Ultimate Member – User Profile & Membership Plugin - Version 1.3.34

Version Description

Download this release

Release Info

Developer ultimatemember
Plugin Icon 128x128 Ultimate Member – User Profile & Membership Plugin
Version 1.3.34
Comparing to
See all releases

Code changes from version 1.3.33 to 1.3.34

admin/core/um-admin-actions.php CHANGED
@@ -269,29 +269,6 @@
269
  exit( wp_redirect($url) );
270
  }
271
 
272
- /***
273
- *** @secure passwords
274
- *** Updated by Bo Carlson (bo@fictiontribe.com) to clear fields in DB without looping users. Much faster.
275
- ***/
276
- add_action('um_admin_do_action__um_passwords_secured', 'um_admin_do_action__um_passwords_secured');
277
- function um_admin_do_action__um_passwords_secured( $action ){
278
- global $ultimatemember; //ultimate member global object
279
- global $wpdb; //Wordpress DB object
280
-
281
- //die if admin can't manage options
282
- if ( !is_admin() || !current_user_can('manage_options') ) die();
283
-
284
- //remove all confirm_user_password from DB
285
- $wpdb->delete($wpdb->usermeta,array('meta_key'=>'confirm_user_password') );
286
-
287
- //then reset submitted
288
- $wpdb->update($wpdb->usermeta,array('meta_value'=>''),array('meta_key'=>'submitted') );
289
-
290
- //then set flag that update is complete and redirect to admin home
291
- update_option( 'um_passwords_secured', 1 );
292
- exit( wp_redirect( admin_url() ) );
293
- }
294
-
295
  /***
296
  *** @purge temp
297
  ***/
269
  exit( wp_redirect($url) );
270
  }
271
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
272
  /***
273
  *** @purge temp
274
  ***/
admin/core/um-admin-metabox.php CHANGED
@@ -1396,10 +1396,11 @@ class UM_Admin_Metabox {
1396
  ?>
1397
 
1398
  <p><label for="_public">Privacy <?php $this->tooltip('Field privacy allows you to select who can view this field on the front-end. The site admin can view all fields regardless of the option set here.'); ?></label>
1399
- <select name="_public" id="_public" class="umaf-selectjs um-adm-conditional" data-cond1='-2' data-cond1-show='_roles' style="width: 100%">
1400
  <option value="1" <?php selected( 1, $this->edit_mode_value ); ?>>Everyone</option>
1401
  <option value="2" <?php selected( 2, $this->edit_mode_value ); ?>>Members</option>
1402
  <option value="-1" <?php selected( -1, $this->edit_mode_value ); ?>>Only visible to profile owner and admins</option>
 
1403
  <option value="-2" <?php selected( -2, $this->edit_mode_value ); ?>>Only specific member roles</option>
1404
  </select>
1405
  </p>
1396
  ?>
1397
 
1398
  <p><label for="_public">Privacy <?php $this->tooltip('Field privacy allows you to select who can view this field on the front-end. The site admin can view all fields regardless of the option set here.'); ?></label>
1399
+ <select name="_public" id="_public" class="umaf-selectjs um-adm-conditional" data-cond1='-2' data-cond1-show='_roles' data-cond2='-3' data-cond2-show='_roles' style="width: 100%">
1400
  <option value="1" <?php selected( 1, $this->edit_mode_value ); ?>>Everyone</option>
1401
  <option value="2" <?php selected( 2, $this->edit_mode_value ); ?>>Members</option>
1402
  <option value="-1" <?php selected( -1, $this->edit_mode_value ); ?>>Only visible to profile owner and admins</option>
1403
+ <option value="-3" <?php selected( -3, $this->edit_mode_value ); ?>>Only visible to profile owner and specific roles</option>
1404
  <option value="-2" <?php selected( -2, $this->edit_mode_value ); ?>>Only specific member roles</option>
1405
  </select>
1406
  </p>
admin/core/um-admin-notices.php CHANGED
@@ -41,14 +41,6 @@ class UM_Admin_Notices {
41
  global $ultimatemember;
42
  $hide_register_notice = get_option('um_can_register_notice');
43
 
