this->mo_openid_check_empty_or_null( $email ) || $this->mo_openid_check_empty_or_null( $query ) ) {
1144
  update_option('mo_openid_message', 'Please fill up Email and Query fields to submit your query.');
@@ -1221,53 +1221,53 @@ Thank you.';
1221
  if ( ! wp_verify_nonce( $nonce, 'mo-openid-save-other-settings-nonce' ) ) {
1222
  wp_die('<strong>ERROR</strong>: Invalid Request.');
1223
  } else {
1224
- update_option( 'mo_openid_google_share_enable', isset( $_POST['mo_openid_google_share_enable']) ? $_POST['mo_openid_google_share_enable'] : 0);
1225
- update_option( 'mo_openid_facebook_share_enable', isset( $_POST['mo_openid_facebook_share_enable']) ? $_POST['mo_openid_facebook_share_enable'] : 0);
1226
- update_option( 'mo_openid_linkedin_share_enable', isset( $_POST['mo_openid_linkedin_share_enable']) ? $_POST['mo_openid_linkedin_share_enable'] : 0);
1227
- update_option( 'mo_openid_reddit_share_enable', isset( $_POST['mo_openid_reddit_share_enable']) ? $_POST['mo_openid_reddit_share_enable'] : 0);
1228
- update_option( 'mo_openid_pinterest_share_enable', isset( $_POST['mo_openid_pinterest_share_enable']) ? $_POST['mo_openid_pinterest_share_enable'] : 0);
1229
- update_option( 'mo_openid_twitter_share_enable', isset( $_POST['mo_openid_twitter_share_enable']) ? $_POST['mo_openid_twitter_share_enable'] : 0);
1230
- update_option( 'mo_openid_tumblr_share_enable', isset( $_POST['mo_openid_tumblr_share_enable']) ? $_POST['mo_openid_tumblr_share_enable'] : 0);
1231
- update_option( 'mo_openid_delicious_share_enable', isset( $_POST['mo_openid_delicious_share_enable']) ? $_POST['mo_openid_delicious_share_enable'] : 0);
1232
- update_option( 'mo_openid_vkontakte_share_enable', isset( $_POST['mo_openid_vkontakte_share_enable']) ? $_POST['mo_openid_vkontakte_share_enable'] : 0);
1233
- update_option( 'mo_openid_stumble_share_enable', isset( $_POST['mo_openid_stumble_share_enable']) ? $_POST['mo_openid_stumble_share_enable'] : 0);
1234
- update_option( 'mo_openid_odnoklassniki_share_enable', isset( $_POST['mo_openid_odnoklassniki_share_enable']) ? $_POST['mo_openid_odnoklassniki_share_enable'] : 0);
1235
- update_option( 'mo_openid_digg_share_enable', isset( $_POST['mo_openid_digg_share_enable']) ? $_POST['mo_openid_digg_share_enable'] : 0);
1236
- update_option( 'mo_openid_pocket_share_enable', isset( $_POST['mo_openid_pocket_share_enable']) ? $_POST['mo_openid_pocket_share_enable'] : 0);
1237
-
1238
- update_option( 'mo_openid_mail_share_enable', isset( $_POST['mo_openid_mail_share_enable']) ? $_POST['mo_openid_mail_share_enable'] : 0);
1239
- update_option( 'mo_openid_print_share_enable', isset( $_POST['mo_openid_print_share_enable']) ? $_POST['mo_openid_print_share_enable'] : 0);
1240
- update_option( 'mo_openid_whatsapp_share_enable', isset( $_POST['mo_openid_whatsapp_share_enable']) ? $_POST['mo_openid_whatsapp_share_enable'] : 0);
1241
-
1242
- update_option('mo_share_options_enable_home_page',isset( $_POST['mo_share_options_home_page']) ? $_POST['mo_share_options_home_page'] : 0);
1243
- update_option('mo_share_options_enable_post',isset( $_POST['mo_share_options_post']) ? $_POST['mo_share_options_post'] : 0);
1244
- update_option('mo_share_options_enable_static_pages',isset( $_POST['mo_share_options_static_pages']) ? $_POST['mo_share_options_static_pages'] : 0);
1245
- update_option('mo_share_options_wc_sp_summary',isset( $_POST['mo_share_options_wc_sp_summary']) ? $_POST['mo_share_options_wc_sp_summary'] : 0);
1246
- update_option('mo_share_options_wc_sp_summary_top',isset( $_POST['mo_share_options_wc_sp_summary_top']) ? $_POST['mo_share_options_wc_sp_summary_top'] : 0);
1247
- update_option('mo_share_options_enable_post_position',$_POST['mo_share_options_enable_post_position'] );
1248
- update_option('mo_share_options_home_page_position',$_POST['mo_share_options_home_page_position'] );
1249
- update_option('mo_share_options_static_pages_position',$_POST['mo_share_options_static_pages_position'] );
1250
- update_option('mo_share_options_bb_forum_position',$_POST['mo_share_options_bb_forum_position'] );
1251
- update_option('mo_share_options_bb_topic_position',$_POST['mo_share_options_bb_topic_position'] );
1252
- update_option('mo_share_options_bb_reply_position',$_POST['mo_share_options_bb_reply_position'] );
1253
- update_option('mo_openid_share_theme',$_POST['mo_openid_share_theme'] );
1254
- update_option('mo_share_vertical_hide_mobile',isset( $_POST['mo_share_vertical_hide_mobile']) ? $_POST['mo_share_vertical_hide_mobile'] : 0);
1255
- update_option('mo_share_options_bb_forum',isset( $_POST['mo_share_options_bb_forum']) ? $_POST['mo_share_options_bb_forum'] : 0);
1256
- update_option('mo_share_options_bb_topic',isset( $_POST['mo_share_options_bb_topic']) ? $_POST['mo_share_options_bb_topic'] : 0);
1257
- update_option('mo_share_options_bb_reply',isset( $_POST['mo_share_options_bb_reply']) ? $_POST['mo_share_options_bb_reply'] : 0);
1258
- update_option('mo_openid_share_widget_customize_text',$_POST['mo_openid_share_widget_customize_text'] );
1259
- update_option('mo_openid_share_widget_customize_text_color',$_POST['mo_openid_share_widget_customize_text_color'] );
1260
  update_option('mo_openid_share_twitter_username', sanitize_text_field($_POST['mo_openid_share_twitter_username'])) ;
1261
  update_option('mo_openid_share_email_subject', sanitize_text_field($_POST['mo_openid_share_email_subject'])) ;
1262
  update_option('mo_openid_share_email_body', sanitize_text_field($_POST['mo_openid_share_email_body'])) ;
1263
 
