Plugin Directory


Ignore:
Timestamp:
07/17/2021 06:59:27 PM (4 years ago)
Author:
raster02
Message:

tagging version 2.4.2

Location:
paid-member-subscriptions
Files:
18 edited
1 copied

Legend:

Unmodified
Added
Removed
  • paid-member-subscriptions/tags/2.4.2/includes/admin/class-admin-members-list-table.php

    r2547304 r2566399  
    277277                $args['orderby'] = 'user_login';
    278278
    279             $args['order']   = sanitize_text_field( $_REQUEST['order'] );
     279            $order = strtolower( sanitize_text_field( $_REQUEST['order'] ) );
     280
     281            if( $order == 'asc' )
     282                $args['order'] = 'ASC';
     283            elseif( $order == 'desc' )
     284                $args['order'] = 'DESC';
    280285
    281286        }
  • paid-member-subscriptions/tags/2.4.2/includes/admin/class-admin-members.php

    r2565019 r2566399  
    164164            if( apply_filters( 'pms_update_billing_amount_from_backend_on_sub_change', true ) ) {
    165165                if ($member_subscription->subscription_plan_id != $_POST['subscription_plan_id']) {
    166                     $new_subscription_plan = pms_get_subscription_plan($_POST['subscription_plan_id']);
     166                    $new_subscription_plan = pms_get_subscription_plan( (int)$_POST['subscription_plan_id'] );
    167167                    if (isset($new_subscription_plan->price)) {
    168168                        $_POST['billing_amount'] = $new_subscription_plan->price;
  • paid-member-subscriptions/tags/2.4.2/includes/admin/class-admin-payments-list-table.php

    r2419267 r2566399  
    176176        if( ! empty( $_REQUEST['orderby'] ) && ! empty( $_REQUEST['order'] ) ) {
    177177
    178             $args['orderby'] = sanitize_text_field( $_REQUEST['orderby'] );
    179             $args['order']   = sanitize_text_field( $_REQUEST['order'] );
     178            $orderby               = sanitize_text_field( $_REQUEST['orderby'] );
     179            $orderby_possibilities = array( 'id', 'status' );
     180
     181            if( in_array( $orderby, $orderby_possibilities ) )
     182                $args['orderby'] = $orderby;
     183
     184            $order = strtolower( sanitize_text_field( $_REQUEST['order'] ) );
     185
     186            if( $order == 'asc' )
     187                $args['order'] = 'ASC';
     188            elseif( $order == 'desc' )
     189                $args['order'] = 'DESC';
    180190
    181191        }
  • paid-member-subscriptions/tags/2.4.2/includes/admin/meta-boxes/class-meta-box-single-content-restriction.php

    r2430152 r2566399  
    8585            update_post_meta( $post_id, 'pms-content-restrict-messages-enabled', 'yes' );
    8686
    87         update_post_meta( $post_id, 'pms-content-restrict-message-logged_out',  ( ! empty( $_POST['pms-content-restrict-message-logged_out'] )  ? $_POST['pms-content-restrict-message-logged_out'] : '' ) );
    88         update_post_meta( $post_id, 'pms-content-restrict-message-non_members', ( ! empty( $_POST['pms-content-restrict-message-non_members'] ) ? $_POST['pms-content-restrict-message-non_members'] : '' ) );
     87        update_post_meta( $post_id, 'pms-content-restrict-message-logged_out',  ( ! empty( $_POST['pms-content-restrict-message-logged_out'] )  ? wp_kses_post( $_POST['pms-content-restrict-message-logged_out'] ) : '' ) );
     88        update_post_meta( $post_id, 'pms-content-restrict-message-non_members', ( ! empty( $_POST['pms-content-restrict-message-non_members'] ) ? wp_kses_post( $_POST['pms-content-restrict-message-non_members'] ) : '' ) );
    8989
    9090    }
  • paid-member-subscriptions/tags/2.4.2/includes/admin/meta-boxes/class-meta-box-subscription-plan-details.php

