Ultimate Member – User Profile & Membership Plugin - Version 1.2.6

Version Description

Download this release

Release Info

Developer ultimatemember
Plugin Icon 128x128 Ultimate Member – User Profile & Membership Plugin
Version 1.2.6
Comparing to
See all releases

Code changes from version 1.2.5 to 1.2.6

Files changed (14) hide show
  1. admin/core/um-admin-dashboard.php +1 -1
  2. core/um-actions-account.php +1 -1
  3. core/um-actions-login.php +1 -1
  4. core/um-actions-profile.php +5 -5
  5. core/um-actions-register.php +2 -2
  6. core/um-builtin.php +2 -0
  7. core/um-filters-fields.php +1 -1
  8. core/um-password.php +3 -3
  9. core/um-permalinks.php +4 -4
  10. core/um-rewrite.php +2 -2
  11. core/um-short-functions.php +2 -11
  12. index.php +1 -1
  13. readme.txt +9 -1
  14. templates/password-reset.php +1 -1
admin/core/um-admin-dashboard.php CHANGED
@@ -20,7 +20,7 @@ class UM_Admin_Dashboard {
20
  ***/
21
  function primary_admin_menu() {
22
 
23
- $this->pagehook = add_menu_page( __('Ultimate Member', $this->slug), __('Ultimate Member', $this->slug), 'manage_options', $this->slug, array(&$this, 'admin_page'), 'dashicons-admin-users', '66.78578');
24
  add_action('load-'.$this->pagehook, array(&$this, 'on_load_page'));
25
 
26
  add_submenu_page( $this->slug, __('Dashboard', $this->slug), __('Dashboard', $this->slug), 'manage_options', $this->slug, array(&$this, 'admin_page') );
20
  ***/
21
  function primary_admin_menu() {
22
 
23
+ $this->pagehook = add_menu_page( __('Ultimate Member', $this->slug), __('Ultimate Member', $this->slug), 'manage_options', $this->slug, array(&$this, 'admin_page'), 'dashicons-admin-users', '42.78578');
24
  add_action('load-'.$this->pagehook, array(&$this, 'on_load_page'));
25
 
26
  add_submenu_page( $this->slug, __('Dashboard', $this->slug), __('Dashboard', $this->slug), 'manage_options', $this->slug, array(&$this, 'admin_page') );
core/um-actions-account.php CHANGED
@@ -49,7 +49,7 @@
49
 
50
  $url = $ultimatemember->account->tab_link( $tab );
51
 
52
- $url = esc_url( add_query_arg('updated','account',$url) );
53
 
54
  exit( wp_redirect( $url ) );
55
 
49
 
50
  $url = $ultimatemember->account->tab_link( $tab );
51
 
52
+ $url = add_query_arg( 'updated', 'account', $url );
53
 
54
  exit( wp_redirect( $url ) );
55
 
core/um-actions-login.php CHANGED
@@ -101,7 +101,7 @@
101
  case 'awaiting_email_confirmation':
102
  case 'rejected':
103
  um_reset_user();
104
- exit( wp_redirect( esc_url( add_query_arg( 'err', $status, $ultimatemember->permalinks->get_current_url() ) ) ) );
105
  break;
106
 
107
  }
101
  case 'awaiting_email_confirmation':
102
  case 'rejected':
103
  um_reset_user();
104
+ exit( wp_redirect( add_query_arg( 'err', esc_attr( $status ), $ultimatemember->permalinks->get_current_url() ) ) );
105
  break;
106
 