1264
- update_option('mo_openid_share_widget_customize_direction_horizontal',isset( $_POST['mo_openid_share_widget_customize_direction_horizontal']) ? $_POST['mo_openid_share_widget_customize_direction_horizontal'] : 0);
1265
- update_option('mo_openid_share_widget_customize_direction_vertical',isset( $_POST['mo_openid_share_widget_customize_direction_vertical']) ? $_POST['mo_openid_share_widget_customize_direction_vertical'] : 0);
1266
- update_option('mo_sharing_icon_custom_size',isset( $_POST['mo_sharing_icon_custom_size']) ? $_POST['mo_sharing_icon_custom_size'] : 35);
1267
- update_option('mo_sharing_icon_custom_color',$_POST['mo_sharing_icon_custom_color'] );
1268
- update_option('mo_openid_share_custom_theme',$_POST['mo_openid_share_custom_theme'] );
1269
- update_option('mo_sharing_icon_custom_font',$_POST['mo_sharing_icon_custom_font'] );
1270
- update_option('mo_sharing_icon_space',$_POST['mo_sharing_icon_space'] );
1271
  update_option( 'mo_openid_message', 'Your settings are saved successfully.' );
1272
  $this->mo_openid_show_success_message();
1273
  if(!mo_openid_is_customer_registered()) {
@@ -1360,10 +1360,10 @@ Thank you.';
1360
  $email = '';
1361
  if(isset($_POST['deactivate_plugin']) )
1362
  {
1363
- $message.=' '. $_POST['deactivate_plugin'];
1364
  if($_POST['mo_openid_query_feedback']!='')
1365
  {
1366
- $message.='. '.$_POST['mo_openid_query_feedback'];
1367
  }
1368
 
1369
  if(get_option('mo_openid_admin_email'))
1
  <?php
2
  /**
3
  * Plugin Name: Social Login, Social Sharing by miniOrange
4
+ * Plugin URI: https://plugins.miniorange.com/social-login-social-sharing
5
  * Description: Allow your users to login, comment and share with social login apps like Facebook, Google, Twitter, LinkedIn etc using customizable buttons.
6
+ * Version: 7.2.1
7
  * Author: social login (miniOrange)
8
  * License URI: http://miniorange.com/usecases/miniOrange_User_Agreement.pdf
9
  */
13
  require('class-mo-openid-sso-customer.php');
14
  require('class-mo-openid-sso-shortcode-buttons.php');
15
  require('class-mo-openid-social-comment.php');
16
+ define('MO_OPENID_SOCIAL_LOGIN_VERSION', '7.2.1');
17
  include dirname( __FILE__ ) . '/mo_openid_feedback_form.php';
18
  class Miniorange_OpenID_SSO {
19
 
878
  }
879
  return;
880
  } else {
881
+ $email = sanitize_email($_POST['email']);
882
 
883
  }
884
  }
942
  wp_die('<strong>ERROR</strong>: Invalid Request.');
943
  } else {
944
 
