Remove Footer Credit - Version 1.0.7

Version Description

  • 05.07.2021 = Changed: Updated security fixes for XSS
Download this release

Release Info

Developer giucu91
Plugin Icon 128x128 Remove Footer Credit
Version 1.0.7
Comparing to
See all releases

Code changes from version 1.0.6 to 1.0.7

Files changed (2) hide show
  1. readme.txt +5 -2
  2. remove-footer-credit.php +6 -6
readme.txt CHANGED
@@ -3,7 +3,7 @@ Contributors: wpchill, silkalns
3
  Tags: footer, credit, change, modify, replace, remove, link, HTML, text, remove footer credit
4
  Requires at least: 5.2
5
  Tested up to: 5.7
6
- Stable tag: 1.0.6
7
  Requires PHP: 5.6
8
  License: GPLv3 or later
9
 
@@ -32,7 +32,10 @@ This plugin has very minimal options to keep things simple and easier to use. Yo
32
 
33
  == Changelog ==
34
 
35
- = 1.0.6 - 25.06.2021 =
 
 
 
36
  Fixed: Security issue regarding XSS
37
 
38
  = 1.0.5 =
3
  Tags: footer, credit, change, modify, replace, remove, link, HTML, text, remove footer credit
4
  Requires at least: 5.2
5
  Tested up to: 5.7
6
+ Stable tag: 1.0.7
7
  Requires PHP: 5.6
8
  License: GPLv3 or later
9
 
32
 
33
  == Changelog ==
34
 
35
+ = 1.0.7 - 05.07.2021 =
36
+ Changed: Updated security fixes for XSS
37
+
38
+ = 1.0.6 - 24.06.2021 =
39
  Fixed: Security issue regarding XSS
40
 
41
  = 1.0.5 =
remove-footer-credit.php CHANGED
@@ -2,7 +2,7 @@
2
  /**
3
  * Plugin Name: Remove Footer Credit
4
  * Description: A simple plugin to remove footer credits
5
- * Version: 1.0.6
6
  * Author: WPChill
7
  * Author URI: https://wpchill.com
8
  * Requires: 5.2 or higher
@@ -149,14 +149,14 @@ class RFC_Plugin {
149
 
150
  if ($_SERVER['REQUEST_METHOD'] == 'POST') {
151
 
152
- if ( ! isset( $_POST['remove_footer_credit_nonce'] ) || ! wp_verify_nonce( $_POST['remove_footer_credit_nonce'], 'remove_footer_credit_options' ) ) {
153
  return;
154
  }
155
 
156
  $_POST = stripslashes_deep( $_POST );
157
 
158
- $find = preg_replace( '#<script(.*?)>(.*?)</script>#is', '', $_POST['find'] );
159
- $replace = preg_replace( '#<script(.*?)>(.*?)</script>#is', '', $_POST['replace'] );
160
 
161
  $data = array(
162
  'find' => explode( "\n", str_replace( "\r", "", $find ) ),
@@ -210,8 +210,8 @@ function jabrfc_ob_call( $buffer ) { // $buffer contains entire page
210
  $i = 0;
211
  foreach ( $data['find'] as &$value ) {
212
 
213
- $value = preg_replace( '#<script(.*?)>(.*?)</script>#is', '', $value );
214
- $replace = preg_replace( '#<script(.*?)>(.*?)</script>#is', '', $data['replace'][ $i ] );
215
 
216
  $buffer = str_replace( $value, ( array_key_exists( $i, $data['replace'] ) ? $replace : '' ), $buffer );
217
  $i ++;
2
  /**
3
  * Plugin Name: Remove Footer Credit
4
  * Description: A simple plugin to remove footer credits
5
+ * Version: 1.0.7
6
  * Author: WPChill
7
  * Author URI: https://wpchill.com
8
  * Requires: 5.2 or higher
149
 
150
  if ($_SERVER['REQUEST_METHOD'] == 'POST') {
151
 
152
+ if ( ! isset( $_POST['remove_footer_credit_nonce'] ) || ! wp_verify_nonce( $_POST['remove_footer_credit_nonce'], 'remove_footer_credit_options' ) ) {
153
  return;
154
  }
155
 
156
  $_POST = stripslashes_deep( $_POST );
157
 
158
+ $find = wp_filter_post_kses( $_POST['find'] );
159
+ $replace = wp_filter_post_kses( $_POST['replace'] );
160
 
161
  $data = array(
162
  'find' => explode( "\n", str_replace( "\r", "", $find ) ),
210
  $i = 0;
211
  foreach ( $data['find'] as &$value ) {
212
 
213
+ $value = wp_filter_post_kses( $value );
214
+ $replace = wp_filter_post_kses( $data['replace'][ $i ] );
215
 
216
  $buffer = str_replace( $value, ( array_key_exists( $i, $data['replace'] ) ? $replace : '' ), $buffer );
217
  $i ++;