WP Shortcode by MyThemeShop

Version Description

Fixed sanitize_html_class() functions

Release Info

Developer	MyThemeShop
Plugin	WP Shortcode by MyThemeShop
Version	1.4.5
Comparing to
See all releases

Code changes from version 1.4.4 to 1.4.5

Files changed (2) hide show

readme.txt +4 -1
wp-shortcode.php +11 -11

readme.txt CHANGED Viewed

	@@ -4,7 +4,7 @@ Creator's website link: http://mythemeshop.com/
4	Tags: shortcodes, shortcode, shortcodes list, toggle shortcode, buttons, google map shortcode, youtube shortcode, vimeo shortcode, alert shortcode, notification shortcode, column shortcodes
5	Requires at least: 3.0.1
6	Tested up to: 4.7.2
7	- Stable tag: 1.4.4
8	License: GPLv2 or later
9	License URI: http://www.gnu.org/licenses/gpl-2.0.html
10
	@@ -65,6 +65,9 @@ Please disable all plugins and check if shortcode plugin is working properly. Th
65
66	== Changelog ==
67



68	= 1.4.4 =
69	* Fixed XSS vulnerability (thanks to https://www.threatpress.com)
70


4	Tags: shortcodes, shortcode, shortcodes list, toggle shortcode, buttons, google map shortcode, youtube shortcode, vimeo shortcode, alert shortcode, notification shortcode, column shortcodes
5	Requires at least: 3.0.1
6	Tested up to: 4.7.2
7	+ Stable tag: 1.4.5
8	License: GPLv2 or later
9	License URI: http://www.gnu.org/licenses/gpl-2.0.html
10

65
66	== Changelog ==
67
68	+ = 1.4.5 =
69	+ * Fixed sanitize_html_class() functions
70	+
71	= 1.4.4 =
72	* Fixed XSS vulnerability (thanks to https://www.threatpress.com)
73