945
+ update_option( 'mo_openid_google_enable', isset( $_POST['mo_openid_google_enable']) ? sanitize_text_field($_POST['mo_openid_google_enable']) : 0);
946
+ update_option( 'mo_openid_salesforce_enable', isset( $_POST['mo_openid_salesforce_enable']) ? sanitize_text_field($_POST['mo_openid_salesforce_enable']) : 0);
947
  if($this->if_custom_app_exists('facebook')) {
948
+ update_option('mo_openid_facebook_enable', isset($_POST['mo_openid_facebook_enable']) ? sanitize_text_field($_POST['mo_openid_facebook_enable']) : 0);
949
  }
950
  else if(isset($_POST['mo_openid_facebook_enable'])) {
951
  update_option('mo_openid_facebook_enable',0);
952
  $this->mo_openid_show_facebook_error_message();
953
 
954
  }
955
+ update_option( 'mo_openid_linkedin_enable', isset( $_POST['mo_openid_linkedin_enable']) ? sanitize_text_field($_POST['mo_openid_linkedin_enable']) : 0);
956
+ update_option( 'mo_openid_windowslive_enable', isset( $_POST['mo_openid_windowslive_enable']) ? sanitize_text_field($_POST['mo_openid_windowslive_enable']) : 0);
957
+ update_option( 'mo_openid_amazon_enable', isset( $_POST['mo_openid_amazon_enable']) ? sanitize_text_field($_POST['mo_openid_amazon_enable']) : 0);
958
+ update_option( 'mo_openid_instagram_enable', isset( $_POST['mo_openid_instagram_enable']) ? sanitize_text_field($_POST['mo_openid_instagram_enable']) : 0);
959
+ update_option( 'mo_openid_twitter_enable', isset( $_POST['mo_openid_twitter_enable']) ? sanitize_text_field($_POST['mo_openid_twitter_enable']) : 0);
960
+ update_option( 'mo_openid_vkontakte_enable', isset( $_POST['mo_openid_vkontakte_enable']) ? sanitize_text_field($_POST['mo_openid_vkontakte_enable']) : 0);
961
+ update_option( 'mo_openid_yahoo_enable', isset( $_POST['mo_openid_yahoo_enable']) ? sanitize_text_field($_POST['mo_openid_yahoo_enable']) : 0);
962
 
963
+ update_option( 'mo_openid_default_login_enable', isset( $_POST['mo_openid_default_login_enable']) ? sanitize_text_field($_POST['mo_openid_default_login_enable']) : 0);
964
+ update_option( 'mo_openid_default_register_enable', isset( $_POST['mo_openid_default_register_enable']) ? sanitize_text_field($_POST['mo_openid_default_register_enable']) : 0);
965
+ update_option( 'mo_openid_default_comment_enable', isset( $_POST['mo_openid_default_comment_enable']) ? sanitize_text_field($_POST['mo_openid_default_comment_enable']) : 0);
966
 
967
 
968
 
969
  // GDPR options
970
+ update_option( 'mo_openid_gdpr_consent_enable', isset( $_POST['mo_openid_gdpr_consent_enable']) ? sanitize_text_field($_POST['mo_openid_gdpr_consent_enable']) : 0);
971
  if(get_option('mo_openid_gdpr_consent_enable') == 1 && (!mo_openid_restrict_user())) {
972
+ update_option('mo_openid_privacy_policy_url', isset($_POST['mo_openid_privacy_policy_url']) ? sanitize_text_field($_POST['mo_openid_privacy_policy_url']) : get_option('mo_openid_privacy_policy_url'));
973
+ update_option('mo_openid_privacy_policy_text', isset($_POST['mo_openid_privacy_policy_text']) ? sanitize_text_field($_POST['mo_openid_privacy_policy_text']) : get_option('mo_openid_privacy_policy_text'));
974
  update_option('mo_openid_gdpr_consent_message', isset($_POST['mo_openid_gdpr_consent_message']) ? stripslashes($_POST['mo_openid_gdpr_consent_message']) : get_option('mo_openid_gdpr_consent_message'));
975
  }
976
  //Redirect URL
977
+ update_option( 'mo_openid_login_redirect', sanitize_text_field($_POST['mo_openid_login_redirect']));
978
+ update_option( 'mo_openid_login_redirect_url', sanitize_text_field($_POST['mo_openid_login_redirect_url'] ));
979
+ update_option( 'mo_openid_relative_login_redirect_url', isset( $_POST['mo_openid_relative_login_redirect_url']) ? sanitize_text_field($_POST['mo_openid_relative_login_redirect_url']) : "" );
980
 
981
  //Logout Url
982
+ update_option( 'mo_openid_logout_redirection_enable', isset( $_POST['mo_openid_logout_redirection_enable']) ? sanitize_text_field($_POST['mo_openid_logout_redirection_enable']) : 0);
983
+ update_option( 'mo_openid_logout_redirect', sanitize_text_field($_POST['mo_openid_logout_redirect']));
984
+ update_option( 'mo_openid_logout_redirect_url', sanitize_text_field($_POST['mo_openid_logout_redirect_url'] ));
985
 