107
  }
core/um-actions-profile.php CHANGED
@@ -10,13 +10,13 @@
10
 
11
  do_action("um_before_form", $args);
12
 
13
- do_action("um_before_{$template}_fields", $args);
14
 
15
- do_action("um_main_{$template}_fields", $args);
16
 
17
  do_action("um_after_form_fields", $args);
18
 
19
- do_action("um_after_{$template}_fields", $args);
20
 
21
  do_action("um_after_form", $args);
22
 
@@ -590,7 +590,7 @@
590
  $nav_link = $ultimatemember->permalinks->get_current_url( get_option('permalink_structure') );
591
  $nav_link = remove_query_arg( 'um_action', $nav_link );
592
  $nav_link = remove_query_arg( 'subnav', $nav_link );
593
- $nav_link = esc_url( add_query_arg('profiletab', $id, $nav_link ) );
594
  ?>
595
 
596
  <div class="um-profile-nav-item <?php if ( !um_get_option('profile_menu_icons') ) { echo 'without-icon'; } ?> <?php if ( $id == $active_tab ) { echo 'active'; } ?>">
@@ -623,7 +623,7 @@
623
 
624
  ?>
625
 
626
- <a href="<?php echo esc_url( add_query_arg('subnav', $id ) ); ?>" class="<?php if ( $active_subnav == $id ) echo 'active'; ?>"><?php echo $subtab; ?></a>
627
 
628
  <?php
629
 
10
 
11
  do_action("um_before_form", $args);
12
 
13
+ do_action("um_before_{$mode}_fields", $args);
14
 
15
+ do_action("um_main_{$mode}_fields", $args);
16
 
17
  do_action("um_after_form_fields", $args);
18
 
19
+ do_action("um_after_{$mode}_fields", $args);
20
 
21
  do_action("um_after_form", $args);
22
 
590
  $nav_link = $ultimatemember->permalinks->get_current_url( get_option('permalink_structure') );
591
  $nav_link = remove_query_arg( 'um_action', $nav_link );
592
  $nav_link = remove_query_arg( 'subnav', $nav_link );
593
+ $nav_link = add_query_arg('profiletab', $id, $nav_link );
594
  ?>
595
 
596
  <div class="um-profile-nav-item <?php if ( !um_get_option('profile_menu_icons') ) { echo 'without-icon'; } ?> <?php if ( $id == $active_tab ) { echo 'active'; } ?>">
623
 
624
  ?>
625
 
626
+ <a href="<?php echo add_query_arg('subnav', $id ); ?>" class="<?php if ( $active_subnav == $id ) echo 'active'; ?>"><?php echo $subtab; ?></a>
627
 
628
  <?php
629
 
core/um-actions-register.php CHANGED
@@ -171,8 +171,8 @@
171
 
172
  if ( um_user( $status . '_action' ) == 'show_message' && um_user( $status . '_message' ) != '' ) {
173
  $url = um_get_core_page('register');
174
- $url = add_query_arg( 'message', $status, esc_url( $url ) );
175
- $url = add_query_arg( 'uid', um_user('ID'), esc_url( $url ) );
176
  exit( wp_redirect( $url ) );
177
  }
178
 
171
 
172
  if ( um_user( $status . '_action' ) == 'show_message' && um_user( $status . '_message' ) != '' ) {
173
  $url = um_get_core_page('register');
174
+ $url = add_query_arg( 'message', esc_attr( $status ), $url );
175
+ $url = add_query_arg( 'uid', esc_attr( um_user('ID') ), $url );
176
  exit( wp_redirect( $url ) );
177
  }
178
 
core/um-builtin.php CHANGED
@@ -64,6 +64,8 @@ class UM_Builtin {
64
  foreach ($fields as $field ) {
65
  if ( isset( $this->predefined_fields[$field] ) ) {
66
  $array = $this->predefined_fields[$field];
 
 
67
  }
68
  }
69
  return $array;
64
  foreach ($fields as $field ) {
65
  if ( isset( $this->predefined_fields[$field] ) ) {
66
  $array = $this->predefined_fields[$field];
67
+ } else if ( isset( $this->saved_fields[$field] ) ) {
68
+ $array = $this->saved_fields[$field];
69
  }
70
  }
71
  return $array;
core/um-filters-fields.php CHANGED
@@ -165,7 +165,7 @@
165
 
