WD Instagram Feed – Instagram Gallery - Version 1.4.27

Version Description

Fixed: Security issue.

Download this release

Release Info

Developer 10web
Plugin Icon 128x128 WD Instagram Feed – Instagram Gallery
Version 1.4.27
Comparing to
See all releases

Code changes from version 1.4.26 to 1.4.27

Files changed (5) hide show
  1. config.php +1 -1
  2. frontend/views/imagebrowser.php +23 -24
  3. frontend/views/thumbnails.php +25 -26
  4. readme.txt +4 -1
  5. wd-instagram-feed.php +1 -1
config.php CHANGED
@@ -3,7 +3,7 @@ if ( !defined('ABSPATH') ) {
3
  exit;
4
  }
5
 
6
- define('WDI_VERSION', '1.4.26');
7
  define('WDI_IS_FREE', TRUE);
8
  define('WDI_PREFIX', 'wdi');
9
  define('WDI_DIR', WP_PLUGIN_DIR . "/" . plugin_basename(dirname(__FILE__)));
3
  exit;
4
  }
5
 
6
+ define('WDI_VERSION', '1.4.27');
7
  define('WDI_IS_FREE', TRUE);
8
  define('WDI_PREFIX', 'wdi');
9
  define('WDI_DIR', WP_PLUGIN_DIR . "/" . plugin_basename(dirname(__FILE__)));
frontend/views/imagebrowser.php CHANGED
@@ -87,7 +87,7 @@ class WDI_ImageBrowser_view {
87
  }
88
  }
89
  if ($feed_row['feed_display_view'] === 'pagination') { ?>
90
- <div class="wdi_page_loading wdi_hidden"><img class="wdi_load_more_spinner" src="<?php echo WDI_URL ?>/images/ajax_loader.png"></div>
91
  <?php
92
  }
93
  ?>
@@ -149,8 +149,7 @@ class WDI_ImageBrowser_view {
149
  $theme_path_parts = pathinfo($file_url);
150
 
151
  if(WDILibrary::is_ajax() || WDILibrary::elementor_is_active()) {
152
- $style_tag = "<link rel='stylesheet' id='%s' href='%s' type='text/css' media='all' />";
153
- echo sprintf($style_tag, $theme_path_parts['basename'], $file_url . '?key=' . $generator->get_file_key());
154
  } else {
155
  wp_enqueue_style($theme_path_parts['basename'], $file_url . '?key=' . $generator->get_file_key());
156
  }
@@ -168,8 +167,8 @@ class WDI_ImageBrowser_view {
168
 
169
  ob_start();
170
  ?>
171
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_feed_header {
172
- display: <?php echo ($feed_row['display_header']=='1')? 'block' : 'none'?>; /*if display-header is true display:block*/
173
  }
174
 
175
  <?php
@@ -180,67 +179,67 @@ class WDI_ImageBrowser_view {
180
  $header_text_padding =(intval($style['user_img_width']) - intval($style['users_text_font_size']))/2;
181
  }
182
  ?>
183
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_header_user_text {
184
- padding-top: <?php echo $header_text_padding; ?>px;
185
 
186
  }
187
 
188
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_header_user_text h3 {
189
- margin-top: <?php echo $header_text_padding ?>px;
190
  }
191
 
192
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_media_info {
193
- display: <?php echo ($feed_row['display_user_post_follow_number'] == '1') ? 'block' : 'none'; ?>
194
  }
195
 
196
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_feed_item {
197
  width: <?php echo $colNum.'%'?>; /*thumbnail_size*/
198
  }
199
 
200
  <?php if($feed_row['disable_mobile_layout']=="0") { ?>
201
  @media screen and (min-width: 800px) and (max-width: 1024px) {
202
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_feed_item {
203
- width: <?php echo ($colNum<33.33) ? '33.333333333333%' : $colNum.'%'?>; /*thumbnail_size*/
204
  margin: 0;
205
  display: inline-block;
206
  vertical-align: top;
207
  overflow: hidden;
208
  }
209
 
210
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_feed_container {
211
  width: 100%;
212
  margin: 0 auto;
213
- background-color: <?php echo $style['feed_container_bg_color']?>; /*feed_container_bg_color*/
214
  }
215
  }
216
 
217
  @media screen and (min-width: 480px) and (max-width: 800px) {
218
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_feed_item {
219
- width: <?php echo ($colNum<50) ? '50%' : $colNum.'%'?>; /*thumbnail_size*/
220
  margin: 0;
221
  display: inline-block;
222
  overflow: hidden;
223
  }
224
 