986
  //auto register
987
+ update_option( 'mo_openid_auto_register_enable', isset( $_POST['mo_openid_auto_register_enable']) ? sanitize_text_field($_POST['mo_openid_auto_register_enable']) : 0);
988
+ update_option( 'mo_openid_register_disabled_message', sanitize_text_field($_POST['mo_openid_register_disabled_message']));
989
 
990
 
991
  //email notification
992
+ update_option( 'mo_openid_email_enable', isset( $_POST['mo_openid_email_enable']) ? sanitize_text_field($_POST['mo_openid_email_enable']) : 0);
993
 
994
  //Customized text
995
+ update_option('mo_openid_login_widget_customize_text',sanitize_text_field($_POST['mo_openid_login_widget_customize_text'] ));
996
+ update_option( 'mo_openid_login_button_customize_text',sanitize_text_field($_POST['mo_openid_login_button_customize_text'] ));
997
 
998
  //profile completion
999
+ update_option('mo_openid_enable_profile_completion', isset( $_POST['mo_openid_enable_profile_completion']) ? sanitize_text_field($_POST['mo_openid_enable_profile_completion']) : 0);
1000
 
1001
  if(get_option('mo_openid_enable_profile_completion') == 1) {
1002
 
1003
+ update_option('mo_profile_complete_title', sanitize_text_field($_POST['mo_profile_complete_title']));
1004
+ update_option('mo_profile_complete_username_label', sanitize_text_field($_POST['mo_profile_complete_username_label']));
1005
+ update_option('mo_profile_complete_email_label', sanitize_text_field($_POST['mo_profile_complete_email_label']));
1006
+ update_option('mo_profile_complete_submit_button', sanitize_text_field($_POST['mo_profile_complete_submit_button']));
1007
+ update_option('mo_profile_complete_instruction', sanitize_text_field($_POST['mo_profile_complete_instruction']));
1008
+ update_option('mo_profile_complete_extra_instruction', sanitize_text_field($_POST['mo_profile_complete_extra_instruction']));
1009
+ update_option('mo_profile_complete_uname_exist', sanitize_text_field($_POST['mo_profile_complete_uname_exist']));
1010
+
1011
+ update_option('mo_email_verify_resend_otp_button', sanitize_text_field($_POST['mo_email_verify_resend_otp_button']));
1012
+ update_option('mo_email_verify_back_button', sanitize_text_field($_POST['mo_email_verify_back_button']));
1013
+ update_option('mo_email_verify_title', sanitize_text_field($_POST['mo_email_verify_title']));
1014
+ update_option('mo_email_verify_message', sanitize_text_field($_POST['mo_email_verify_message']));
1015
+ update_option('mo_email_verify_verification_code_instruction', sanitize_text_field($_POST['mo_email_verify_verification_code_instruction']));
1016
+ update_option('mo_email_verify_wrong_otp', sanitize_text_field($_POST['mo_email_verify_wrong_otp']));
1017
 
1018
  $_POST['custom_otp_msg']=stripslashes( $_POST['custom_otp_msg']);
1019
+ update_option('custom_otp_msg',sanitize_text_field($_POST['custom_otp_msg']));
1020
  }
1021
  //account-linking
1022
+ update_option( 'mo_openid_account_linking_enable', isset( $_POST['mo_openid_account_linking_enable']) ? sanitize_text_field($_POST['mo_openid_account_linking_enable']) : 0);
1023
 
1024
  if(get_option('mo_openid_account_linking_enable') == 1 && (!mo_openid_restrict_user())) {
1025
 
1026
+ update_option('mo_account_linking_title', sanitize_text_field($_POST['mo_account_linking_title']));
1027
+ update_option('mo_account_linking_new_user_button', sanitize_text_field($_POST['mo_account_linking_new_user_button']));
1028
+ update_option('mo_account_linking_existing_user_button', sanitize_text_field($_POST['mo_account_linking_existing_user_button']));
1029
+ update_option('mo_account_linking_new_user_instruction', sanitize_text_field($_POST['mo_account_linking_new_user_instruction']));
1030
+ update_option('mo_account_linking_existing_user_instruction', sanitize_text_field($_POST['mo_account_linking_existing_user_instruction']));
1031
+ update_option('mo_account_linking_extra_instruction', sanitize_text_field($_POST['mo_account_linking_extra_instruction']));
1032
  }
1033
 