166
  $value = str_replace('https://https://','https://',$value);
167
  $value = str_replace('http://https://','https://',$value);
168
-
169
  return $value;
170
 
171
  }
165
 
166
  $value = str_replace('https://https://','https://',$value);
167
  $value = str_replace('http://https://','https://',$value);
168
+
169
  return $value;
170
 
171
  }
core/um-password.php CHANGED
@@ -47,9 +47,9 @@ class UM_Password {
47
 
48
  if ( !um_user('reset_pass_hash') ) return false;
49
 
50
- $url = esc_url( add_query_arg( 'act', 'reset_password', um_get_core_page('password-reset') ) );
51
- $url = esc_url( add_query_arg( 'hash', um_user('reset_pass_hash'), $url ) );
52
- $url = esc_url( add_query_arg( 'user_id', um_user('ID'), $url ) );
53
 
54
  return $url;
55
 
47
 
48
  if ( !um_user('reset_pass_hash') ) return false;
49
 
50
+ $url = add_query_arg( 'act', 'reset_password', um_get_core_page('password-reset') );
51
+ $url = add_query_arg( 'hash', esc_attr( um_user('reset_pass_hash') ), $url );
52
+ $url = add_query_arg( 'user_id', esc_attr( um_user('ID') ), $url );
53
 
54
  return $url;
55
 
core/um-permalinks.php CHANGED
@@ -166,7 +166,7 @@ class UM_Permalinks {
166
 
167
  } else {
168
 
169
- $profile_url = esc_url( add_query_arg( 'um_user', $user_in_url, $profile_url ) );
170
 
171
  }
172
 
@@ -178,9 +178,9 @@ class UM_Permalinks {
178
  ***/
179
  function admin_act_url( $action, $subaction ) {
180
  $url = $this->get_current_url();
181
- $url = esc_url( add_query_arg( 'um_adm_action', $action, $url ) );
182
- $url = esc_url( add_query_arg( 'sub', $subaction, $url ) );
183
- $url = esc_url( add_query_arg( 'user_id', um_user('ID'), $url ) );
184
  return $url;
185
  }
186
 
166
 
167
  } else {
168
 
169
+ $profile_url = add_query_arg( 'um_user', $user_in_url, $profile_url );
170
 
171
  }
172
 
178
  ***/
179
  function admin_act_url( $action, $subaction ) {
180
  $url = $this->get_current_url();
181
+ $url = add_query_arg( 'um_adm_action', $action, $url );
182
+ $url = add_query_arg( 'sub', $subaction, $url );
183
+ $url = add_query_arg( 'user_id', um_user('ID'), $url );
184
  return $url;
185
  }
186
 
core/um-rewrite.php CHANGED
@@ -123,7 +123,7 @@ class UM_Rewrite {
123
 
124
  }
125
 
126
- } else if ( um_is_core_page('user') ) { // just base64_decode
127
 
128
  if ( is_user_logged_in() ) { // just redirect to their profile
129
 
@@ -133,7 +133,7 @@ class UM_Rewrite {
133
 
134
  if ( $query ) {
135
  foreach( $query as $key => $val ) {
136
- $url = esc_url( add_query_arg($key, $val, $url) );
137
  }
138
  }
139
 
