underConstruction - Version 1.21

Version Description

  • Improve input sanitation.
Download this release

Release Info

Developer grimmdude
Plugin Icon 128x128 underConstruction
Version 1.21
Comparing to
See all releases

Code changes from version 1.20 to 1.21

Files changed (3) hide show
  1. readme.txt +5 -2
  2. ucOptions.php +4 -4
  3. underConstruction.php +1 -1
readme.txt CHANGED
@@ -3,13 +3,13 @@ Contributors: Jeremy Massel
3
  Tags: construction, under construction, private, preview, security, coming soon
4
  Requires at least: 2.7
5
  Tested up to: 5.9
6
- Stable tag: 1.20
7
 
8
  Creates a 'Coming Soon' page that will show for all users who are not logged in
9
 
10
  == Description ==
11
 
12
- [Check out the latest WordPress deals for your site.](https://appsumo.com/tools/wordpress/?utm_source=sumo&utm_medium=wp-widget&utm_campaign=underconstruction)
13
 
14
  Creates a 'Coming Soon' page that will show for all users who are not logged in. Useful for developing a site on a live server, without the world being able to see it
15
 
@@ -43,6 +43,9 @@ I've had a few people ask me this. If you like it, please go to WordPress.org an
43
  Sorry, I get a lot of questions. But visit the homepage for this plugin and leave me a comment. They go right to my inbox, and well I might not be able to for a few days, I promise I'll get back to you.
44
 
45
  == Changelog ==
 
 
 
46
  = 1.20 =
47
  * Add support for 404 status code.
48
  * Address security vulnerabilies.
3
  Tags: construction, under construction, private, preview, security, coming soon
4
  Requires at least: 2.7
5
  Tested up to: 5.9
6
+ Stable tag: 1.21
7
 
8
  Creates a 'Coming Soon' page that will show for all users who are not logged in
9
 
10
  == Description ==
11
 
12
+ [Check out the latest WordPress deals for your site.](https://appsumo.com/search?tags=wordpress&utm_source=sumo&utm_medium=wp-widget&utm_campaign=underconstruction)
13
 
14
  Creates a 'Coming Soon' page that will show for all users who are not logged in. Useful for developing a site on a live server, without the world being able to see it
15
 
43
  Sorry, I get a lot of questions. But visit the homepage for this plugin and leave me a comment. They go right to my inbox, and well I might not be able to for a few days, I promise I'll get back to you.
44
 
45
  == Changelog ==
46
+ = 1.21 =
47
+ * Improve input sanitation.
48
+
49
  = 1.20 =
50
  * Add support for 404 status code.
51
  * Address security vulnerabilies.
ucOptions.php CHANGED
@@ -57,7 +57,7 @@ if (isset($_POST['display_options']))
57
  {
58
  if (isset($_POST['ucHTML']))
59
  {
60
- update_option('underConstructionHTML', $_POST['ucHTML']);
61
  update_option('underConstructionDisplayOption', 2);
62
  }
63
  }
@@ -97,7 +97,7 @@ if (isset($_POST['http_status']))
97
  if ($_POST['http_status'] == 301)
98
  {
99
  update_option('underConstructionHTTPStatus', 301);
100
- update_option('underConstructionRedirectURL', $_POST['url']);
101
  }
102
 
103
  if ($_POST['http_status'] == 404)
@@ -117,7 +117,7 @@ if (isset($_POST['http_status']))
117
 
118
  if(isset($_POST['ip_address']) && $_POST['ip_address']) {
119
 
120
- $ip = $_POST['ip_address'];
121
  $ip = inet_ntop(inet_pton($ip));
122
  //$ip = long2ip(ip2long($ip));
123
 
@@ -151,7 +151,7 @@ if(isset($_POST['remove_selected_ip_btn'])){
151
  }
152
 
153
  if(isset($_POST['required_role'])){
154
- update_option('underConstructionRequiredRole', $_POST['required_role']);
155
  }
156
 
157
  $current_theme_has_uc_page = file_exists(get_template_directory() . '/under-construction.php');
57
  {
58
  if (isset($_POST['ucHTML']))
59
  {
60
+ update_option('underConstructionHTML', wp_kses_post($_POST['ucHTML']));
61
  update_option('underConstructionDisplayOption', 2);
62
  }
63
  }
97
  if ($_POST['http_status'] == 301)
98
  {
99
  update_option('underConstructionHTTPStatus', 301);
100
+ update_option('underConstructionRedirectURL', sanitize_url($_POST['url']));
101
  }
102
 
103
  if ($_POST['http_status'] == 404)
117
 
118
  if(isset($_POST['ip_address']) && $_POST['ip_address']) {
119
 
120
+ $ip = sanitize_text_field($_POST['ip_address']);
121
  $ip = inet_ntop(inet_pton($ip));
122
  //$ip = long2ip(ip2long($ip));
123
 
151
  }
152
 
153
  if(isset($_POST['required_role'])){
154
+ update_option('underConstructionRequiredRole', sanitize_text_field($_POST['required_role']));
155
  }
156
 
157
  $current_theme_has_uc_page = file_exists(get_template_directory() . '/under-construction.php');
underConstruction.php CHANGED
@@ -3,7 +3,7 @@
3
  Plugin Name: Under Construction
4
  Plugin URI: https://wordpress.org/plugins/underconstruction/
5
  Description: Makes it so your site can only be accessed by users who log in. Useful for developing a site on a live server, without the world being able to see it
6
- Version: 1.20
7
  Author: Noah Kagan
8
  Author URI: https://appsumo.com/tools/wordpress/?utm_source=sumo&utm_medium=wp-widget&utm_campaign=underconstruction
9
  */
3
  Plugin Name: Under Construction
4
  Plugin URI: https://wordpress.org/plugins/underconstruction/
5
  Description: Makes it so your site can only be accessed by users who log in. Useful for developing a site on a live server, without the world being able to see it
6
+ Version: 1.21
7
  Author: Noah Kagan
8
  Author URI: https://appsumo.com/tools/wordpress/?utm_source=sumo&utm_medium=wp-widget&utm_campaign=underconstruction
9
  */