1034
  update_option('mo_openid_login_widget_customize_logout_name_text',sanitize_text_field($_POST['mo_openid_login_widget_customize_logout_name_text']));
1035
  update_option( 'mo_openid_login_widget_customize_logout_text',sanitize_text_field($_POST['mo_openid_login_widget_customize_logout_text']));
1036
+ update_option('moopenid_logo_check', isset( $_POST['moopenid_logo_check']) ? sanitize_text_field($_POST['moopenid_logo_check']) : 0);
1037
+ update_option('mo_login_openid_login_widget_customize_textcolor',sanitize_text_field($_POST['mo_login_openid_login_widget_customize_textcolor']));
1038
+ update_option('mo_openid_login_theme',sanitize_text_field($_POST['mo_openid_login_theme'] ));
1039
  update_option( 'mo_openid_message', 'Your settings are saved successfully.' );
1040
 
1041
  //customization of icons
1042
+ update_option('mo_login_icon_custom_size',sanitize_text_field($_POST['mo_login_icon_custom_size'] ));
1043
+ update_option('mo_login_icon_space',sanitize_text_field($_POST['mo_login_icon_space'] ));
1044
+ update_option('mo_login_icon_custom_width',sanitize_text_field($_POST['mo_login_icon_custom_width'] ));
1045
+ update_option('mo_login_icon_custom_height',sanitize_text_field($_POST['mo_login_icon_custom_height'] ));
1046
+ update_option('mo_openid_login_custom_theme',sanitize_text_field($_POST['mo_openid_login_custom_theme'] ));
1047
+ update_option( 'mo_login_icon_custom_color', sanitize_text_field($_POST['mo_login_icon_custom_color'] ));
1048
+ update_option('mo_login_icon_custom_boundary',sanitize_text_field($_POST['mo_login_icon_custom_boundary']));
1049
 
1050
  // avatar
1051
+ update_option( 'moopenid_social_login_avatar', isset( $_POST['moopenid_social_login_avatar']) ? sanitize_text_field($_POST['moopenid_social_login_avatar']) : 0);
1052
 
1053
 
1054
  if(isset($_POST['mapping_value_default']))
1055
+ update_option('mo_openid_login_role_mapping', isset( $_POST['mapping_value_default']) ? sanitize_text_field($_POST['mapping_value_default']) : 'subscriber');
1056
 
1057
  if(mo_openid_is_customer_valid() && !mo_openid_get_customer_plan('Do It Yourself')){
1058
  //Attribute collection
1059
+ update_option( 'moopenid_user_attributes', isset( $_POST['moopenid_user_attributes']) ? sanitize_text_field($_POST['moopenid_user_attributes']) : 0);
1060
  }
1061
 
1062
  $this->mo_openid_show_success_message();
1076
  // woocommerce display options
1077
  if(!mo_openid_restrict_user()) {
1078
 
1079
+ update_option('mo_openid_woocommerce_login_form', isset($_POST['mo_openid_woocommerce_login_form']) ? sanitize_text_field($_POST['mo_openid_woocommerce_login_form']) : 0);
1080
+ update_option('mo_openid_woocommerce_before_login_form', isset($_POST['mo_openid_woocommerce_before_login_form']) ? sanitize_text_field($_POST['mo_openid_woocommerce_before_login_form']) : 0);
1081
+ update_option('mo_openid_woocommerce_center_login_form', isset($_POST['mo_openid_woocommerce_center_login_form']) ? sanitize_text_field($_POST['mo_openid_woocommerce_center_login_form']) : 0);
1082
+ update_option('mo_openid_woocommerce_register_form_start', isset($_POST['mo_openid_woocommerce_register_form_start']) ? sanitize_text_field($_POST['mo_openid_woocommerce_register_form_start']) : 0);
1083
+ update_option('mo_openid_woocommerce_center_register_form', isset($_POST['mo_openid_woocommerce_center_register_form']) ? sanitize_text_field($_POST['mo_openid_woocommerce_center_register_form']) : 0);
1084
+ update_option('mo_openid_woocommerce_register_form_end', isset($_POST['mo_openid_woocommerce_register_form_end']) ? sanitize_text_field($_POST['mo_openid_woocommerce_register_form_end']) : 0);
1085
+ update_option('mo_openid_woocommerce_before_checkout_billing_form', isset($_POST['mo_openid_woocommerce_before_checkout_billing_form']) ? sanitize_text_field($_POST['mo_openid_woocommerce_before_checkout_billing_form']) : 0);
1086
+ update_option('mo_openid_woocommerce_after_checkout_billing_form', isset($_POST['mo_openid_woocommerce_after_checkout_billing_form']) ? sanitize_text_field($_POST['mo_openid_woocommerce_after_checkout_billing_form']) : 0);
1087
  }
1088
  }
1089
  }else if( isset($_POST['mo_openid_save_buddypress_field_nonce']) and isset( $_POST['option'] ) and $_POST['option'] == "mo_openid_save_buddypress_field" ){
1093
  } else {
1094
  //buddypress display options
1095
  if(!mo_openid_restrict_user()) {
1096
+ update_option('mo_openid_bp_before_register_page', isset($_POST['mo_openid_bp_before_register_page']) ? sanitize_text_field($_POST['mo_openid_bp_before_register_page']) : 0);
1097
+ update_option('mo_openid_bp_before_account_details_fields', isset($_POST['mo_openid_bp_before_account_details_fields']) ? sanitize_text_field($_POST['mo_openid_bp_before_account_details_fields']) : 0);
1098
+ update_option('mo_openid_bp_after_register_page', isset($_POST['mo_openid_bp_after_register_page']) ? sanitize_text_field($_POST['mo_openid_bp_after_register_page']) : 0);
1099
  }
1100
  }
1101
  }
1106
  } else {
1107
 
