Ultimate FAQ - Version 1.9.1

Version Description

  • Added extra security to the import feature.
Download this release

Release Info

Developer Rustaurius
Plugin Icon 128x128 Ultimate FAQ
Version 1.9.1
Comparing to
See all releases

Code changes from version 1.9.0 to 1.9.1

Files changed (3) hide show
  1. Functions/EWD_UFAQ_Import.php +7 -0
  2. Main.php +1 -1
  3. readme.txt +3 -0
Functions/EWD_UFAQ_Import.php CHANGED
@@ -146,6 +146,13 @@ function Add_EWD_UFAQs_From_Spreadsheet($Excel_File_Name){
146
 
147
  function EWD_UFAQ_Import_From_Spreadsheet() {
148
 
 
 
 
 
 
 
 
149
  /* Test if there is an error with the uploaded spreadsheet and return that error if there is */
150
  if (!empty($_FILES['FAQs_Spreadsheet']['error']))
151
  {
146
 
147
  function EWD_UFAQ_Import_From_Spreadsheet() {
148
 
149
+ // check that the current user has the correct privileges to create posts
150
+ if ( ! current_user_can( 'edit_posts' ) ) { return; }
151
+
152
+ // make sure that the request is coming from the admin form
153
+ if ( ! isset( $_POST['EWD_UFAQ_Import_Nonce'] ) ) { return; }
154
+ if ( ! wp_verify_nonce( $_POST['EWD_UFAQ_Import_Nonce'], 'EWD_UFAQ_Import' ) ) { return; }
155
+
156
  /* Test if there is an error with the uploaded spreadsheet and return that error if there is */
157
  if (!empty($_FILES['FAQs_Spreadsheet']['error']))
158
  {
Main.php CHANGED
@@ -7,7 +7,7 @@ Author: Etoile Web Design
7
  Author URI: http://www.EtoileWebDesign.com/wordpress-plugins/
8
  Terms and Conditions: http://www.etoilewebdesign.com/plugin-terms-and-conditions/
9
  Text Domain: ultimate-faqs
10
- Version: 1.9.0
11
  */
12
 
13
  global $ewd_ufaq_message;
7
  Author URI: http://www.EtoileWebDesign.com/wordpress-plugins/
8
  Terms and Conditions: http://www.etoilewebdesign.com/plugin-terms-and-conditions/
9
  Text Domain: ultimate-faqs
10
+ Version: 1.9.1
11
  */
12
 
13
  global $ewd_ufaq_message;
readme.txt CHANGED
@@ -289,6 +289,9 @@ Video 3 - FAQs Ordering
289
 
290
  == Changelog ==
291
 
 
 
 
292
  = 1.9.0 =
293
  - Added a new feature to integrate with WP Forms. Now you can set a field in your WP Forms contact form to automatically suggest and display FAQs when someone starts typing their message.
294
  - Corrected an issue where the FAQ search was sometimes not working when the auto complete option was disabled.
289
 
290
  == Changelog ==
291
 
292
+ = 1.9.1 =
293
+ - Added extra security to the import feature.
294
+
295
  = 1.9.0 =
296
  - Added a new feature to integrate with WP Forms. Now you can set a field in your WP Forms contact form to automatically suggest and display FAQs when someone starts typing their message.
297
  - Corrected an issue where the FAQ search was sometimes not working when the auto complete option was disabled.