User registration & user profile – Profile Builder - Version 1.1.60

Version Description

Fixed a few notices in the plugin.

Download this release

Release Info

Developer barinagabriel
Plugin Icon 128x128 User registration & user profile – Profile Builder
Version 1.1.60
Comparing to
See all releases

Code changes from version 1.1.59 to 1.1.60

Files changed (4) hide show
  1. front-end/wppb.recover.password.php +5 -5
  2. index.php +2 -2
  3. readme.txt +12 -6
  4. uninstall.php +4 -6
front-end/wppb.recover.password.php CHANGED
@@ -88,7 +88,7 @@ function wppb_front_end_password_recovery(){
88
  $recoverPasswordFilterArray['userMailMessage1'] = sprintf(__('Someone requested that the password be reset for the following account: <b>%1$s</b><br/>If this was a mistake, just ignore this email and nothing will happen.<br/>To reset your password, visit the following link:%2$s', 'profilebuilder'), $requestedUserLogin, '<a href="'.add_query_arg( array( 'loginName' => $requestedUserLogin, 'key' => $key ), wppb_curpageurl() ).'">'.add_query_arg( array( 'loginName' => $requestedUserLogin, 'key' => $key ), wppb_curpageurl() ).'</a>');
89
  $recoverPasswordFilterArray['userMailMessage1'] = apply_filters('wppb_recover_password_message_content_sent_to_user1', $recoverPasswordFilterArray['userMailMessage1'], $requestedUserID, $requestedUserLogin);
90
 
91
- $recoverPasswordFilterArray['userMailMessageTitle1'] = sprintf(__('Password Reset Feature from "%1$s"', 'profilebuilder'), $blogname = wp_specialchars_decode(get_option('blogname'), ENT_QUOTES));
92
  $recoverPasswordFilterArray['userMailMessageTitle1'] = apply_filters('wppb_recover_password_message_title_sent_to_user1', $recoverPasswordFilterArray['userMailMessageTitle1']);
93
 
94
  //we add this filter to enable html encoding
@@ -138,7 +138,7 @@ function wppb_front_end_password_recovery(){
138
  $recoverPasswordFilterArray['userMailMessage1'] = sprintf(__('Someone requested that the password be reset for the following account: <b>%1$s</b><br/>If this was a mistake, just ignore this email and nothing will happen.<br/>To reset your password, visit the following link:%2$s', 'profilebuilder'), $requestedUserLogin, '<a href="'.add_query_arg( array( 'loginName' => $requestedUserLogin, 'key' => $key ), wppb_curpageurl() ).'">'.add_query_arg( array( 'loginName' => $requestedUserLogin, 'key' => $key ), wppb_curpageurl() ).'</a>');
139
  $recoverPasswordFilterArray['userMailMessage1'] = apply_filters('wppb_recover_password_message_content_sent_to_user1', $recoverPasswordFilterArray['userMailMessage1'], $requestedUserID, $requestedUserLogin);
140
 
141
- $recoverPasswordFilterArray['userMailMessageTitle1'] = sprintf(__('Password Reset Feature from "%1$s"', 'profilebuilder'), $blogname = wp_specialchars_decode(get_option('blogname'), ENT_QUOTES));
142
  $recoverPasswordFilterArray['userMailMessageTitle1'] = apply_filters('wppb_recover_password_message_title_sent_to_user1', $recoverPasswordFilterArray['userMailMessageTitle1']);
143
 
144
  //we add this filter to enable html encoding
@@ -164,7 +164,7 @@ function wppb_front_end_password_recovery(){
164
 