    r2565019 r2566399  
    7777            }
    7878
    79             if( isset( $_POST['pms_subscription_plan_duration_unit'] ) )
    80                 update_post_meta( $post_id, 'pms_subscription_plan_duration_unit', sanitize_text_field( $_POST['pms_subscription_plan_duration_unit'] ) );
     79            if( isset( $_POST['pms_subscription_plan_duration_unit'] ) ){
     80
     81                $duration_units = array( 'day', 'week', 'month', 'year' );
     82
     83                if( in_array( $_POST['pms_subscription_plan_duration_unit'], $duration_units ) )
     84                    $duration_unit = sanitize_text_field( $_POST['pms_subscription_plan_duration_unit'] );
     85                else
     86                    $duration_unit = 'day';
     87
     88                update_post_meta( $post_id, 'pms_subscription_plan_duration_unit', $duration_unit );
     89
     90            }
    8191
    8292
     
    119129            }
    120130
    121             if( isset( $_POST['pms_subscription_plan_trial_duration_unit'] ) )
    122                 update_post_meta( $post_id, 'pms_subscription_plan_trial_duration_unit', $_POST['pms_subscription_plan_trial_duration_unit'] );
     131            if( isset( $_POST['pms_subscription_plan_trial_duration_unit'] ) ){
     132               
     133                $trial_duration_units = array( 'day', 'week', 'month', 'year' );
     134
     135                if( in_array( $_POST['pms_subscription_plan_trial_duration_unit'], $trial_duration_units ) )
     136                    $trial_duration_unit = sanitize_text_field( $_POST['pms_subscription_plan_trial_duration_unit'] );
     137                else
     138                    $trial_duration_unit = 'day';
     139
     140                update_post_meta( $post_id, 'pms_subscription_plan_trial_duration_unit', $trial_duration_unit );
     141
     142            }
    123143
    124144
  • paid-member-subscriptions/tags/2.4.2/includes/class-billing-details.php

    r2288267 r2566399  
    5555                    <?php endforeach; ?>
    5656
    57                     <input type="hidden" name="pms_member_id" value="<?php echo isset( $_GET['member_id'] ) ? $_GET['member_id'] : ''; ?>" />
     57                    <input type="hidden" name="pms_member_id" value="<?php echo esc_attr( isset( $_GET['member_id'] ) ? $_GET['member_id'] : '' ); ?>" />
    5858
    5959                    <a href="" id="save" class="button button-secondary"><?php _e( 'Save', 'paid-member-subscriptions' ); ?></a>
  • paid-member-subscriptions/tags/2.4.2/index.php

    r2565019 r2566399  
    44 * Plugin URI: http://www.cozmoslabs.com/
    55 * Description: Accept payments, create subscription plans and restrict content on your membership website.
    6  * Version: 2.4.1
     6 * Version: 2.4.2
    77 * Author: Cozmoslabs
    88 * Author URI: http://www.cozmoslabs.com/
     
    3737    public function __construct() {
    3838
    39         define( 'PMS_VERSION', '2.4.1' );
     39        define( 'PMS_VERSION', '2.4.2' );
    4040        define( 'PMS_PLUGIN_DIR_PATH', plugin_dir_path( __FILE__ ) );
    4141        define( 'PMS_PLUGIN_DIR_URL', plugin_dir_url( __FILE__ ) );
  • paid-member-subscriptions/tags/2.4.2/readme.txt

    r2565019 r2566399  
    55Requires at least: 3.1
    66Tested up to: 5.7
    7 Stable tag: 2.4.1
     7Stable tag: 2.4.2
    88License: GPLv2 or later
    99License URI: http://www.gnu.org/licenses/gpl-2.0.html
     
