WP Live Chat Support - Version 7.1.04

Version Description

  • 2017-07-10 - Medium Priority =
  • Fixed a fatal error when trying to delete chat history
Download this release

Release Info

Developer WP-LiveChat
Plugin Icon 128x128 WP Live Chat Support
Version 7.1.04
Comparing to
See all releases

Code changes from version 7.1.02 to 7.1.04

Files changed (3) hide show
  1. functions.php +1 -1
  2. readme.txt +9 -0
  3. wp-live-chat-support.php +21 -13
functions.php CHANGED
@@ -1893,7 +1893,7 @@ function wplc_admin_display_missed_chats() {
1893
  //Prompt
1894
  echo "<div class='update-nag' style='margin-top: 0px;margin-bottom: 5px;'>
1895
  ".__("Are you sure you would like to delete this chat?", "wplivechat")."<br>
1896
- <a class='button' href='?page=wplivechat-menu-missed-chats&wplc_action=remove_missed_cid&cid=".$_GET['cid']."&wplc_confirm=1''>".__("Yes", "wplivechat")."</a> <a class='button' href='?page=wplivechat-menu-missed-chats'>".__("No", "wplivechat")."</a>
1897
  </div>";
1898
  }
1899
  }
1893
  //Prompt
1894
  echo "<div class='update-nag' style='margin-top: 0px;margin-bottom: 5px;'>
1895
  ".__("Are you sure you would like to delete this chat?", "wplivechat")."<br>
1896
+ <a class='button' href='?page=wplivechat-menu-missed-chats&wplc_action=remove_missed_cid&cid=".intval( sanitize_text_field( $_GET['cid'] ) )."&wplc_confirm=1''>".__("Yes", "wplivechat")."</a> <a class='button' href='?page=wplivechat-menu-missed-chats'>".__("No", "wplivechat")."</a>
1897
  </div>";
1898
  }
1899
  }
readme.txt CHANGED
@@ -206,6 +206,9 @@ If the live chat box still does not appear on your website, please go through th
206
 
207
  == Upgrade Notice ==
208
 
 
 
 
209
  = 7.0.02 =
210
  We have patched the PHPMailer vulnerability. Please update to version 7.0.02.
211
 
@@ -220,6 +223,12 @@ It is highly recommended that you upgrade to WP Live Chat Support version 4.4.0
220
 
221
  == Changelog ==
222
 
 
 
 
 
 
 
223
  = 7.1.02 - 2017-06-29 - Medium priority =
224
  * Fixed undefined variables when using social profiles, a bio and tag line
225
  * Fixed a bug that caused some messages to not get recorded
206
 
207
  == Upgrade Notice ==
208
 
209
+ = 7.1.03 =
210
+ It is highly recommended that you upgrade to WP Live Chat Support version 7.1.04 for security reasons.
211
+
212
  = 7.0.02 =
213
  We have patched the PHPMailer vulnerability. Please update to version 7.0.02.
214
 
223
 
224
  == Changelog ==
225
 
226
+ = 7.1.04 - 2017-07-10 - Medium Priority =
227
+ * Fixed a fatal error when trying to delete chat history
228
+
229
+ = 7.1.03 - 2017-07-10 - High Priority =
230
+ * XSS Vulenrability Fixed - Thank you pluginvulnerabilities.com
231
+
232
  = 7.1.02 - 2017-06-29 - Medium priority =
233
  * Fixed undefined variables when using social profiles, a bio and tag line
234
  * Fixed a bug that caused some messages to not get recorded
wp-live-chat-support.php CHANGED
@@ -3,7 +3,7 @@
3
  Plugin Name: WP Live Chat Support
4
  Plugin URI: http://www.wp-livechat.com
5
  Description: The easiest to use website live chat plugin. Let your visitors chat with you and increase sales conversion rates with WP Live Chat Support. No third party connection required!
6
- Version: 7.1.02
7
  Author: WP-LiveChat
8
  Author URI: http://www.wp-livechat.com
9
  Text Domain: wplivechat
@@ -11,6 +11,12 @@
11
  */
12
 
13
  /**
 
 
 
 
 
 
14
  * 7.1.02 - 2017-06-29 - Medium priority
15
  * Fixed undefined variables when using social profiles, a bio and tag line
16
  * Fixed a bug that caused some messages to not get recorded
@@ -553,7 +559,7 @@ global $debug_start;
553
  $wplc_tblname_offline_msgs = $wpdb->prefix . "wplc_offline_messages";
554
  $wplc_tblname_chats = $wpdb->prefix . "wplc_chat_sessions";
555
  $wplc_tblname_msgs = $wpdb->prefix . "wplc_chat_msgs";
556
- $wplc_version = "7.1.02";
557
 