165
  }
166
  /* If the user used the correct key-code, update his/her password */
167
- elseif ( 'POST' == $_SERVER['REQUEST_METHOD'] && !empty( $_POST['action2'] ) && $_POST['action2'] == 'recover_password2' && wp_verify_nonce($_POST['password_recovery_nonce_field2'],'verify_true_password_recovery2') ) {
168
  if (($_POST['passw1'] == $_POST['passw2']) && (!empty($_POST['passw1']) && !empty($_POST['passw2']))){
169
  $message2 = __('Your password has been successfully changed!', 'profilebuilder');
170
  $messageNo2 = '1';
@@ -262,7 +262,7 @@ function wppb_front_end_password_recovery(){
262
  <input name="recover_password2" type="submit" id="recover_password2" class="submit button" value="<?php echo apply_filters('wppb_recover_password_button_name1', $button_name); ?>" />
263
  <input name="action2" type="hidden" id="action2" value="recover_password2" />
264
  </p><!-- .form-submit -->
265
- <?php wp_nonce_field('verify_true_password_recovery2', 'password_recovery_nonce_field2'); ?>
266
  </form><!-- #recover_password -->
267
  <?php
268
  }elseif ($messageNo2 == '1'){
@@ -293,7 +293,7 @@ function wppb_front_end_password_recovery(){
293
  <input name="recover_password2" type="submit" id="recover_password2" class="submit button" value="<?php echo apply_filters('wppb_recover_password_button_name2', $button_name); ?>" />
294
  <input name="action2" type="hidden" id="action2" value="recover_password2" />
295
  </p><!-- .form-submit -->
296
- <?php wp_nonce_field('verify_true_password_recovery2', 'password_recovery_nonce_field2'); ?>
297
  </form><!-- #recover_password -->
298
  <?php
299
  }
88
  $recoverPasswordFilterArray['userMailMessage1'] = sprintf(__('Someone requested that the password be reset for the following account: <b>%1$s</b><br/>If this was a mistake, just ignore this email and nothing will happen.<br/>To reset your password, visit the following link:%2$s', 'profilebuilder'), $requestedUserLogin, '<a href="'.add_query_arg( array( 'loginName' => $requestedUserLogin, 'key' => $key ), wppb_curpageurl() ).'">'.add_query_arg( array( 'loginName' => $requestedUserLogin, 'key' => $key ), wppb_curpageurl() ).'</a>');
89
  $recoverPasswordFilterArray['userMailMessage1'] = apply_filters('wppb_recover_password_message_content_sent_to_user1', $recoverPasswordFilterArray['userMailMessage1'], $requestedUserID, $requestedUserLogin);
90
 
91
+ $recoverPasswordFilterArray['userMailMessageTitle1'] = sprintf(__('Password Reset from "%1$s"', 'profilebuilder'), $blogname = wp_specialchars_decode(get_option('blogname'), ENT_QUOTES));
92
  $recoverPasswordFilterArray['userMailMessageTitle1'] = apply_filters('wppb_recover_password_message_title_sent_to_user1', $recoverPasswordFilterArray['userMailMessageTitle1']);
93
 
94
  //we add this filter to enable html encoding
138
  $recoverPasswordFilterArray['userMailMessage1'] = sprintf(__('Someone requested that the password be reset for the following account: <b>%1$s</b><br/>If this was a mistake, just ignore this email and nothing will happen.<br/>To reset your password, visit the following link:%2$s', 'profilebuilder'), $requestedUserLogin, '<a href="'.add_query_arg( array( 'loginName' => $requestedUserLogin, 'key' => $key ), wppb_curpageurl() ).'">'.add_query_arg( array( 'loginName' => $requestedUserLogin, 'key' => $key ), wppb_curpageurl() ).'</a>');
139
  $recoverPasswordFilterArray['userMailMessage1'] = apply_filters('wppb_recover_password_message_content_sent_to_user1', $recoverPasswordFilterArray['userMailMessage1'], $requestedUserID, $requestedUserLogin);
140
 
141
+ $recoverPasswordFilterArray['userMailMessageTitle1'] = sprintf(__('Password Reset from "%1$s"', 'profilebuilder'), $blogname = wp_specialchars_decode(get_option('blogname'), ENT_QUOTES));
142
  $recoverPasswordFilterArray['userMailMessageTitle1'] = apply_filters('wppb_recover_password_message_title_sent_to_user1', $recoverPasswordFilterArray['userMailMessageTitle1']);
143
 