1108
  //commenting
1109
+ update_option( 'mo_openid_social_comment_fb', isset( $_POST['mo_openid_social_comment_fb']) ? sanitize_text_field($_POST['mo_openid_social_comment_fb']) : 0);
1110
+ update_option( 'mo_openid_social_comment_google', isset( $_POST['mo_openid_social_comment_google']) ? sanitize_text_field($_POST['mo_openid_social_comment_google']) : 0);
1111
+ update_option( 'mo_openid_social_comment_default', isset( $_POST['mo_openid_social_comment_default']) ? sanitize_text_field($_POST['mo_openid_social_comment_default']) : 0);
1112
 
1113
  //comment position
1114
+ update_option( 'mo_openid_social_comment_blogpost', isset( $_POST['mo_openid_social_comment_blogpost']) ? sanitize_text_field($_POST['mo_openid_social_comment_blogpost']) : 0);
1115
+ update_option( 'mo_openid_social_comment_static', isset( $_POST['mo_openid_social_comment_static']) ? sanitize_text_field($_POST['mo_openid_social_comment_static']) : 0);
1116
 
1117
  //comment labels
1118
+ update_option('mo_openid_social_comment_default_label', sanitize_text_field($_POST['mo_openid_social_comment_default_label']) );
1119
+ update_option('mo_openid_social_comment_fb_label', sanitize_text_field($_POST['mo_openid_social_comment_fb_label']) );
1120
+ update_option('mo_openid_social_comment_google_label', sanitize_text_field($_POST['mo_openid_social_comment_google_label']) );
1121
+ update_option('mo_openid_social_comment_heading_label', sanitize_text_field($_POST['mo_openid_social_comment_heading_label']) );
1122
 