123
 
124
  }
125
 
126
+ } else if ( um_is_core_page('user') ) {
127
 
128
  if ( is_user_logged_in() ) { // just redirect to their profile
129
 
133
 
134
  if ( $query ) {
135
  foreach( $query as $key => $val ) {
136
+ $url = add_query_arg($key, $val, $url);
137
  }
138
  }
139
 
core/um-short-functions.php CHANGED
@@ -88,16 +88,7 @@ function um_user_ip() {
88
  function um_redirect_home() {
89
  exit( wp_redirect( home_url() ) );
90
  }
91
-
92
- /***
93
- *** @Capitalize first initial
94
- ***/
95
- function um_cap_initials( $name ) {
96
- if ( is_email( $name ) ) return $name;
97
- $name = str_replace('\' ', '\'', ucwords( str_replace('\'', '\' ', mb_strtolower($name, 'UTF-8') ) ) );
98
- return $name;
99
- }
100
-
101
  /***
102
  *** @Get submitted user information
103
  ***/
@@ -264,7 +255,7 @@ function um_profile_id() {
264
  $url = get_permalink( $ultimatemember->permalinks->core[ $slug ] );
265
 
266
  if ( $updated )
267
- $url = esc_url( add_query_arg( 'updated', $updated, $url ) );
268
 
269
  return $url;
270
 
88
  function um_redirect_home() {
89
  exit( wp_redirect( home_url() ) );
90
  }
91
+
 
 
 
 
 
 
 
 
 
92
  /***
93
  *** @Get submitted user information
94
  ***/
255
  $url = get_permalink( $ultimatemember->permalinks->core[ $slug ] );
256
 
257
  if ( $updated )
258
+ $url = add_query_arg( 'updated', esc_attr( $updated ), $url );
259
 
260
  return $url;
261
 
index.php CHANGED
@@ -3,7 +3,7 @@
3
  Plugin Name: Ultimate Member
4
  Plugin URI: http://ultimatemember.com/
5
  Description: The easiest way to create powerful online communities and beautiful user profiles with WordPress
6
- Version: 1.2.5
7
  Author: Ultimate Member
8
  Author URI: http://ultimatemember.com/
9
  */
3
  Plugin Name: Ultimate Member
4
  Plugin URI: http://ultimatemember.com/
5
  Description: The easiest way to create powerful online communities and beautiful user profiles with WordPress
6
+ Version: 1.2.6
7
  Author: Ultimate Member
8
  Author URI: http://ultimatemember.com/
9
  */
readme.txt CHANGED
@@ -7,7 +7,7 @@ Tags: access control, author, authors, author profile, comments, community, comm
7
  Requires at least: 4.1
8
  Tested up to: 4.1.1
9
 
10
- Stable Tag: 1.2.5
11
 
12
  License: GNU Version 2 or Any Later Version
13
 
@@ -140,6 +140,14 @@ The plugin works with popular caching plugins by automatically excluding Ultimat
140
 
141
  == Changelog ==
142
 
 
 
 
 
 
 
 
 
143
  = 1.2.5: April 21, 2015 =
144
 
145
  * Fixed: e-mail activation bugs
7
  Requires at least: 4.1
8
  Tested up to: 4.1.1
9
 
10
+ Stable Tag: 1.2.6
11
 
12
  License: GNU Version 2 or Any Later Version
13
 
140
 
141
  == Changelog ==
142
 
143
+ = 1.2.6: April 22, 2015 =
144
+
145
+ * Fixed: password reset security fix ( do not reveal emails )
146
+ * Fixed: bug with custom profile templates
147
+ * Fixed: display name in member directories
148
+ * Fixed: URL fields display in member directory
149
+ * Fixed: many bugs with previous version
150
+
151
  = 1.2.5: April 21, 2015 =
152
 
153
  * Fixed: e-mail activation bugs
templates/password-reset.php CHANGED
@@ -18,7 +18,7 @@
18
 
19
  echo '<div class="um-field-block">';
20
 
21
- echo '<p>A password reset link has been sent to <strong>' . $ultimatemember->password->reset_request['user_email'] . '</strong>. Please check your inbox!</p>';
22
 
23
  echo '</div>';
24
 
18
 
19
  echo '<div class="um-field-block">';
20
 
21
+ echo '<p>' . __('We have sent you a password reset link to your e-mail. Please check your inbox.','ultimatemember') . '</p>';
22
 
23
  echo '</div>';
24