144
  //we add this filter to enable html encoding
164
 
165
  }
166
  /* If the user used the correct key-code, update his/her password */
167
+ elseif ( 'POST' == $_SERVER['REQUEST_METHOD'] && !empty( $_POST['action2'] ) && $_POST['action2'] == 'recover_password2' && wp_verify_nonce( $_POST['password_recovery_nonce_field2'], 'verify_true_password_recovery2_'.$_POST['userData'] ) ) {
168
  if (($_POST['passw1'] == $_POST['passw2']) && (!empty($_POST['passw1']) && !empty($_POST['passw2']))){
169
  $message2 = __('Your password has been successfully changed!', 'profilebuilder');
170
  $messageNo2 = '1';
262
  <input name="recover_password2" type="submit" id="recover_password2" class="submit button" value="<?php echo apply_filters('wppb_recover_password_button_name1', $button_name); ?>" />
263
  <input name="action2" type="hidden" id="action2" value="recover_password2" />
264
  </p><!-- .form-submit -->
265
+ <?php wp_nonce_field( 'verify_true_password_recovery2_'.$user->ID, 'password_recovery_nonce_field2' ); ?>
266
  </form><!-- #recover_password -->
267
  <?php
268
  }elseif ($messageNo2 == '1'){
293
  <input name="recover_password2" type="submit" id="recover_password2" class="submit button" value="<?php echo apply_filters('wppb_recover_password_button_name2', $button_name); ?>" />
294
  <input name="action2" type="hidden" id="action2" value="recover_password2" />
295
  </p><!-- .form-submit -->
296
+ <?php wp_nonce_field( 'verify_true_password_recovery2_'.$user->ID, 'password_recovery_nonce_field2' ); ?>
297
  </form><!-- #recover_password -->
298
  <?php
299
  }
index.php CHANGED
@@ -3,7 +3,7 @@
3
  Plugin Name: Profile Builder
4
  Plugin URI: http://www.cozmoslabs.com/2011/04/12/wordpress-profile-builder-a-front-end-user-registration-login-and-edit-profile-plugin/
5
  Description: Login, registration and edit profile shortcodes for the front-end. Also you can chose what fields should be displayed or add new (custom) ones both in the front-end and in the dashboard.
6
- Version: 1.1.59
7
  Author: Reflection Media, Barina Gabriel, Antohe Cristian
8
  Author URI: http://www.reflectionmedia.ro
9
  License: GPL2
@@ -53,7 +53,7 @@ function wppb_return_bytes( $val ) {
53
  return $val;
54
  }
55
 
56
- define( 'PROFILE_BUILDER_VERSION', '1.1.59' );
57
  define( 'WPPB_PLUGIN_DIR', WP_PLUGIN_DIR . '/' . dirname( plugin_basename( __FILE__ ) ) );
58
  define( 'WPPB_PLUGIN_URL', plugin_dir_url( __FILE__ ) );
59
  define( 'WPPB_SERVER_MAX_UPLOAD_SIZE_BYTE', apply_filters( 'wppb_server_max_upload_size_byte_constant', wppb_return_bytes( ini_get( 'upload_max_filesize') ) ) );
3
  Plugin Name: Profile Builder
4
  Plugin URI: http://www.cozmoslabs.com/2011/04/12/wordpress-profile-builder-a-front-end-user-registration-login-and-edit-profile-plugin/
5
  Description: Login, registration and edit profile shortcodes for the front-end. Also you can chose what fields should be displayed or add new (custom) ones both in the front-end and in the dashboard.
6
+ Version: 1.1.61
7
  Author: Reflection Media, Barina Gabriel, Antohe Cristian
8
  Author URI: http://www.reflectionmedia.ro
9
  License: GPL2
53
  return $val;
54
  }
55
 
56
+ define( 'PROFILE_BUILDER_VERSION', '1.1.61' );
57
  define( 'WPPB_PLUGIN_DIR', WP_PLUGIN_DIR . '/' . dirname( plugin_basename( __FILE__ ) ) );
58
  define( 'WPPB_PLUGIN_URL', plugin_dir_url( __FILE__ ) );
59
  define( 'WPPB_SERVER_MAX_UPLOAD_SIZE_BYTE', apply_filters( 'wppb_server_max_upload_size_byte_constant', wppb_return_bytes( ini_get( 'upload_max_filesize') ) ) );
readme.txt CHANGED
@@ -6,7 +6,7 @@ Tags: registration, user profile, user registration, custom field registration,
6
 