44
- if ( !get_option('um_passwords_secured') ) {
45
- echo '<div class="updated error"><p>';
46
-
47
- echo sprintf(__( 'Secure your database by removing hardcoded user passwords now. Click <a href="%s">here</a> to secure your database.', 'ultimatemember' ), add_query_arg('um_adm_action', 'um_passwords_secured') );
48
-
49
- echo '</p></div>';
50
- }
51
-
52
  if ( !get_option('users_can_register') && !$hide_register_notice ) {
53
 
54
  echo '<div class="updated" style="border-color: #3ba1da;"><p>';
@@ -160,9 +152,7 @@ class UM_Admin_Notices {
160
  switch($update) {
161
 
162
  case 'confirm_delete':
163
- $wp_http_referer = isset( $_REQUEST['_wp_http_referer'] ) ? $_REQUEST['_wp_http_referer']: '';
164
- $confirm_uri = sanitize_text_field( urldecode( $wp_http_referer ) );
165
- $confirm_uri = $confirm_uri ?: admin_url('users.php?' . http_build_query(array(
166
  'um_adm_action' => 'delete_users',
167
  'user' => array_map('intval', (array) $_REQUEST['user']),
168
  'confirm' => 1
41
  global $ultimatemember;
42
  $hide_register_notice = get_option('um_can_register_notice');
43
 
 
 
 
 
 
 
 
 
44
  if ( !get_option('users_can_register') && !$hide_register_notice ) {
45
 
46
  echo '<div class="updated" style="border-color: #3ba1da;"><p>';
152
  switch($update) {
153
 
154
  case 'confirm_delete':
155
+ $confirm_uri = admin_url('users.php?' . http_build_query(array(
 
 
156
  'um_adm_action' => 'delete_users',
157
  'user' => array_map('intval', (array) $_REQUEST['user']),
158
  'confirm' => 1
core/um-short-functions.php CHANGED
@@ -695,6 +695,9 @@ function um_reset_user() {
695
 
696
  if ( is_user_logged_in() ) {
697
 
 
 
 
698
  if ( !um_is_user_himself() && $data['public'] == '-1' && !um_user_can('can_edit_everyone') )
699
  return false;
700
 
695
 
696
  if ( is_user_logged_in() ) {
697
 
698
+ if ( $data['public'] == '-3' && !um_is_user_himself() && !in_array( $ultimatemember->query->get_role_by_userid( get_current_user_id() ), $data['roles'] ) )
699
+ return false;
700
+
701
  if ( !um_is_user_himself() && $data['public'] == '-1' && !um_user_can('can_edit_everyone') )
702
  return false;
703
 
index.php CHANGED
@@ -3,7 +3,7 @@
3
  Plugin Name: Ultimate Member
4
  Plugin URI: http://ultimatemember.com/
5
  Description: The easiest way to create powerful online communities and beautiful user profiles with WordPress
6
- Version: 1.3.33
7
  Author: Ultimate Member
8
  Author URI: http://ultimatemember.com/
9
  */
3
  Plugin Name: Ultimate Member
4
  Plugin URI: http://ultimatemember.com/
5
  Description: The easiest way to create powerful online communities and beautiful user profiles with WordPress
6
+ Version: 1.3.34
7
  Author: Ultimate Member
8
  Author URI: http://ultimatemember.com/
9
  */
readme.txt CHANGED
@@ -7,7 +7,7 @@ Tags: access control, author, authors, author profile, comments, community, comm
7
  Requires at least: 4.1
8
  Tested up to: 4.4
9
 
10
- Stable Tag: 1.3.33
11
 
12
  License: GNU Version 2 or Any Later Version
13
 
@@ -146,6 +146,11 @@ The plugin works with popular caching plugins by automatically excluding Ultimat
146
 
147
  == Changelog ==
148
 
 
 
 
 
 
149
  = 1.3.33: December 15, 2015 =
150
 
151
  * Fixed: Member search on homepage
7
  Requires at least: 4.1
8
  Tested up to: 4.4
9
 
10
+ Stable Tag: 1.3.34
11
 
12
  License: GNU Version 2 or Any Later Version
13
 
146
 
147
  == Changelog ==
148
 
149
+ = 1.3.34: December 15, 2015 =
150
+
151
+ * New: new privacy option for fields: allow profile owner & specific roles to view the field
152
+ * Fixed: wrong php syntax in admin notice
153
+
154
  = 1.3.33: December 15, 2015 =
155
 
156
  * Fixed: Member search on homepage