1123
  update_option( 'mo_openid_message', 'Your settings are saved successfully.' );
1124
  $this->mo_openid_show_success_message();
1136
  wp_die('<strong>ERROR</strong>: Invalid Request.');
1137
  } else {
1138
  // Contact Us query
1139
+ $email = sanitize_email($_POST['mo_openid_contact_us_email']);
1140
+ $phone = sanitize_text_field($_POST['mo_openid_contact_us_phone']);
1141
+ $query = sanitize_text_field($_POST['mo_openid_contact_us_query']);
1142
  $customer = new CustomerOpenID();
1143
  if ( $this->mo_openid_check_empty_or_null( $email ) || $this->mo_openid_check_empty_or_null( $query ) ) {
1144
  update_option('mo_openid_message', 'Please fill up Email and Query fields to submit your query.');
1221
  if ( ! wp_verify_nonce( $nonce, 'mo-openid-save-other-settings-nonce' ) ) {
1222
  wp_die('<strong>ERROR</strong>: Invalid Request.');
1223
  } else {
1224
+ update_option( 'mo_openid_google_share_enable', isset( $_POST['mo_openid_google_share_enable']) ? sanitize_text_field($_POST['mo_openid_google_share_enable']) : 0);
1225
+ update_option( 'mo_openid_facebook_share_enable', isset( $_POST['mo_openid_facebook_share_enable']) ? sanitize_text_field($_POST['mo_openid_facebook_share_enable']) : 0);
1226
+ update_option( 'mo_openid_linkedin_share_enable', isset( $_POST['mo_openid_linkedin_share_enable']) ? sanitize_text_field($_POST['mo_openid_linkedin_share_enable']) : 0);
1227
+ update_option( 'mo_openid_reddit_share_enable', isset( $_POST['mo_openid_reddit_share_enable']) ? sanitize_text_field($_POST['mo_openid_reddit_share_enable']) : 0);
1228
+ update_option( 'mo_openid_pinterest_share_enable', isset( $_POST['mo_openid_pinterest_share_enable']) ? sanitize_text_field($_POST['mo_openid_pinterest_share_enable']) : 0);
1229
+ update_option( 'mo_openid_twitter_share_enable', isset( $_POST['mo_openid_twitter_share_enable']) ? sanitize_text_field($_POST['mo_openid_twitter_share_enable']) : 0);
1230
+ update_option( 'mo_openid_tumblr_share_enable', isset( $_POST['mo_openid_tumblr_share_enable']) ? sanitize_text_field($_POST['mo_openid_tumblr_share_enable']) : 0);
1231
+ update_option( 'mo_openid_delicious_share_enable', isset( $_POST['mo_openid_delicious_share_enable']) ? sanitize_text_field($_POST['mo_openid_delicious_share_enable']) : 0);
1232
+ update_option( 'mo_openid_vkontakte_share_enable', isset( $_POST['mo_openid_vkontakte_share_enable']) ? sanitize_text_field($_POST['mo_openid_vkontakte_share_enable']) : 0);
1233
+ update_option( 'mo_openid_stumble_share_enable', isset( $_POST['mo_openid_stumble_share_enable']) ? sanitize_text_field($_POST['mo_openid_stumble_share_enable']) : 0);
1234
+ update_option( 'mo_openid_odnoklassniki_share_enable', isset( $_POST['mo_openid_odnoklassniki_share_enable']) ? sanitize_text_field($_POST['mo_openid_odnoklassniki_share_enable']) : 0);
1235
+ update_option( 'mo_openid_digg_share_enable', isset( $_POST['mo_openid_digg_share_enable']) ? sanitize_text_field($_POST['mo_openid_digg_share_enable']) : 0);
1236
+ update_option( 'mo_openid_pocket_share_enable', isset( $_POST['mo_openid_pocket_share_enable']) ? sanitize_text_field($_POST['mo_openid_pocket_share_enable']) : 0);
1237
+
1238
+ update_option( 'mo_openid_mail_share_enable', isset( $_POST['mo_openid_mail_share_enable']) ? sanitize_text_field($_POST['mo_openid_mail_share_enable']) : 0);
1239
+ update_option( 'mo_openid_print_share_enable', isset( $_POST['mo_openid_print_share_enable']) ? sanitize_text_field($_POST['mo_openid_print_share_enable']) : 0);
1240
+ update_option( 'mo_openid_whatsapp_share_enable', isset( $_POST['mo_openid_whatsapp_share_enable']) ? sanitize_text_field($_POST['mo_openid_whatsapp_share_enable']) : 0);
1241
+
1242
+ update_option('mo_share_options_enable_home_page',isset( $_POST['mo_share_options_home_page']) ? sanitize_text_field($_POST['mo_share_options_home_page']) : 0);
1243
+ update_option('mo_share_options_enable_post',isset( $_POST['mo_share_options_post']) ? sanitize_text_field($_POST['mo_share_options_post']) : 0);
1244
+ update_option('mo_share_options_enable_static_pages',isset( $_POST['mo_share_options_static_pages']) ? sanitize_text_field($_POST['mo_share_options_static_pages']) : 0);
1245
+ update_option('mo_share_options_wc_sp_summary',isset( $_POST['mo_share_options_wc_sp_summary']) ? sanitize_text_field($_POST['mo_share_options_wc_sp_summary']) : 0);
1246
+ update_option('mo_share_options_wc_sp_summary_top',isset( $_POST['mo_share_options_wc_sp_summary_top']) ? sanitize_text_field($_POST['mo_share_options_wc_sp_summary_top']) : 0);
1247
+ update_option('mo_share_options_enable_post_position', sanitize_text_field($_POST['mo_share_options_enable_post_position']) );
1248
+ update_option('mo_share_options_home_page_position', sanitize_text_field($_POST['mo_share_options_home_page_position']) );
1249
+ update_option('mo_share_options_static_pages_position', sanitize_text_field($_POST['mo_share_options_static_pages_position']) );
1250
+ update_option('mo_share_options_bb_forum_position', sanitize_text_field($_POST['mo_share_options_bb_forum_position']) );
1251
+ update_option('mo_share_options_bb_topic_position', sanitize_text_field($_POST['mo_share_options_bb_topic_position']) );
1252
+ update_option('mo_share_options_bb_reply_position', sanitize_text_field($_POST['mo_share_options_bb_reply_position']) );
1253
+ update_option('mo_openid_share_theme', sanitize_text_field($_POST['mo_openid_share_theme']) );
1254
+ update_option('mo_share_vertical_hide_mobile',isset( $_POST['mo_share_vertical_hide_mobile']) ? sanitize_text_field($_POST['mo_share_vertical_hide_mobile']) : 0);
1255
+ update_option('mo_share_options_bb_forum',isset( $_POST['mo_share_options_bb_forum']) ? sanitize_text_field($_POST['mo_share_options_bb_forum']) : 0);
1256
+ update_option('mo_share_options_bb_topic',isset( $_POST['mo_share_options_bb_topic']) ? sanitize_text_field($_POST['mo_share_options_bb_topic']) : 0);
1257
+ update_option('mo_share_options_bb_reply',isset( $_POST['mo_share_options_bb_reply']) ? sanitize_text_field($_POST['mo_share_options_bb_reply']) : 0);
1258
+ update_option('mo_openid_share_widget_customize_text', sanitize_text_field($_POST['mo_openid_share_widget_customize_text']) );
1259
+ update_option('mo_openid_share_widget_customize_text_color', sanitize_text_field($_POST['mo_openid_share_widget_customize_text_color']) );
1260
  update_option('mo_openid_share_twitter_username', sanitize_text_field($_POST['mo_openid_share_twitter_username'])) ;
1261
  update_option('mo_openid_share_email_subject', sanitize_text_field($_POST['mo_openid_share_email_subject'])) ;
1262
  update_option('mo_openid_share_email_body', sanitize_text_field($_POST['mo_openid_share_email_body'])) ;
1263
 