7
  Requires at least: 3.1
8
  Tested up to: 3.8.1
9
- Stable tag: 1.1.59
10
 
11
  Simple to use profile plugin allowing front-end login, user registration and edit profile by using shortcodes.
12
 
@@ -40,7 +40,7 @@ Users with administrator rights have access to the following features:
40
 
41
  The [Pro version](http://www.cozmoslabs.com/wordpress-profile-builder/) has the following extra features:
42
 
43
- * Create Extra User Fields (Heading, Input, Checkbox, Agree to Terms Checkbox, Radio Buttons, DatePicker, Textareas, Upload Fields, Selects, Country Selects, Timezone Selects, Avatar Upload)
44
  * Add Avatar Upload for users
45
  * Front-end User Listing (sorting included)
46
  * Custom Redirects
@@ -94,6 +94,12 @@ This plugin only adds/removes user fields in the front-end. The default profile
94
  7. Password Recovery Page
95
 
96
  == Changelog ==
 
 
 
 
 
 
97
  = 1.1.59 =
98
  Improved some of the queries meant to select users at certain points, hidden input value on front-end (Pro version) and the remember me checkbox on the login page.
99
 
@@ -128,14 +134,14 @@ Minor changes in the plugin's readme file.
128
  Improved the userlisting feature in the Pro version.
129
 
130
  = 1.1.49 =
131
- Fixed "Edit Profile" bug and improved the "Admin Approval" default listing (in the paid versions).
132
 
133
  = 1.1.48 =
134
  Improved a few existing features (like WPML compatibility), and added a new feature: login with email address.
135
 
136
  = 1.1.47 =
137
  Improved the "Email Confirmation" feature and a few other functions.
138
- Added new options for the "Userlisting" feature (available in the Pro version of Profile Builder).
139
  Added translations: persian (thanks to Ali Mirzaei, info@alimir.ir)
140
 
141
  = 1.1.46 =
@@ -246,7 +252,7 @@ Added translations:
246
  *updated the english translation
247
 
248
  = 1.1.4 =
249
- Added the possibility to set up the default user-role on registration; by adding the role="role_name" argument (e.g. [wppb-register role="editor"]) the role is automatically set to all new users.
250
  Added translations:
251
  *norvegian (thanks to Havard Ulvin, haavard@ulvin.no)
252
  *dutch (thanks to Pascal Frencken, pascal.frencken@dedeelgaard.nl)
@@ -263,7 +269,7 @@ Added translations to:
263
  *french(thanks to Sebastien CEZARD, sebastiencezard@orange.fr)
264
 
265
  Bugfixes/enhancements:
266
- *login page now automatically refreshes itself after 1 second, a little less annoying than clicking the refresh button manually
267
  *fixed bug where translation didn't load like it should
268
  *added new user notification: the admin will now know about every new subscriber
269
  *fixed issue where adding one or more spaces in the checkbox options list, the user can't save values.
6
 
7
  Requires at least: 3.1
8
  Tested up to: 3.8.1
9
+ Stable tag: 1.1.61
10
 
11
  Simple to use profile plugin allowing front-end login, user registration and edit profile by using shortcodes.
12
 
40
 
41
  The [Pro version](http://www.cozmoslabs.com/wordpress-profile-builder/) has the following extra features:
42
 
43
+ * Create Extra User Fields (Heading, Input, Checkbox, Agree to Terms Checkbox, Radio Buttons, DatePicker, Textareas, Upload fields, Selects, Country Selects, Timezone selects, Avatar Upload)
44
  * Add Avatar Upload for users
45
  * Front-end User Listing (sorting included)
46
  * Custom Redirects
94
  7. Password Recovery Page
95
 