    194194
    195195== Changelog ==
     196= 2.4.2 =
     197* Fix: Security issue on Members and Payments pages
     198
    196199= 2.4.1 =
    197200* Fix: Compatibility issue between reCaptcha and new Stripe add-on version
  • paid-member-subscriptions/tags/2.4.2/translations/paid-member-subscriptions.pot

    r2565019 r2566399  
    115115msgstr ""
    116116
    117 #: ../pms-add-on-discount-codes/class-admin-discount-codes.php:125, includes/functions-user.php:247, ../pms-add-on-content-dripping/includes/class-admin-content-dripping.php:205, ../pms-add-on-discount-codes/views/view-meta-box-discount-codes.php:133, ../pms-add-on-email-reminders/includes/class-admin-email-reminders.php:109, includes/admin/class-admin-member-payments-list-table.php:53, includes/admin/class-admin-member-subscription-list-table.php:71, includes/admin/class-admin-members-list-table.php:503, includes/admin/class-admin-payments-list-table.php:106, includes/admin/class-admin-subscription-plans.php:323, ../pms-add-on-content-dripping/includes/views/view-meta-box-content-dripping-details.php:28, ../pms-add-on-email-reminders/includes/views/view-meta-box-email-reminders.php:127, ../pms-add-on-group-memberships/includes/admin/class-admin-group-members-list-table.php:65, ../pms-add-on-group-memberships/includes/views/view-members-list.php:40, ../pms-add-on-group-memberships/includes/views/view-shortcode-account-subscriptions-row.php:19, includes/admin/views/view-page-members-add-new-edit-subscription.php:273, includes/admin/views/view-page-payments-add-new-edit.php:210, includes/views/shortcodes/view-shortcode-account-subscription-details.php:36, includes/views/shortcodes/view-shortcode-account.php:14, includes/views/shortcodes/view-shortcode-payment-history.php:40, includes/admin/meta-boxes/views/view-meta-box-subscription-details.php:147, extend/woocommerce/includes/admin/meta-boxes/class-meta-box-product-membership-discounts.php:82, extend/woocommerce/includes/admin/meta-boxes/class-meta-box-subscription-plan-product-discounts.php:64
     117#: ../pms-add-on-discount-codes/class-admin-discount-codes.php:125, includes/functions-user.php:247, ../pms-add-on-content-dripping/includes/class-admin-content-dripping.php:205, ../pms-add-on-discount-codes/views/view-meta-box-discount-codes.php:133, ../pms-add-on-email-reminders/includes/class-admin-email-reminders.php:109, includes/admin/class-admin-member-payments-list-table.php:53, includes/admin/class-admin-member-subscription-list-table.php:71, includes/admin/class-admin-members-list-table.php:508, includes/admin/class-admin-payments-list-table.php:106, includes/admin/class-admin-subscription-plans.php:323, ../pms-add-on-content-dripping/includes/views/view-meta-box-content-dripping-details.php:28, ../pms-add-on-email-reminders/includes/views/view-meta-box-email-reminders.php:127, ../pms-add-on-group-memberships/includes/admin/class-admin-group-members-list-table.php:65, ../pms-add-on-group-memberships/includes/views/view-members-list.php:40, ../pms-add-on-group-memberships/includes/views/view-shortcode-account-subscriptions-row.php:19, includes/admin/views/view-page-members-add-new-edit-subscription.php:273, includes/admin/views/view-page-payments-add-new-edit.php:210, includes/views/shortcodes/view-shortcode-account-subscription-details.php:36, includes/views/shortcodes/view-shortcode-account.php:14, includes/views/shortcodes/view-shortcode-payment-history.php:40, includes/admin/meta-boxes/views/view-meta-box-subscription-details.php:147, extend/woocommerce/includes/admin/meta-boxes/class-meta-box-product-membership-discounts.php:82, extend/woocommerce/includes/admin/meta-boxes/class-meta-box-subscription-plan-product-discounts.php:64
    118118msgid "Status"
    119119msgstr ""
     