225
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_feed_container {
226
  width: 100%;
227
  margin: 0 auto;
228
- background-color: <?php echo $style['feed_container_bg_color']?>; /*feed_container_bg_color*/
229
  }
230
  }
231
 
232
  @media screen and (max-width: 480px) {
233
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_feed_item {
234
- width: <?php echo ($colNum<100) ? '100%' : $colNum.'%'?>; /*thumbnail_size*/
235
  margin: 0;
236
  display: inline-block;
237
  overflow: hidden;
238
  }
239
 
240
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_feed_container {
241
  width: 100%;
242
  margin: 0 auto;
243
- background-color: <?php echo $style['feed_container_bg_color']?>; /*feed_container_bg_color*/
244
  }
245
  }
246
  <?php }
87
  }
88
  }
89
  if ($feed_row['feed_display_view'] === 'pagination') { ?>
90
+ <div class="wdi_page_loading wdi_hidden"><img class="wdi_load_more_spinner" src="<?php echo esc_url(WDI_URL) ?>/images/ajax_loader.png"></div>
91
  <?php
92
  }
93
  ?>
149
  $theme_path_parts = pathinfo($file_url);
150
 
151
  if(WDILibrary::is_ajax() || WDILibrary::elementor_is_active()) {
152
+ echo sprintf("<link rel='stylesheet' id='%s' href='%s' type='text/css' media='all' />", esc_html($theme_path_parts['basename']), esc_url($file_url . '?key=' . $generator->get_file_key()));
 
153
  } else {
154
  wp_enqueue_style($theme_path_parts['basename'], $file_url . '?key=' . $generator->get_file_key());
155
  }
167
 
168
  ob_start();
169
  ?>
170
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter) ?> .wdi_feed_header {
171
+ display: <?php echo (esc_html($feed_row['display_header'])=='1')? 'block' : 'none'?>; /*if display-header is true display:block*/
172
  }
173
 
174
  <?php
179
  $header_text_padding =(intval($style['user_img_width']) - intval($style['users_text_font_size']))/2;
180
  }
181
  ?>
182
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_header_user_text {
183
+ padding-top: <?php echo esc_html($header_text_padding); ?>px;
184
 
185
  }
186
 
187
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter) ?> .wdi_header_user_text h3 {
188
+ margin-top: <?php echo esc_html($header_text_padding) ?>px;
189
  }
190
 
191
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_media_info {
192
+ display: <?php echo (esc_html($feed_row['display_user_post_follow_number']) == '1') ? 'block' : 'none'; ?>
193
  }
194
 
195
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter) ?> .wdi_feed_item {
196
  width: <?php echo $colNum.'%'?>; /*thumbnail_size*/
197
  }
198
 
199
  <?php if($feed_row['disable_mobile_layout']=="0") { ?>
200
  @media screen and (min-width: 800px) and (max-width: 1024px) {
201
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_feed_item {
202
+ width: <?php echo (esc_html($colNum)<33.33) ? '33.333333333333%' : esc_html($colNum).'%'?>; /*thumbnail_size*/
203
  margin: 0;
204
  display: inline-block;
205
  vertical-align: top;
206
  overflow: hidden;
207
  }
208
 
209
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_feed_container {
210
  width: 100%;
211
  margin: 0 auto;
212
+ background-color: <?php echo esc_html($style['feed_container_bg_color'])?>; /*feed_container_bg_color*/
213
  }
214
  }
215
 
216
  @media screen and (min-width: 480px) and (max-width: 800px) {
217
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_feed_item {
218
+ width: <?php echo (esc_html($colNum)<50) ? '50%' : esc_html($colNum).'%'?>; /*thumbnail_size*/
219
  margin: 0;
220
  display: inline-block;
221
  overflow: hidden;
222
  }
223
 
224
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_feed_container {
225
  width: 100%;
226
  margin: 0 auto;
227
+ background-color: <?php echo esc_html($style['feed_container_bg_color'])?>; /*feed_container_bg_color*/
228
  }
229
  }
230
 
231
  @media screen and (max-width: 480px) {
232
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_feed_item {
233
+ width: <?php echo (esc_html($colNum<100)) ? '100%' : esc_html($colNum).'%'?>; /*thumbnail_size*/
234
  margin: 0;
235
  display: inline-block;
236
  overflow: hidden;
237
  }
238
 