wp-shortcode.php CHANGED Viewed

	@@ -4,7 +4,7 @@ Plugin Name: WP Shortcode by MyThemeShop
4	Plugin URI: http://mythemeshop.com/
5	Description: With the vast array of shortcodes, you can quickly and easily build content for your posts and pages and turbocharge your blogging experience.
6	Author: MyThemeShop
7	- Version: 1.4.4
8	Author URI: http://mythemeshop.com/
9	*/
10
	@@ -96,7 +96,7 @@ function mts_button_brown( $atts, $content = null ) {
96	'position' => 'left',
97	'rel' => '',
98	), $atts));
99	- $out = "<a href=\"" . esc_url( $url ) . "\" target=\"" . esc_attr( $target ) . "\" class=\"buttons btn_brown " .~~santize_html_class~~( $position ). "\"" .($rel? " rel=\"" . esc_attr( $rel ) . "\"" : "")."><span class=\"left\">".do_shortcode($content)."</span></a>";
100	if ($position == 'center') {
101	$out = '<div class="button-center">'.$out.'</div>';
102	}
	@@ -110,7 +110,7 @@ function mts_button_blue( $atts, $content = null ) {
110	'position' => 'left',
111	'rel' => '',
112	), $atts));
113	- $out = "<a href=\"" . esc_url( $url ) . "\" target=\"" . esc_attr( $target ) . "\" class=\"buttons btn_blue " .~~santize_html_class~~( $position ). "\"" .($rel? " rel=\"" . esc_attr( $rel ) . "\"" : "")."><span class=\"left\">".do_shortcode($content)."</span></a>";
114	if ($position == 'center') {
115	$out = '<div class="button-center">'.$out.'</div>';
116	}
	@@ -124,7 +124,7 @@ function mts_button_green( $atts, $content = null ) {
124	'position' => 'left',
125	'rel' => '',
126	), $atts));
127	- $out = "<a href=\"" . esc_url( $url ) . "\" target=\"" . esc_attr( $target ) . "\" class=\"buttons btn_green " .~~santize_html_class~~( $position ). "\"" .($rel? " rel=\"" . esc_attr( $rel ) . "\"" : "")."><span class=\"left\">".do_shortcode($content)."</span></a>";
128	if ($position == 'center') {
129	$out = '<div class="button-center">'.$out.'</div>';
130	}
	@@ -138,7 +138,7 @@ function mts_button_red( $atts, $content = null ) {
138	'position' => 'left',
139	'rel' => '',
140	), $atts));
141	- $out = "<a href=\"" . esc_url( $url ) . "\" target=\"" . esc_attr( $target ) . "\" class=\"buttons btn_red " .~~santize_html_class~~( $position ). "\"" .($rel? " rel=\"" . esc_attr( $rel ) . "\"" : "")."><span class=\"left\">".do_shortcode($content)."</span></a>";
142	if ($position == 'center') {
143	$out = '<div class="button-center">'.$out.'</div>';
144	}
	@@ -152,7 +152,7 @@ function mts_button_white( $atts, $content = null ) {
152	'position' => 'left',
153	'rel' => '',
154	), $atts));
155	- $out = "<a href=\"" . esc_url( $url ) . "\" target=\"" . esc_attr( $target ) . "\" class=\"buttons btn_white " .~~santize_html_class~~( $position ). "\"" .($rel? " rel=\"" . esc_attr( $rel ) . "\"" : "")."><span class=\"left\">".do_shortcode($content)."</span></a>";
156	if ($position == 'center') {
157	$out = '<div class="button-center">'.$out.'</div>';
158	}
	@@ -166,7 +166,7 @@ function mts_button_yellow( $atts, $content = null ) {
166	'position' => 'left',
167	'rel' => '',
168	), $atts));
169	- $out = "<a href=\"" . esc_url( $url ) . "\" target=\"" . esc_attr( $target ) . "\" class=\"buttons btn_yellow " .~~santize_html_class~~( $position ). "\"" .($rel? " rel=\"" . esc_attr( $rel ) . "\"" : "")."><span class=\"left\">".do_shortcode($content)."</span></a>";
170	if ($position == 'center') {
171	$out = '<div class="button-center">'.$out.'</div>';
172	}
	@@ -311,7 +311,7 @@ function mts_youtube_video( $atts, $content = null ) {
311	'height' => '340',
312	'position' => 'left'
313	), $atts));
314	- $out = "<div class=\"youtube-video " .~~santize_html_class~~( $position ) . "\"><iframe width=\"" .absint( $width ) . "\" height=\"" .absint( $height ) ."\" src=\"//www.youtube.com/embed/" . esc_attr( $id ) . "?rel=0\" frameborder=\"0\" allowfullscreen></iframe></div>";
315	return $out;
316	}
317
	@@ -322,7 +322,7 @@ function mts_vimeo_video( $atts, $content = null ) {
322	'height' => '340',
323	'position' => 'left'
324	), $atts));
325	- $out = "<div class=\"vimeo-video " . ~~santize_html_class~~( $position ) . "\"><iframe width=\"" .absint( $width ) . "\" height=\"" .absint( $height ) ."\" src=\"//player.vimeo.com/video/" . esc_attr( $id ) . "?title=0&byline=0&portrait=0\" frameborder=\"0\" allowfullscreen></iframe></div>";
326	return $out;
327	}
328
	@@ -338,9 +338,9 @@ function mts_googleMaps($atts, $content = null) {
338	'position' => 'left'
339	), $atts));
340	if (!empty($src)) {
341	- $out = "<div class=\"googlemaps " .~~santize_html_class~~( $position ) . "\"><iframe width=\"".absint( $width )."\" height=\"".absint( $height )."\" frameborder=\"0\" scrolling=\"no\" marginheight=\"0\" marginwidth=\"0\" src=\"".esc_url( $src )."&output=embed\"></iframe></div>";
342	} else {
343	- $out = "<div class=\"googlemaps " .~~santize_html_class~~( $position ) . "\"><iframe width=\"".absint( $width )."\" height=\"".absint( $height )."\" frameborder=\"0\" scrolling=\"no\" marginheight=\"0\" marginwidth=\"0\" src=\"//maps.google.com/maps?q=".urlencode( $address )."&output=embed\"></iframe></div>";
344	}
345	return $out;
346	}


4	Plugin URI: http://mythemeshop.com/
5	Description: With the vast array of shortcodes, you can quickly and easily build content for your posts and pages and turbocharge your blogging experience.
6	Author: MyThemeShop
7	+ Version: 1.4.5
8	Author URI: http://mythemeshop.com/
9	*/
10

96	'position' => 'left',
97	'rel' => '',
98	), $atts));
99	+ $out = "<a href=\"" . esc_url( $url ) . "\" target=\"" . esc_attr( $target ) . "\" class=\"buttons btn_brown " .sanitize_html_class( $position ). "\"" .($rel? " rel=\"" . esc_attr( $rel ) . "\"" : "")."><span class=\"left\">".do_shortcode($content)."</span></a>";
100	if ($position == 'center') {
101	$out = '<div class="button-center">'.$out.'</div>';
102	}