96
  == Changelog ==
97
+ = 1.1.60 =
98
+ Fixed a few notices in the plugin.
99
+
100
+ = 1.1.60 =
101
+ Emergency security update regarding the password recovery feature.
102
+
103
  = 1.1.59 =
104
  Improved some of the queries meant to select users at certain points, hidden input value on front-end (Pro version) and the remember me checkbox on the login page.
105
 
134
  Improved the userlisting feature in the Pro version.
135
 
136
  = 1.1.49 =
137
+ Fixed "Edit Profile" bug and impred the "Admin Approval" default listing (in the paid versions).
138
 
139
  = 1.1.48 =
140
  Improved a few existing features (like WPML compatibility), and added a new feature: login with email address.
141
 
142
  = 1.1.47 =
143
  Improved the "Email Confirmation" feature and a few other functions.
144
+ Added new options for the "Userlisting" feature (available in the Pro version of Profile Buildeer).
145
  Added translations: persian (thanks to Ali Mirzaei, info@alimir.ir)
146
 
147
  = 1.1.46 =
252
  *updated the english translation
253
 
254
  = 1.1.4 =
255
+ Added the possibility to set up the default user-role on registration; by adding the role="role_name" argument (e.g. [wppb-register role="editor"]) the role is automaticly set to all new users.
256
  Added translations:
257
  *norvegian (thanks to Havard Ulvin, haavard@ulvin.no)
258
  *dutch (thanks to Pascal Frencken, pascal.frencken@dedeelgaard.nl)
269
  *french(thanks to Sebastien CEZARD, sebastiencezard@orange.fr)
270
 
271
  Bugfixes/enhancements:
272
+ *login page now automaticly refreshes itself after 1 second, a little less annoying than clicking the refresh button manually
273
  *fixed bug where translation didn't load like it should
274
  *added new user notification: the admin will now know about every new subscriber
275
  *fixed issue where adding one or more spaces in the checkbox options list, the user can't save values.
uninstall.php CHANGED
@@ -1,17 +1,15 @@
1
  <?php
2
- if( !defined( 'WP_UNINSTALL_PLUGIN' ) )
3
  exit (); // If uninstall not called from WordPress exit
4
 
5
- /* get all the custom fields' names in one single array */
6
  $customFields = get_option('wppb_custom_fields','not_found');
7
 
8
  $customFieldNames = array();
9
  foreach($customFields as $key => $value)
10
  array_push($customFieldNames, $value['item_metaName']);
11
- /* END get all custom fields */
12
 
13
-
14
- /* delete all the custom fields */
15
  global $wpdb;
16
  $allUserMeta = $wpdb->get_results("SELECT * FROM $wpdb->usermeta");
17
 
@@ -47,4 +45,4 @@ delete_option( 'userListingSettings' ); // Delete the user-listing settings
47
  delete_option( 'customUserListingSettings' ); // Delete the user-listing settings (since 1.1.21)
48
  delete_option( 'reCaptchaSettings' ); // Delete the public and private keys used by the reCAPTCHA addon (since 1.1.42)
49
  delete_option( 'emailCustomizer' ); // Delete the email-customizer settings
50
- delete_option( 'wppb_version' ); // Delete the version number
1
  <?php
2
+ /* if( !defined( 'WP_UNINSTALL_PLUGIN' ) )
3
  exit (); // If uninstall not called from WordPress exit
4
 
5
+ // get all the custom fields' names in one single array
6
  $customFields = get_option('wppb_custom_fields','not_found');
7
 
8
  $customFieldNames = array();
9
  foreach($customFields as $key => $value)
10
  array_push($customFieldNames, $value['item_metaName']);
 
11
 
12
+ // delete all the custom fields
 
13
  global $wpdb;
14
  $allUserMeta = $wpdb->get_results("SELECT * FROM $wpdb->usermeta");
15
 
45
  delete_option( 'customUserListingSettings' ); // Delete the user-listing settings (since 1.1.21)
46
  delete_option( 'reCaptchaSettings' ); // Delete the public and private keys used by the reCAPTCHA addon (since 1.1.42)
47
  delete_option( 'emailCustomizer' ); // Delete the email-customizer settings
48
+ delete_option( 'wppb_version' ); // Delete the version number */