    131131msgstr ""
    132132
    133 #: ../pms-add-on-discount-codes/class-admin-discount-codes.php:189, ../pms-add-on-content-dripping/includes/class-admin-content-dripping.php:174, ../pms-add-on-email-reminders/includes/class-admin-email-reminders.php:267, ../pms-add-on-email-reminders/includes/class-admin-email-reminders.php:302, includes/admin/class-admin-payments-list-table.php:327, includes/admin/class-admin-subscription-plans.php:296, ../pms-add-on-tax/includes/views/view-settings-tab-tax.php:129, includes/views/shortcodes/view-shortcode-edit-profile-form.php:80
     133#: ../pms-add-on-discount-codes/class-admin-discount-codes.php:189, ../pms-add-on-content-dripping/includes/class-admin-content-dripping.php:174, ../pms-add-on-email-reminders/includes/class-admin-email-reminders.php:267, ../pms-add-on-email-reminders/includes/class-admin-email-reminders.php:302, includes/admin/class-admin-payments-list-table.php:337, includes/admin/class-admin-subscription-plans.php:296, ../pms-add-on-tax/includes/views/view-settings-tab-tax.php:129, includes/views/shortcodes/view-shortcode-edit-profile-form.php:80
    134134msgid "Delete"
    135135msgstr ""
     
    12021202msgstr ""
    12031203
    1204 #: includes/functions-content-filtering.php:467, includes/admin/class-admin-member-subscription-list-table.php:273, includes/admin/class-admin-members-list-table.php:502, ../pms-add-on-group-memberships/includes/views/view-shortcode-account-subscriptions-row.php:63, includes/views/shortcodes/view-shortcode-account-subscription-details.php:53, includes/views/shortcodes/view-shortcode-account.php:43
     1204#: includes/functions-content-filtering.php:467, includes/admin/class-admin-member-subscription-list-table.php:273, includes/admin/class-admin-members-list-table.php:507, ../pms-add-on-group-memberships/includes/views/view-shortcode-account-subscriptions-row.php:63, includes/views/shortcodes/view-shortcode-account-subscription-details.php:53, includes/views/shortcodes/view-shortcode-account.php:43
    12051205msgid "Unlimited"
    12061206msgstr ""
     
    40264026msgstr ""
    40274027
    4028 #: ../pms-add-on-tax/includes/functions-admin.php:345, includes/admin/class-admin-payments-list-table.php:406
     4028#: ../pms-add-on-tax/includes/functions-admin.php:345, includes/admin/class-admin-payments-list-table.php:416
    40294029msgid "Discount code"
    40304030msgstr ""
     
    40584058msgstr ""
    40594059
    4060 #: ../pms-add-on-tax/includes/functions-admin.php:491, includes/admin/class-admin-member-subscription-list-table.php:309, includes/admin/class-admin-member-subscription-list-table.php:317, includes/admin/class-admin-members-list-table.php:506, includes/admin/class-admin-members-list-table.php:509, extend/elementor/widgets/class-widget-account.php:63, includes/admin/views/view-page-settings-general.php:25, extend/beaver-builder/modules/pms-account/pms-account.php:38, extend/siteorigin/widgets/pms-account/pms-account.php:26
     4060#: ../pms-add-on-tax/includes/functions-admin.php:491, includes/admin/class-admin-member-subscription-list-table.php:309, includes/admin/class-admin-member-subscription-list-table.php:317, includes/admin/class-admin-members-list-table.php:511, includes/admin/class-admin-members-list-table.php:514, extend/elementor/widgets/class-widget-account.php:63, includes/admin/views/view-page-settings-general.php:25, extend/beaver-builder/modules/pms-account/pms-account.php:38, extend/siteorigin/widgets/pms-account/pms-account.php:26
    40614061msgid "Yes"
    40624062msgstr ""
     
