Changeset 1104099

Timestamp:

03/03/2015 12:45:25 PM (10 years ago)

Author:

codepeople

Message:

Uploaded version 1.1.7

Location:

cp-reservation-calendar

Files:

• tags/1.1.7 (added)
• tags/1.1.7/README.txt (added)
• tags/1.1.7/TDE_RCalendar (added)
• tags/1.1.7/TDE_RCalendar/TDERCalendar.js (added)
• tags/1.1.7/TDE_RCalendar/admin.js (added)
• tags/1.1.7/TDE_RCalendar/all-css-admin.css (added)
• tags/1.1.7/TDE_RCalendar/all-css.css (added)
• tags/1.1.7/TDE_RCalendar/all-scripts.js (added)
• tags/1.1.7/TDE_RCalendar/calendar.js (added)
• tags/1.1.7/TDE_RCalendar/callt.gif (added)
• tags/1.1.7/TDE_RCalendar/calrt.gif (added)
• tags/1.1.7/TDE_RCalendar/close.gif (added)
• tags/1.1.7/TDE_RCalendar/delete.gif (added)
• tags/1.1.7/TDE_RCalendar/dom.js (added)
• tags/1.1.7/TDE_RCalendar/event.js (added)
• tags/1.1.7/TDE_RCalendar/events.gif (added)
• tags/1.1.7/TDE_RCalendar/events.php (added)
• tags/1.1.7/TDE_RCalendar/left.gif (added)
• tags/1.1.7/TDE_RCalendar/left_pending.gif (added)
• tags/1.1.7/TDE_RCalendar/logo.gif (added)
• tags/1.1.7/TDE_RCalendar/middle.gif (added)
• tags/1.1.7/TDE_RCalendar/middle_left_pending.gif (added)
• tags/1.1.7/TDE_RCalendar/middle_right_pending.gif (added)
• tags/1.1.7/TDE_RCalendar/public.js (added)
• tags/1.1.7/TDE_RCalendar/right.gif (added)
• tags/1.1.7/TDE_RCalendar/right_pending.gif (added)
• tags/1.1.7/TDE_RCalendar/yahoo.js (added)
• tags/1.1.7/captcha (added)
• tags/1.1.7/captcha/captcha.php (added)
• tags/1.1.7/captcha/font-1.ttf (added)
• tags/1.1.7/captcha/font-2.ttf (added)
• tags/1.1.7/captcha/font-3.ttf (added)
• tags/1.1.7/captcha/font-4.ttf (added)
• tags/1.1.7/dex_reservations.php (added)
• tags/1.1.7/dex_reservations_admin_int.inc.php (added)
• tags/1.1.7/dex_reservations_admin_int_calendar_list.inc.php (added)
• tags/1.1.7/dex_reservations_script.js (added)
• tags/1.1.7/dex_scheduler.inc.php (added)
• tags/1.1.7/images (added)
• tags/1.1.7/images/dex_apps.gif (added)
• tags/1.1.7/languages (added)
• tags/1.1.7/languages/default-es.mo (added)
• tags/1.1.7/languages/default-es.po (added)
• tags/1.1.7/screenshot-1.png (added)
• tags/1.1.7/screenshot-2.png (added)
• tags/1.1.7/screenshot-3.png (added)
• trunk/README.txt (modified) (2 diffs)
• trunk/dex_reservations.php (modified) (6 diffs)

cp-reservation-calendar/trunk/README.txt

@@ -142 +142 @@
 * Fixed issues related to the get_site_url when WP site not in the default folder
 
+= 1.1.7 = 
+* Security updates (Thanks to Christian Mondragon Uriel Zarate)
+* Update to the function that generates the IPN url.
+* Fixed bug in email processing.
+
 Important note: If you are using the Professional version don't update via the WP dashboard but using your personal update link. Contact us if you need further information: http://wordpress.dwbooster.com/support
 
@@ -148 +153 @@
 Very Important note: If you are using the Professional version don't update via the WP dashboard but using your personal update link. Contact us if you need further information: http://wordpress.dwbooster.com/support
 
-= 1.1.6 =
-* Compatible with the latest WP versions
-* Better interface and access to the plugin options
-* Minor bug fixes
-* Fixed issues related to the get_site_url when WP site not in the default folder
+= 1.1.7 = 
+* Security updates (Thanks to Christian Mondragon Uriel Zarate)
+* Update to the function that generates the IPN url.
+* Fixed bug in email processing.
 
 

cp-reservation-calendar/trunk/dex_reservations.php

@@ -4 +4 @@
 Plugin URI: http://wordpress.dwbooster.com/calendars/cp-reservation-calendar
 Description: This plugin allows you to easily insert reservation forms into your WP website.
-Version: 1.1.6
+Version: 1.1.7
 Author: CodePeople.net
 Author URI: http://codepeople.net
@@ -408 +408 @@
 
     if (!defined('CP_CALENDAR_ID'))
-        define ('CP_CALENDAR_ID',$_POST["dex_item"]);
+        define ('CP_CALENDAR_ID',intval($_POST["dex_item"]));
 
     session_start();
@@ -421 +421 @@
     $_SESSION['rand_code'] = '';
 
-    $selectedCalendar = $_POST["dex_item"];
+    $selectedCalendar = intval($_POST["dex_item"]);
 
     $_POST["dateAndTime_s"] =  $_POST["selYear_start".$selectedCalendar]."-".$_POST["selMonth_start".$selectedCalendar]."-".$_POST["selDay_start".$selectedCalendar];
@@ -619 +619 @@
     global $wpdb;
     if (!defined('CP_CALENDAR_ID'))
-        define ('CP_CALENDAR_ID',$_POST["dex_item"]);
+        define ('CP_CALENDAR_ID',intval($_POST["dex_item"]));
 
     $data = array(
@@ -671 +671 @@
         return;
     @ob_clean();
+    $_GET["id"] = intval($_GET["id"]);
     header("Cache-Control: no-store, no-cache, must-revalidate");
     header("Pragma: no-cache");
@@ -776 +777 @@
     else
     {
-       $myrows = $wpdb->get_results( "SELECT * FROM ".DEX_RESERVATIONS_CONFIG_TABLE_NAME." WHERE id=".CP_CALENDAR_ID );
+       $myrows = $wpdb->get_results( "SELECT * FROM ".DEX_RESERVATIONS_CONFIG_TABLE_NAME." WHERE id=".intval(CP_CALENDAR_ID) );
        $value = $myrows[0]->$field;
        $dex_option_buffered_item = $myrows[0];