558
  define('WPLC_BASIC_PLUGIN_DIR', dirname(__FILE__));
559
  define('WPLC_BASIC_PLUGIN_URL', plugins_url() . "/wp-live-chat-support/");
@@ -2544,9 +2550,9 @@ function wplc_superadmin_javascript() {
2544
 
2545
  /** set the global chat data here so we dont need to keep getting it from the DB or Cloud server */
2546
  global $admin_chat_data;
2547
- $admin_chat_data = wplc_get_chat_data($_GET['cid'], __LINE__);
2548
 
2549
- wplc_return_admin_chat_javascript(sanitize_text_field($_GET['cid']));
2550
 
2551
 
2552
  }
@@ -2601,14 +2607,14 @@ function old_wplc_superadmin_javascript() {
2601
  } // main page
2602
  else if ( isset($_GET['action']) && ( $_GET['action'] != 'welcome' && $_GET['action'] != 'credits' && $_GET['action'] != 'history' ) ) {
2603
  if (function_exists("wplc_register_pro_version")) {
2604
- wplc_return_pro_admin_chat_javascript(sanitize_text_field($_GET['cid']));
2605
  } else {
2606
 
2607
  /** set the global chat data here so we dont need to keep getting it from the DB or Cloud server */
2608
  global $admin_chat_data;
2609
- $admin_chat_data = wplc_get_chat_data($_GET['cid'], __LINE__);
2610
 
2611
- wplc_return_admin_chat_javascript(sanitize_text_field($_GET['cid']));
2612
 
2613
 
2614
  }
@@ -2951,18 +2957,18 @@ function wplc_admin_menu_layout_display() {
2951
  <?php
2952
  } else {
2953
  if (isset($_GET['aid'])) { $aid = $_GET['aid']; } else { $aid = null; }
2954
- do_action("wplc_hook_admin_menu_layout_display_1",$_GET['action'],$_GET['cid'],$aid);
2955
 
2956
  if (!is_null($aid)) {
2957
- do_action("wplc_hook_update_agent_id",$_GET['cid'],$aid);
2958
  }
2959
 
2960
- do_action("wplc_hook_admin_menu_layout_display_1",$_GET['action'],$_GET['cid'],$aid);
2961
 
2962
  if ($_GET['action'] == 'ac') {
2963
  do_action('wplc_hook_accept_chat',$_GET,$aid);
2964
  }
2965
- do_action("wplc_hook_admin_menu_layout_display",$_GET['action'],$_GET['cid'],$aid);
2966
  }
2967
  } else {
2968
  ?>
@@ -3270,7 +3276,9 @@ function wplc_return_chat_response_box($cid, $chat_data = false) {
3270
  }
3271
 
3272
  function wplc_return_admin_chat_javascript($cid) {
 
3273
  $ajax_nonce = wp_create_nonce("wplc");
 
3274
  global $wplc_version;
3275
 
3276
  $wplc_settings = get_option("WPLC_SETTINGS");
@@ -3329,11 +3337,11 @@ function wplc_return_admin_chat_javascript($cid) {
3329
  * Get the CURRENT agent's data
3330
  */
3331
  if(isset($_GET['aid'])){
3332
- $agent_data = get_user_by('ID', intval($_GET['aid']));
3333
  wp_localize_script('wplc-admin-chat-server', 'wplc_admin_agent_name', $agent_data->display_name);
3334
  wp_localize_script('wplc-admin-chat-server', 'wplc_admin_agent_email', md5($agent_data->user_email));
3335
  } else {
3336
- $agent_data = get_user_by('ID', intval(get_current_user_id()));
3337
  wp_localize_script('wplc-admin-chat-server', 'wplc_admin_agent_name', $agent_data->display_name);
3338
  wp_localize_script('wplc-admin-chat-server', 'wplc_admin_agent_email', md5($agent_data->user_email));
3339
  }
3
  Plugin Name: WP Live Chat Support
4
  Plugin URI: http://www.wp-livechat.com
5
  Description: The easiest to use website live chat plugin. Let your visitors chat with you and increase sales conversion rates with WP Live Chat Support. No third party connection required!
6
+ Version: 7.1.04
7
  Author: WP-LiveChat
8
  Author URI: http://www.wp-livechat.com
9
  Text Domain: wplivechat
11
  */
12
 