239
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_feed_container {
240
  width: 100%;
241
  margin: 0 auto;
242
+ background-color: <?php echo esc_html($style['feed_container_bg_color'])?>; /*feed_container_bg_color*/
243
  }
244
  }
245
  <?php }
frontend/views/thumbnails.php CHANGED
@@ -44,7 +44,7 @@ class WDI_Thumbnails_view {
44
  </div>
45
  </div>
46
  <?php } ?>
47
- <div class="wdi_feed_wrapper <?php echo 'wdi_col_' . $feed_row['number_of_columns'] ?>" wdi-res='<?php echo 'wdi_col_' . $feed_row['number_of_columns'] ?>'></div>
48
  <div class="wdi_clear"></div>
49
  <?php
50
  switch ($feed_row['feed_display_view']) {
@@ -93,7 +93,7 @@ class WDI_Thumbnails_view {
93
  }
94
 
95
  if ($feed_row['feed_display_view'] === 'pagination') { ?>
96
- <div class="wdi_page_loading wdi_hidden"><img class="wdi_load_more_spinner" src="<?php echo WDI_URL ?>/images/ajax_loader.png"></div>
97
  <?php
98
  }
99
  ?>
@@ -154,8 +154,7 @@ class WDI_Thumbnails_view {
154
  if($file_url !== "") {
155
  $theme_path_parts = pathinfo($file_url);
156
  if(WDILibrary::is_ajax() || WDILibrary::elementor_is_active()) {
157
- $style_tag = "<link rel='stylesheet' id='%s' href='%s' type='text/css' media='all' />";
158
- echo sprintf($style_tag,$theme_path_parts['basename'], $file_url . '?key=' . $generator->get_file_key());
159
  }else{
160
  wp_enqueue_style($theme_path_parts['basename'], $file_url . '?key=' . $generator->get_file_key());
161
  }
@@ -171,8 +170,8 @@ class WDI_Thumbnails_view {
171
  $colNum = (100 / $feed_row['number_of_columns']);
172
  ob_start();
173
  ?>
174
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_feed_header {
175
- display: <?php echo ($feed_row['display_header']=='1')? 'block' : 'none'?>; /*if display-header is true display:block*/
176
  }
177
  <?php
178
  if($feed_row['display_user_post_follow_number'] == '1'){
@@ -181,70 +180,70 @@ class WDI_Thumbnails_view {
181
  $header_text_padding =(intval($style['user_img_width']) - intval($style['users_text_font_size']))/2;
182
  }
183
  ?>
184
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_header_user_text {
185
- padding-top: <?php echo $header_text_padding; ?>px;
186
  }
187
 
188
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_header_user_text h3 {
189
- margin-top: <?php echo $header_text_padding ?>px;
190
  }
191
 
192
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_media_info {
193
- display: <?php echo ($feed_row['display_user_post_follow_number'] == '1') ? 'block' : 'none'; ?>
194
  }
195
 
196
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_feed_item {
197
- width: <?php echo $colNum.'%'?>; /*thumbnail_size*/
198
  line-height: 0;
199
  }
200
 
201
  <?php if($feed_row['disable_mobile_layout']=="0") { ?>
202
  @media screen and (min-width: 800px) and (max-width: 1024px) {
203
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_feed_item {
204
- width: <?php echo ($colNum<33.33) ? '33.333333333333%' : $colNum.'%'?>; /*thumbnail_size*/
205
  margin: 0;
206
  display: inline-block;
207
  vertical-align: top;
208
  overflow: hidden;
209
  }
210
 
211
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_feed_container {
212
  width: 100%;
213
  margin: 0 auto;
214
- background-color: <?php echo $style['feed_container_bg_color']?>; /*feed_container_bg_color*/
215
  }
216
 
217
  }
218
 
219
  @media screen and (min-width: 480px) and (max-width: 800px) {
220
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_feed_item {
221
- width: <?php echo ($colNum<50) ? '50%' : $colNum.'%'?>; /*thumbnail_size*/
222
  margin: 0;
223
  display: inline-block;
224
  vertical-align: top;
225
  overflow: hidden;
226
  }
227
 
228
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_feed_container {
229
  width: 100%;
230
  margin: 0 auto;
231
- background-color: <?php echo $style['feed_container_bg_color']?>; /*feed_container_bg_color*/
232
  }
233
  }
234
 
