PayPal Buy Now Button - Version 1.7.3

Version Description

  • 10/1/21
  • Fix - Security Issues
Download this release

Release Info

Developer scottpaterson
Plugin Icon 128x128 PayPal Buy Now Button
Version 1.7.3
Comparing to
See all releases

Code changes from version 1.7.2 to 1.7.3

Files changed (2) hide show
  1. readme.txt +9 -5
  2. wp-ecommerce-paypal.php +29 -20
readme.txt CHANGED
@@ -1,12 +1,12 @@
1
- === PayPal Buy Now Button ===
2
  Contributors: scottpaterson,wp-plugin
3
  Donate link: https://wpplugin.org/donate/
4
  Tags: PayPal, gateway, paypal button
5
  Author URI: https://wpplugin.org
6
  Requires at least: 3.0
7
- Tested up to: 4.9
8
  Requires PHP: 5.4
9
- Stable tag: 1.7.2
10
  License: GPLv2 or later
11
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
12
 
@@ -34,7 +34,7 @@ This PayPal plugin works with any WordPress theme.
34
  WPPlugin is an offical PayPal Partner based in Boulder, Colorado. You can visit WPPlugin's website at [wpplugin.org](https://wpplugin.org). Various trademarks held by their respective owners.
35
 
36
 
37
- = PayPal Buy Now Button Features =
38
 
39
  * PayPal Button Inserter - Just enter your items name, price, etc. and it make the Buy Now button for you
40
  * Works with any WordPress Theme
@@ -47,7 +47,7 @@ WPPlugin is an offical PayPal Partner based in Boulder, Colorado. You can visit
47
  * Choose a cancel payment url
48
  * Choose a succesful payment url
49
 
50
- > #### PayPal Buy Now Button Pro
51
  > We offer a Pro version of this PayPal plugin for business owners who need more features.<br />
52
  >
53
  > * Manage PayPal buttons in a Central Location
@@ -104,6 +104,10 @@ Yes, there is no limit to the amount of PayPal Buy Now buttons you can put on on
104
 
105
  == Changelog ==
106
 
 
 
 
 
107
  = 1.7.2 =
108
  * 3/30/17
109
  * Update - Fix - Fixed code formatting issues
1
+ === Easy PayPal Buy Now Button ===
2
  Contributors: scottpaterson,wp-plugin
3
  Donate link: https://wpplugin.org/donate/
4
  Tags: PayPal, gateway, paypal button
5
  Author URI: https://wpplugin.org
6
  Requires at least: 3.0
7
+ Tested up to: 6.0
8
  Requires PHP: 5.4
9
+ Stable tag: 1.7.3
10
  License: GPLv2 or later
11
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
12
 
34
  WPPlugin is an offical PayPal Partner based in Boulder, Colorado. You can visit WPPlugin's website at [wpplugin.org](https://wpplugin.org). Various trademarks held by their respective owners.
35
 
36
 
37
+ = Easy PayPal Buy Now Button Features =
38
 
39
  * PayPal Button Inserter - Just enter your items name, price, etc. and it make the Buy Now button for you
40
  * Works with any WordPress Theme
47
  * Choose a cancel payment url
48
  * Choose a succesful payment url
49
 
50
+ > #### Easy PayPal Buy Now Button Pro
51
  > We offer a Pro version of this PayPal plugin for business owners who need more features.<br />
52
  >
53
  > * Manage PayPal buttons in a Central Location
104
 
105
  == Changelog ==
106
 
107
+ = 1.7.3 =
108
+ * 10/1/21
109
+ * Fix - Security Issues
110
+
111
  = 1.7.2 =
112
  * 3/30/17
113
  * Update - Fix - Fixed code formatting issues
wp-ecommerce-paypal.php CHANGED
@@ -1,17 +1,19 @@
1
  <?php
2
 
 
 
3
  /*
4
- Plugin Name: PayPal Buy Now Button
5
  Description: Add a PayPal Buy Now Button to your website and start selling today. No Coding Required. Official PayPal Partner.
6
  Plugin URI: https://wpplugin.org/easy-paypal-button/
7
  Tags: PayPal payment, PayPal, button, payment, online payments, pay now, buy now, ecommerce, gateway, paypal button, paypal buy now button, paypal plugin
8
  Author: Scott Paterson
9
  Author URI: https://wpplugin.org
10
  License: GPL2
11
- Version: 1.7.2
12
  */
13
 