13
  /**
14
+ * 7.1.04 - 2017-07-10 - Medium Priority
15
+ * Fixed a fatal error when trying to delete chat history
16
+ *
17
+ * 7.1.03 - 2017-07-10 - High Priority
18
+ * XSS Vulenrability Fixed - Thank you pluginvulnerabilities.com
19
+ *
20
  * 7.1.02 - 2017-06-29 - Medium priority
21
  * Fixed undefined variables when using social profiles, a bio and tag line
22
  * Fixed a bug that caused some messages to not get recorded
559
  $wplc_tblname_offline_msgs = $wpdb->prefix . "wplc_offline_messages";
560
  $wplc_tblname_chats = $wpdb->prefix . "wplc_chat_sessions";
561
  $wplc_tblname_msgs = $wpdb->prefix . "wplc_chat_msgs";
562
+ $wplc_version = "7.1.03";
563
 
564
  define('WPLC_BASIC_PLUGIN_DIR', dirname(__FILE__));
565
  define('WPLC_BASIC_PLUGIN_URL', plugins_url() . "/wp-live-chat-support/");
2550
 
2551
  /** set the global chat data here so we dont need to keep getting it from the DB or Cloud server */
2552
  global $admin_chat_data;
2553
+ $admin_chat_data = wplc_get_chat_data( sanitize_text_field( $_GET['cid'] ), __LINE__);
2554
 
2555
+ wplc_return_admin_chat_javascript( sanitize_text_field( $_GET['cid'] ) );
2556
 
2557
 
2558
  }
2607
  } // main page
2608
  else if ( isset($_GET['action']) && ( $_GET['action'] != 'welcome' && $_GET['action'] != 'credits' && $_GET['action'] != 'history' ) ) {
2609
  if (function_exists("wplc_register_pro_version")) {
2610
+ wplc_return_pro_admin_chat_javascript( sanitize_text_field( $_GET['cid'] ) );
2611
  } else {
2612
 
2613
  /** set the global chat data here so we dont need to keep getting it from the DB or Cloud server */
2614
  global $admin_chat_data;
2615
+ $admin_chat_data = wplc_get_chat_data( sanitize_text_field( $_GET['cid'] ), __LINE__);
2616
 
2617
+ wplc_return_admin_chat_javascript( sanitize_text_field( $_GET['cid'] ) );
2618
 
2619
 
2620
  }
2957
  <?php
2958
  } else {
2959
  if (isset($_GET['aid'])) { $aid = $_GET['aid']; } else { $aid = null; }
2960
+ do_action("wplc_hook_admin_menu_layout_display_1",$_GET['action'], sanitize_text_field( $_GET['cid'] ),$aid);
2961
 
2962
  if (!is_null($aid)) {
2963
+ do_action("wplc_hook_update_agent_id", intval( sanitize_text_field( $_GET['cid'] ) ),$aid);
2964
  }
2965
 
2966
+ do_action("wplc_hook_admin_menu_layout_display_1",$_GET['action'], sanitize_text_field( $_GET['cid'] ),$aid);
2967
 
2968
  if ($_GET['action'] == 'ac') {
2969
  do_action('wplc_hook_accept_chat',$_GET,$aid);
2970
  }
2971
+ do_action("wplc_hook_admin_menu_layout_display",$_GET['action'], sanitize_text_field( $_GET['cid'] ),$aid);
2972
  }
2973
  } else {
2974
  ?>
3276
  }
3277
 
3278
  function wplc_return_admin_chat_javascript($cid) {
3279
+
3280
  $ajax_nonce = wp_create_nonce("wplc");
3281
+
3282
  global $wplc_version;
3283
 
3284
  $wplc_settings = get_option("WPLC_SETTINGS");
3337
  * Get the CURRENT agent's data
3338
  */
3339
  if(isset($_GET['aid'])){
3340
+ $agent_data = get_user_by('ID', intval( sanitize_text_field( $_GET['aid'] ) ) );
3341
  wp_localize_script('wplc-admin-chat-server', 'wplc_admin_agent_name', $agent_data->display_name);
3342
  wp_localize_script('wplc-admin-chat-server', 'wplc_admin_agent_email', md5($agent_data->user_email));
3343
  } else {
3344
+ $agent_data = get_user_by('ID', intval( get_current_user_id() ) );
3345
  wp_localize_script('wplc-admin-chat-server', 'wplc_admin_agent_name', $agent_data->display_name);
3346
  wp_localize_script('wplc-admin-chat-server', 'wplc_admin_agent_email', md5($agent_data->user_email));
3347
  }