235
  @media screen and (max-width: 480px) {
236
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_feed_item {
237
- width: <?php echo ($colNum<100) ? '100%' : $colNum.'%'?>; /*thumbnail_size*/
238
  margin: 0;
239
  display: inline-block;
240
  vertical-align: top;
241
  overflow: hidden;
242
  }
243
 
244
- #wdi_feed_<?php echo $wdi_feed_counter?> .wdi_feed_container {
245
  width: 100%;
246
  margin: 0 auto;
247
- background-color: <?php echo $style['feed_container_bg_color']?>; /*feed_container_bg_color*/
248
  }
249
  }
250
  <?php }
44
  </div>
45
  </div>
46
  <?php } ?>
47
+ <div class="wdi_feed_wrapper <?php echo sanitize_html_class('wdi_col_' . $feed_row['number_of_columns']) ?>" wdi-res='<?php echo 'wdi_col_' . esc_attr($feed_row['number_of_columns'])?>'></div>
48
  <div class="wdi_clear"></div>
49
  <?php
50
  switch ($feed_row['feed_display_view']) {
93
  }
94
 
95
  if ($feed_row['feed_display_view'] === 'pagination') { ?>
96
+ <div class="wdi_page_loading wdi_hidden"><img class="wdi_load_more_spinner" src="<?php echo esc_url(WDI_URL) ?>/images/ajax_loader.png"></div>
97
  <?php
98
  }
99
  ?>
154
  if($file_url !== "") {
155
  $theme_path_parts = pathinfo($file_url);
156
  if(WDILibrary::is_ajax() || WDILibrary::elementor_is_active()) {
157
+ echo sprintf("<link rel='stylesheet' id='%s' href='%s' type='text/css' media='all' />",esc_html($theme_path_parts['basename']), esc_url($file_url . '?key=' . $generator->get_file_key()));
 
158
  }else{
159
  wp_enqueue_style($theme_path_parts['basename'], $file_url . '?key=' . $generator->get_file_key());
160
  }
170
  $colNum = (100 / $feed_row['number_of_columns']);
171
  ob_start();
172
  ?>
173
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_feed_header {
174
+ display: <?php echo (esc_html($feed_row['display_header'])=='1')? 'block' : 'none'?>; /*if display-header is true display:block*/
175
  }
176
  <?php
177
  if($feed_row['display_user_post_follow_number'] == '1'){
180
  $header_text_padding =(intval($style['user_img_width']) - intval($style['users_text_font_size']))/2;
181
  }
182
  ?>
183
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_header_user_text {
184
+ padding-top: <?php echo esc_html($header_text_padding); ?>px;
185
  }
186
 
187
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_header_user_text h3 {
188
+ margin-top: <?php echo esc_html($header_text_padding) ?>px;
189
  }
190
 
191
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_media_info {
192
+ display: <?php echo (esc_html($feed_row['display_user_post_follow_number']) == '1') ? 'block' : 'none'; ?>
193
  }
194
 
195
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_feed_item {
196
+ width: <?php echo esc_html($colNum).'%'?>; /*thumbnail_size*/
197
  line-height: 0;
198
  }
199
 
200
  <?php if($feed_row['disable_mobile_layout']=="0") { ?>
201
  @media screen and (min-width: 800px) and (max-width: 1024px) {
202
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_feed_item {
203
+ width: <?php echo (esc_html($colNum)<33.33) ? '33.333333333333%' : esc_html($colNum).'%'?>; /*thumbnail_size*/
204
  margin: 0;
205
  display: inline-block;
206
  vertical-align: top;
207
  overflow: hidden;
208
  }
209
 
210
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_feed_container {
211
  width: 100%;
212
  margin: 0 auto;
213
+ background-color: <?php echo esc_html($style['feed_container_bg_color'])?>; /*feed_container_bg_color*/
214
  }
215
 
216
  }
217
 
218
  @media screen and (min-width: 480px) and (max-width: 800px) {
219
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_feed_item {
220
+ width: <?php echo (esc_html($colNum)<50) ? '50%' : esc_html($colNum).'%'?>; /*thumbnail_size*/
221
  margin: 0;
222
  display: inline-block;
223
  vertical-align: top;
224
  overflow: hidden;
225
  }
226
 
227
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_feed_container {
228
  width: 100%;
229
  margin: 0 auto;
230
+ background-color: <?php echo esc_html($style['feed_container_bg_color'])?>; /*feed_container_bg_color*/
231
  }
232
  }
233
 