    43624362msgstr ""
    43634363
    4364 #: includes/admin/class-admin-member-payments-list-table.php:185, includes/admin/class-admin-payments-list-table.php:444, includes/views/shortcodes/view-shortcode-payment-history.php:66
     4364#: includes/admin/class-admin-member-payments-list-table.php:185, includes/admin/class-admin-payments-list-table.php:454, includes/views/shortcodes/view-shortcode-payment-history.php:66
    43654365msgid "No payments found"
    43664366msgstr ""
    43674367
    4368 #: includes/admin/class-admin-member-subscription-list-table.php:70, includes/admin/class-admin-members-list-table.php:502
     4368#: includes/admin/class-admin-member-subscription-list-table.php:70, includes/admin/class-admin-members-list-table.php:507
    43694369msgid "Expiration date"
    43704370msgstr ""
    43714371
    4372 #: includes/admin/class-admin-member-subscription-list-table.php:72, includes/admin/class-admin-members-list-table.php:506
     4372#: includes/admin/class-admin-member-subscription-list-table.php:72, includes/admin/class-admin-members-list-table.php:511
    43734373msgid "Auto-renewing"
    43744374msgstr ""
    43754375
    4376 #: includes/admin/class-admin-member-subscription-list-table.php:73, includes/admin/class-admin-members-list-table.php:509
     4376#: includes/admin/class-admin-member-subscription-list-table.php:73, includes/admin/class-admin-members-list-table.php:514
    43774377msgid "Active Trial"
    43784378msgstr ""
     
    43824382msgstr ""
    43834383
    4384 #: includes/admin/class-admin-member-subscription-list-table.php:309, includes/admin/class-admin-member-subscription-list-table.php:317, includes/admin/class-admin-members-list-table.php:506, extend/elementor/widgets/class-widget-account.php:64, includes/admin/views/view-page-settings-general.php:24, extend/beaver-builder/modules/pms-account/pms-account.php:39, extend/siteorigin/widgets/pms-account/pms-account.php:27
     4384#: includes/admin/class-admin-member-subscription-list-table.php:309, includes/admin/class-admin-member-subscription-list-table.php:317, includes/admin/class-admin-members-list-table.php:511, extend/elementor/widgets/class-widget-account.php:64, includes/admin/views/view-page-settings-general.php:24, extend/beaver-builder/modules/pms-account/pms-account.php:39, extend/siteorigin/widgets/pms-account/pms-account.php:27
    43854385msgid "No"
    43864386msgstr ""
     
    44224422msgstr ""
    44234423
    4424 #: includes/admin/class-admin-members-add-new-bulk-list-table.php:376, includes/admin/class-admin-members-list-table.php:494
     4424#: includes/admin/class-admin-members-add-new-bulk-list-table.php:376, includes/admin/class-admin-members-list-table.php:499
    44254425msgid "Subscription Plan Not Found - ID: %s"
    44264426msgstr ""
     
    44424442msgstr ""
    44434443
    4444 #: includes/admin/class-admin-members-list-table.php:452, ../pms-add-on-group-memberships/includes/admin/class-admin-group-members-list-table.php:233, includes/admin/views/view-page-members-edit.php:14
     4444#: includes/admin/class-admin-members-list-table.php:457, ../pms-add-on-group-memberships/includes/admin/class-admin-group-members-list-table.php:233, includes/admin/views/view-page-members-edit.php:14
    44454445msgid "Edit Member"
    44464446msgstr ""
    44474447
    4448 #: includes/admin/class-admin-members-list-table.php:501
     4448#: includes/admin/class-admin-members-list-table.php:506
    44494449msgid "Start date"
    44504450msgstr ""
    44514451
    4452 #: includes/admin/class-admin-members-list-table.php:528
     4452#: includes/admin/class-admin-members-list-table.php:533
    44534453msgid "View Abandoned Subscriptions"
    44544454msgstr ""
    44554455
    4456 #: includes/admin/class-admin-members-list-table.php:529
     4456#: includes/admin/class-admin-members-list-table.php:534
    44574457msgid "%s %s abandoned subscription"
    44584458msgid_plural "%s %s abandoned subscriptions"
     
    44604460msgstr[1] ""
    44614461
    4462 #: includes/admin/class-admin-members-list-table.php:544
     4462#: includes/admin/class-admin-members-list-table.php:549
    44634463msgid "No members found"
    44644464msgstr ""
     