1264
+ update_option('mo_openid_share_widget_customize_direction_horizontal',isset( $_POST['mo_openid_share_widget_customize_direction_horizontal']) ? sanitize_text_field($_POST['mo_openid_share_widget_customize_direction_horizontal']) : 0);
1265
+ update_option('mo_openid_share_widget_customize_direction_vertical',isset( $_POST['mo_openid_share_widget_customize_direction_vertical']) ? sanitize_text_field($_POST['mo_openid_share_widget_customize_direction_vertical']) : 0);
1266
+ update_option('mo_sharing_icon_custom_size',isset( $_POST['mo_sharing_icon_custom_size']) ? sanitize_text_field($_POST['mo_sharing_icon_custom_size']) : 35);
1267
+ update_option('mo_sharing_icon_custom_color', sanitize_text_field($_POST['mo_sharing_icon_custom_color']) );
1268
+ update_option('mo_openid_share_custom_theme', sanitize_text_field($_POST['mo_openid_share_custom_theme']) );
1269
+ update_option('mo_sharing_icon_custom_font', sanitize_text_field($_POST['mo_sharing_icon_custom_font']) );
1270
+ update_option('mo_sharing_icon_space', sanitize_text_field($_POST['mo_sharing_icon_space']) );
1271
  update_option( 'mo_openid_message', 'Your settings are saved successfully.' );
1272
  $this->mo_openid_show_success_message();
1273
  if(!mo_openid_is_customer_registered()) {
1360
  $email = '';
1361
  if(isset($_POST['deactivate_plugin']) )
1362
  {
1363
+ $message.=' '. sanitize_text_field($_POST['deactivate_plugin']);
1364
  if($_POST['mo_openid_query_feedback']!='')
1365
  {
1366
+ $message.='. '.sanitize_text_field($_POST['mo_openid_query_feedback']);
1367
  }
1368
 
1369
  if(get_option('mo_openid_admin_email'))
readme.txt CHANGED
@@ -4,7 +4,7 @@ Donate link: https://www.miniorange.com
4
  Tags: social login, facebook login, google login, twitter login, Vkontakte login, social, facebook, twitter, google, login, google, social connect, social network login, social plugin, Vkontakte, LinkedIn
5
  Requires at least: 2.0.2
6
  Tested up to: 5.1
7
- Stable tag: 7.2
8
  License URI: http://miniorange.com/usecases/miniOrange_User_Agreement.pdf
9
 
10
  Social Login with Google, Facebook, Twitter, Vkontakte, LinkedIn and more. GDPR compliant. Social sharing and social comments. Quickest setup.
@@ -175,6 +175,10 @@ Please email us at info@miniorange.com. You can also submit your query from the
175
 
176
 
177
  == Changelog ==
 
 
 
 
178
  = 7.2 =
179
  SECURITY FIXES
180
  * Added nonce check for all forms
@@ -621,6 +625,10 @@ SECURITY FIXES
621
  * First version of Social Login, Social Sharing plugin.
622
 
623
  == Upgrade Notice ==
 
 
 
 
624
  = 7.2 =
625
  SECURITY FIXES
626
  * Added nonce check for all forms
4
  Tags: social login, facebook login, google login, twitter login, Vkontakte login, social, facebook, twitter, google, login, google, social connect, social network login, social plugin, Vkontakte, LinkedIn
5
  Requires at least: 2.0.2
6
  Tested up to: 5.1
7
+ Stable tag: 7.2.1
8
  License URI: http://miniorange.com/usecases/miniOrange_User_Agreement.pdf
9
 
10
  Social Login with Google, Facebook, Twitter, Vkontakte, LinkedIn and more. GDPR compliant. Social sharing and social comments. Quickest setup.
175
 
176
 
177
  == Changelog ==
178
+ = 7.2.1 =
179
+ SECURITY FIXES
180
+ * Fixed sanitization issues
181
+
182
  = 7.2 =
183
  SECURITY FIXES
184
  * Added nonce check for all forms
625
  * First version of Social Login, Social Sharing plugin.
626
 
627
  == Upgrade Notice ==
628
+ = 7.2.1 =
629
+ SECURITY FIXES
630
+ * Fixed sanitization issues
631
+
632
  = 7.2 =
633
  SECURITY FIXES
634
  * Added nonce check for all forms