14
- /* Copyright 2014-2017 Scott Paterson
15
 
16
  This program is free software; you can redistribute it and/or modify
17
  it under the terms of the GNU General Public License as published by
@@ -209,28 +211,35 @@ function wpecpp_plugin_options() {
209
 
210
 
211
  echo "<table width='100%'><tr><td width='70%'><br />";
212
- echo "<label style='color: #000;font-size:18pt;'><center>PayPal Buy Now Button Settings</center></label>";
213
- echo "<form method='post' action='".$_SERVER["REQUEST_URI"]."'>";
214
 
215
 
216
  // save and update options
217
  if (isset($_POST['update'])) {
218
-
219
- $options['currency'] = $_POST['currency'];
220
- $options['language'] = $_POST['language'];
221
- $options['liveaccount'] = $_POST['liveaccount'];
222
- $options['sandboxaccount'] = $_POST['sandboxaccount'];
223
- $options['mode'] = $_POST['mode'];
224
- $options['size'] = $_POST['size'];
225
- $options['opens'] = $_POST['opens'];
226
- $options['cancel'] = $_POST['cancel'];
227
- $options['return'] = $_POST['return'];
228
- $options['paymentaction'] = $_POST['paymentaction'];
229
-
 
 
 
 
 
 
 
230
  update_option("wpecpp_settingsoptions", $options);
231
-
232
  echo "<br /><div class='updated'><p><strong>"; _e("Settings Updated."); echo "</strong></p></div>";
233
-
234
  }
235
 
236
 
@@ -415,7 +424,7 @@ function wpecpp_plugin_options() {
415
 
416
  WPPlugin is an offical PayPal Partner. Various trademarks held by their respective owners.
417
 
418
-
419
  </form>
420
 
421
 
1
  <?php
2
 
3
+ if ( ! defined( 'ABSPATH' ) ) exit; // Exit if accessed directly
4
+
5
  /*
6
+ Plugin Name: Easy PayPal Buy Now Button
7
  Description: Add a PayPal Buy Now Button to your website and start selling today. No Coding Required. Official PayPal Partner.
8
  Plugin URI: https://wpplugin.org/easy-paypal-button/
9
  Tags: PayPal payment, PayPal, button, payment, online payments, pay now, buy now, ecommerce, gateway, paypal button, paypal buy now button, paypal plugin
10
  Author: Scott Paterson
11
  Author URI: https://wpplugin.org
12
  License: GPL2
13
+ Version: 1.7.3
14
  */
15
 
16
+ /* Copyright 2014-2022 Scott Paterson
17
 
18
  This program is free software; you can redistribute it and/or modify
19
  it under the terms of the GNU General Public License as published by
211
 
212
 
213
  echo "<table width='100%'><tr><td width='70%'><br />";
214
+ echo "<label style='color: #000;font-size:18pt;'><center>Easy PayPal Buy Now Button Settings</center></label>";
215
+ echo "<form method='post' action='".esc_attr($_SERVER["REQUEST_URI"])."'>";
216
 
217
 
218
  // save and update options
219
  if (isset($_POST['update'])) {
220
+
221
+ // check nonce for security
222
+ $nonce = $_REQUEST['_wpnonce'];
223
+ if ( ! wp_verify_nonce( $nonce, 'wpecpp_form_post' ) ) {
224
+ echo "Nonce verification failed.";
225
+ exit;
226
+ }
227
+
228
+ $options['currency'] = esc_attr($_POST['currency']);
229
+ $options['language'] = esc_attr($_POST['language']);
230
+ $options['liveaccount'] = esc_attr($_POST['liveaccount']);
231
+ $options['sandboxaccount'] = esc_attr($_POST['sandboxaccount']);
232
+ $options['mode'] = esc_attr($_POST['mode']);
233
+ $options['size'] = esc_attr($_POST['size']);
234
+ $options['opens'] = esc_attr($_POST['opens']);
235
+ $options['cancel'] = esc_attr($_POST['cancel']);
236
+ $options['return'] = esc_attr($_POST['return']);
237
+ $options['paymentaction'] = esc_attr($_POST['paymentaction']);
238
+
239
  update_option("wpecpp_settingsoptions", $options);
240
+
241
  echo "<br /><div class='updated'><p><strong>"; _e("Settings Updated."); echo "</strong></p></div>";
242
+
243
  }
244
 
245
 
424
 
425
  WPPlugin is an offical PayPal Partner. Various trademarks held by their respective owners.
426
 
427
+ <?php wp_nonce_field('wpecpp_form_post'); ?>
428
  </form>
429
 
430