234
  @media screen and (max-width: 480px) {
235
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_feed_item {
236
+ width: <?php echo (esc_html($colNum)<100) ? '100%' : esc_html($colNum).'%'?>; /*thumbnail_size*/
237
  margin: 0;
238
  display: inline-block;
239
  vertical-align: top;
240
  overflow: hidden;
241
  }
242
 
243
+ #wdi_feed_<?php echo sanitize_html_class($wdi_feed_counter)?> .wdi_feed_container {
244
  width: 100%;
245
  margin: 0 auto;
246
+ background-color: <?php echo esc_html($style['feed_container_bg_color'])?>; /*feed_container_bg_color*/
247
  }
248
  }
249
  <?php }
readme.txt CHANGED
@@ -4,7 +4,7 @@ Tags: custom instagram feed, feed, instagram, hashtag, Instagram feed, instagram
4
  Requires at least: 3.9
5
  Requires PHP: 5.2
6
  Tested up to: 5.8
7
- Stable tag: 1.4.26
8
  License: GPLv2 or later
9
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
10
 
@@ -505,6 +505,9 @@ Please make sure you don't have any important information before you proceed.
505
  10Web Social Photo Feed for Instagram plugin uses Instagram API on website front end. You have to authorize the plugin via sign in to get data from Instagram on your behalf. The plugin does not send any user’s data to Instagram. All the data received from Instagram via API is cached in WordPress database for some short customizable period to provide front end optimization. You can delete or update cached data. Instagram saves some cookies in browsers of website visitors via API data. These cookies are mostly used for security purposes. They are regulated under terms of Instagram’s privacy policy https://instagram.com/legal/privacy. The plugin asks for your consent to collect site administrator’s email address and site URL to offer customer support, deals and discounts on premium products and more.
506
 
507
  == Changelog ==
 
 
 
508
  = 1.4.26 =
509
  Fixed: Security issue.
510
 
4
  Requires at least: 3.9
5
  Requires PHP: 5.2
6
  Tested up to: 5.8
7
+ Stable tag: 1.4.27
8
  License: GPLv2 or later
9
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
10
 
505
  10Web Social Photo Feed for Instagram plugin uses Instagram API on website front end. You have to authorize the plugin via sign in to get data from Instagram on your behalf. The plugin does not send any user’s data to Instagram. All the data received from Instagram via API is cached in WordPress database for some short customizable period to provide front end optimization. You can delete or update cached data. Instagram saves some cookies in browsers of website visitors via API data. These cookies are mostly used for security purposes. They are regulated under terms of Instagram’s privacy policy https://instagram.com/legal/privacy. The plugin asks for your consent to collect site administrator’s email address and site URL to offer customer support, deals and discounts on premium products and more.
506
 
507
  == Changelog ==
508
+ = 1.4.27 =
509
+ Fixed: Security issue.
510
+
511
  = 1.4.26 =
512
  Fixed: Security issue.
513
 
wd-instagram-feed.php CHANGED
@@ -3,7 +3,7 @@
3
  * Plugin Name: 10Web Social Photo Feed
4
  * Plugin URI: https://10web.io/plugins/wordpress-instagram-feed/?utm_source=instagram_feed&utm_medium=free_plugin
5
  * Description: 10Web Social Photo Feed is a user-friendly tool for displaying user or hashtag-based feeds on your website. You can create feeds with one of the available layouts. It allows displaying image metadata, open up images in lightbox, download them and even share in social networking websites.
6
- * Version: 1.4.26
7
  * Author: 10Web
8
  * Author URI: https://10Web.io/plugins/?utm_source=instagram_feed&utm_medium=free_plugin
9
  * License: GPLv2 or later
3
  * Plugin Name: 10Web Social Photo Feed
4
  * Plugin URI: https://10web.io/plugins/wordpress-instagram-feed/?utm_source=instagram_feed&utm_medium=free_plugin
5
  * Description: 10Web Social Photo Feed is a user-friendly tool for displaying user or hashtag-based feeds on your website. You can create feeds with one of the available layouts. It allows displaying image metadata, open up images in lightbox, download them and even share in social networking websites.
6
+ * Version: 1.4.27
7
  * Author: 10Web
8
  * Author URI: https://10Web.io/plugins/?utm_source=instagram_feed&utm_medium=free_plugin
9
  * License: GPLv2 or later