110	'position' => 'left',
111	'rel' => '',
112	), $atts));
113	+ $out = "<a href=\"" . esc_url( $url ) . "\" target=\"" . esc_attr( $target ) . "\" class=\"buttons btn_blue " .sanitize_html_class( $position ). "\"" .($rel? " rel=\"" . esc_attr( $rel ) . "\"" : "")."><span class=\"left\">".do_shortcode($content)."</span></a>";
114	if ($position == 'center') {
115	$out = '<div class="button-center">'.$out.'</div>';
116	}

124	'position' => 'left',
125	'rel' => '',
126	), $atts));
127	+ $out = "<a href=\"" . esc_url( $url ) . "\" target=\"" . esc_attr( $target ) . "\" class=\"buttons btn_green " .sanitize_html_class( $position ). "\"" .($rel? " rel=\"" . esc_attr( $rel ) . "\"" : "")."><span class=\"left\">".do_shortcode($content)."</span></a>";
128	if ($position == 'center') {
129	$out = '<div class="button-center">'.$out.'</div>';
130	}

138	'position' => 'left',
139	'rel' => '',
140	), $atts));
141	+ $out = "<a href=\"" . esc_url( $url ) . "\" target=\"" . esc_attr( $target ) . "\" class=\"buttons btn_red " .sanitize_html_class( $position ). "\"" .($rel? " rel=\"" . esc_attr( $rel ) . "\"" : "")."><span class=\"left\">".do_shortcode($content)."</span></a>";
142	if ($position == 'center') {
143	$out = '<div class="button-center">'.$out.'</div>';
144	}

152	'position' => 'left',
153	'rel' => '',
154	), $atts));
155	+ $out = "<a href=\"" . esc_url( $url ) . "\" target=\"" . esc_attr( $target ) . "\" class=\"buttons btn_white " .sanitize_html_class( $position ). "\"" .($rel? " rel=\"" . esc_attr( $rel ) . "\"" : "")."><span class=\"left\">".do_shortcode($content)."</span></a>";
156	if ($position == 'center') {
157	$out = '<div class="button-center">'.$out.'</div>';
158	}

166	'position' => 'left',
167	'rel' => '',
168	), $atts));
169	+ $out = "<a href=\"" . esc_url( $url ) . "\" target=\"" . esc_attr( $target ) . "\" class=\"buttons btn_yellow " .sanitize_html_class( $position ). "\"" .($rel? " rel=\"" . esc_attr( $rel ) . "\"" : "")."><span class=\"left\">".do_shortcode($content)."</span></a>";
170	if ($position == 'center') {
171	$out = '<div class="button-center">'.$out.'</div>';
172	}

311	'height' => '340',
312	'position' => 'left'
313	), $atts));
314	+ $out = "<div class=\"youtube-video " .sanitize_html_class( $position ) . "\"><iframe width=\"" .absint( $width ) . "\" height=\"" .absint( $height ) ."\" src=\"//www.youtube.com/embed/" . esc_attr( $id ) . "?rel=0\" frameborder=\"0\" allowfullscreen></iframe></div>";
315	return $out;
316	}
317

322	'height' => '340',
323	'position' => 'left'
324	), $atts));
325	+ $out = "<div class=\"vimeo-video " . sanitize_html_class( $position ) . "\"><iframe width=\"" .absint( $width ) . "\" height=\"" .absint( $height ) ."\" src=\"//player.vimeo.com/video/" . esc_attr( $id ) . "?title=0&byline=0&portrait=0\" frameborder=\"0\" allowfullscreen></iframe></div>";
326	return $out;
327	}
328

338	'position' => 'left'
339	), $atts));
340	if (!empty($src)) {
341	+ $out = "<div class=\"googlemaps " .sanitize_html_class( $position ) . "\"><iframe width=\"".absint( $width )."\" height=\"".absint( $height )."\" frameborder=\"0\" scrolling=\"no\" marginheight=\"0\" marginwidth=\"0\" src=\"".esc_url( $src )."&output=embed\"></iframe></div>";
342	} else {
343	+ $out = "<div class=\"googlemaps " .sanitize_html_class( $position ) . "\"><iframe width=\"".absint( $width )."\" height=\"".absint( $height )."\" frameborder=\"0\" scrolling=\"no\" marginheight=\"0\" marginwidth=\"0\" src=\"//maps.google.com/maps?q=".urlencode( $address )."&output=embed\"></iframe></div>";
344	}
345	return $out;
346	}

WP Shortcode by MyThemeShop - Version 1.4.5

Version Description

Release Info

Code changes from version 1.4.4 to 1.4.5