Spacer - Version 3.0.7

Version Description

  • Security update
Download this release

Release Info

Developer clevelandwebdeveloper
Plugin Icon 128x128 Spacer
Version 3.0.7
Comparing to
See all releases

Code changes from version 3.0.6 to 3.0.7

Files changed (2) hide show
  1. index.php +12 -7
  2. readme.txt +4 -1
index.php CHANGED
@@ -4,7 +4,7 @@
4
  Plugin Name: Spacer
5
  Plugin URI: http://www.clevelandwebdeveloper.com/wordpress-plugins/spacer
6
  Description: Adds a spacer button to the WYSIWYG visual editor which allows you to add precise custom spacing between lines in your posts and pages.
7
- Version: 3.0.6
8
  Author: Justin Saad
9
  Author URI: http://www.clevelandwebdeveloper.com
10
  License: GPL2
@@ -302,7 +302,8 @@ function activespacer($id="") { #return attributes for active spacer based on id
302
  if(!empty($style)){
303
  $spacer_css .= " ".$style;
304
  }
305
-
 
306
  //create the spacer after all settings have been loaded
307
  return '<span class="'.$classes.'" style="display:block;clear:both;height: 0px;'.$spacer_css.'"></span>';
308
  }
@@ -623,6 +624,7 @@ function activespacer($id="") { #return attributes for active spacer based on id
623
  if(empty($gettitle)){
624
  $gettitle = "Untitled";
625
  }
 
626
  ?>
627
  <div class="aspacerunit addspacerunit postbox closed">
628
  <button type="button" class="handlediv button-link" aria-expanded="true"><span class="toggle-indicator" aria-hidden="true"></span></button>
@@ -1269,8 +1271,10 @@ wp_get_current_user();
1269
  if(!isset($args["class"])){
1270
  $args["class"] = "";
1271
  }
 
 
1272
  // Render the output
1273
- echo '<input type="text" ' . $placeholder_html . $max_length_html . ' id="' . $args["id"] . '" class="' . $args["class"]. '" name="' . $args["id"] . '" value="' . get_option($args["id"], $default) . '" />';
1274
  if(isset($args["desc"])) {
1275
  echo "<p class='description'>".$args["desc"]."</p>";
1276
  }
@@ -1305,6 +1309,7 @@ wp_get_current_user();
1305
  } else {
1306
  $usevalue = $getarray[$key];
1307
  }
 
1308
  // Render the output
1309
  echo '<input type="text" ' . $placeholder_html . $max_length_html . ' class="' . $args["class"]. '" name="' . $args["id"] . '['.$key.']" value="' . $usevalue . '" />';
1310
  //echo '<input type="text" ' . ' name="' . $args["id"] . '['.$key.']" value="' . $value . '" />';
@@ -1698,20 +1703,20 @@ wp_get_current_user();
1698
  }
1699
 
1700
  function san_field($input) {
1701
- //return strip_tags($input);
1702
  if(is_array($input)){
1703
  foreach($input as $key=>$value){
1704
  //$input[$key] = "football";
1705
  //$input[$key] = strip_tags($value);
1706
  if ( defined( 'DISALLOW_UNFILTERED_HTML' ) && DISALLOW_UNFILTERED_HTML ) {
1707
- $input[$key] = strip_tags($value);
1708
  } elseif ( is_multisite() && ! is_super_admin() ) {
1709
- $input[$key] = strip_tags($value);
1710
  }
1711
  }
1712
  } else {
1713
  if(!empty($input)){
1714
- $input = strip_tags($input);
1715
  }
1716
  }
1717
  return $input;
4
  Plugin Name: Spacer
5
  Plugin URI: http://www.clevelandwebdeveloper.com/wordpress-plugins/spacer
6
  Description: Adds a spacer button to the WYSIWYG visual editor which allows you to add precise custom spacing between lines in your posts and pages.
7
+ Version: 3.0.7
8
  Author: Justin Saad
9
  Author URI: http://www.clevelandwebdeveloper.com
10
  License: GPL2
302
  if(!empty($style)){
303
  $spacer_css .= " ".$style;
304
  }
305
+ $classes = esc_attr($classes);
306
+ $spacer_css = esc_attr($spacer_css);
307
  //create the spacer after all settings have been loaded
308
  return '<span class="'.$classes.'" style="display:block;clear:both;height: 0px;'.$spacer_css.'"></span>';
309
  }
624
  if(empty($gettitle)){
625
  $gettitle = "Untitled";
626
  }
627
+ $gettitle = esc_attr($gettitle);
628
  ?>
629
  <div class="aspacerunit addspacerunit postbox closed">
630
  <button type="button" class="handlediv button-link" aria-expanded="true"><span class="toggle-indicator" aria-hidden="true"></span></button>
1271
  if(!isset($args["class"])){
1272
  $args["class"] = "";
1273
  }
1274
+ $usevalue = get_option($args["id"], $default);
1275
+ $usevalue = esc_attr($usevalue);
1276
  // Render the output
1277
+ echo '<input type="text" ' . $placeholder_html . $max_length_html . ' id="' . $args["id"] . '" class="' . $args["class"]. '" name="' . $args["id"] . '" value="' . $usevalue . '" />';
1278
  if(isset($args["desc"])) {
1279
  echo "<p class='description'>".$args["desc"]."</p>";
1280
  }
1309
  } else {
1310
  $usevalue = $getarray[$key];
1311
  }
1312
+ $usevalue = esc_attr($usevalue);
1313
  // Render the output
1314
  echo '<input type="text" ' . $placeholder_html . $max_length_html . ' class="' . $args["class"]. '" name="' . $args["id"] . '['.$key.']" value="' . $usevalue . '" />';
1315
  //echo '<input type="text" ' . ' name="' . $args["id"] . '['.$key.']" value="' . $value . '" />';
1703
  }
1704
 
1705
  function san_field($input) {
1706
+
1707
  if(is_array($input)){
1708
  foreach($input as $key=>$value){
1709
  //$input[$key] = "football";
1710
  //$input[$key] = strip_tags($value);
1711
  if ( defined( 'DISALLOW_UNFILTERED_HTML' ) && DISALLOW_UNFILTERED_HTML ) {
1712
+ $input[$key] = esc_attr($value);
1713
  } elseif ( is_multisite() && ! is_super_admin() ) {
1714
+ $input[$key] = esc_attr($value);
1715
  }
1716
  }
1717
  } else {
1718
  if(!empty($input)){
1719
+ $input = esc_attr($input);
1720
  }
1721
  }
1722
  return $input;
readme.txt CHANGED
@@ -4,7 +4,7 @@ Donate link: http://www.clevelandwebdeveloper.com/wordpress-plugins/donate.php
4
  Tags: spacer, spacing, line space
5
  Requires at least: 3.5
6
  Tested up to: 6.1
7
- Stable tag: 3.0.6
8
  License: GPLv2
9
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
10
 
@@ -85,6 +85,9 @@ Try adding <code>margin-bottom: 25px;</code> to the Spacer's Style setting.
85
 
86
  == Changelog ==
87
 
 
 
 
88
  = 3.0.6 =
89
  * Security update
90
 
4
  Tags: spacer, spacing, line space
5
  Requires at least: 3.5
6
  Tested up to: 6.1
7
+ Stable tag: 3.0.7
8
  License: GPLv2
9
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
10
 
85
 
86
  == Changelog ==
87
 
88
+ = 3.0.7 =
89
+ * Security update
90
+
91
  = 3.0.6 =
92
  * Security update
93