    46504650msgstr ""
    46514651
    4652 #: includes/admin/class-admin-payments-list-table.php:232
     4652#: includes/admin/class-admin-payments-list-table.php:242
    46534653msgid "User no longer exists"
    46544654msgstr ""
    46554655
    4656 #: includes/admin/class-admin-payments-list-table.php:324
     4656#: includes/admin/class-admin-payments-list-table.php:334
    46574657msgid "Edit Payment"
    46584658msgstr ""
    46594659
    4660 #: includes/admin/class-admin-payments-list-table.php:327
     4660#: includes/admin/class-admin-payments-list-table.php:337
    46614661msgid "Are you sure you want to delete this Payment?"
    46624662msgstr ""
    46634663
    4664 #: includes/admin/class-admin-payments-list-table.php:381
     4664#: includes/admin/class-admin-payments-list-table.php:391
    46654665msgid "View Logs"
    46664666msgstr ""
     
    57635763msgstr ""
    57645764
    5765 #: includes/admin/meta-boxes/class-meta-box-subscription-plan-details.php:208
     5765#: includes/admin/meta-boxes/class-meta-box-subscription-plan-details.php:228
    57665766msgid "Subscription Plan Details"
    57675767msgstr ""
  • paid-member-subscriptions/trunk/includes/admin/class-admin-members-list-table.php

    r2547304 r2566399  
    277277                $args['orderby'] = 'user_login';
    278278
    279             $args['order']   = sanitize_text_field( $_REQUEST['order'] );
     279            $order = strtolower( sanitize_text_field( $_REQUEST['order'] ) );
     280
     281            if( $order == 'asc' )
     282                $args['order'] = 'ASC';
     283            elseif( $order == 'desc' )
     284                $args['order'] = 'DESC';
    280285
    281286        }
  • paid-member-subscriptions/trunk/includes/admin/class-admin-members.php

    r2565019 r2566399  
    164164            if( apply_filters( 'pms_update_billing_amount_from_backend_on_sub_change', true ) ) {
    165165                if ($member_subscription->subscription_plan_id != $_POST['subscription_plan_id']) {
    166                     $new_subscription_plan = pms_get_subscription_plan($_POST['subscription_plan_id']);
     166                    $new_subscription_plan = pms_get_subscription_plan( (int)$_POST['subscription_plan_id'] );
    167167                    if (isset($new_subscription_plan->price)) {
    168168                        $_POST['billing_amount'] = $new_subscription_plan->price;
  • paid-member-subscriptions/trunk/includes/admin/class-admin-payments-list-table.php

    r2419267 r2566399  
    176176        if( ! empty( $_REQUEST['orderby'] ) && ! empty( $_REQUEST['order'] ) ) {
    177177
    178             $args['orderby'] = sanitize_text_field( $_REQUEST['orderby'] );
    179             $args['order']   = sanitize_text_field( $_REQUEST['order'] );
     178            $orderby               = sanitize_text_field( $_REQUEST['orderby'] );
     179            $orderby_possibilities = array( 'id', 'status' );
     180
     181            if( in_array( $orderby, $orderby_possibilities ) )
     182                $args['orderby'] = $orderby;
     183
     184            $order = strtolower( sanitize_text_field( $_REQUEST['order'] ) );
     185
     186            if( $order == 'asc' )
     187                $args['order'] = 'ASC';
     188            elseif( $order == 'desc' )
     189                $args['order'] = 'DESC';
    180190
    181191        }
  • paid-member-subscriptions/trunk/includes/admin/meta-boxes/class-meta-box-single-content-restriction.php

    r2430152 r2566399  
    8585            update_post_meta( $post_id, 'pms-content-restrict-messages-enabled', 'yes' );
    8686
    87         update_post_meta( $post_id, 'pms-content-restrict-message-logged_out',  ( ! empty( $_POST['pms-content-restrict-message-logged_out'] )  ? $_POST['pms-content-restrict-message-logged_out'] : '' ) );
    88         update_post_meta( $post_id, 'pms-content-restrict-message-non_members', ( ! empty( $_POST['pms-content-restrict-message-non_members'] ) ? $_POST['pms-content-restrict-message-non_members'] : '' ) );
     87        update_post_meta( $post_id, 'pms-content-restrict-message-logged_out',  ( ! empty( $_POST['pms-content-restrict-message-logged_out'] )  ? wp_kses_post( $_POST['pms-content-restrict-message-logged_out'] ) : '' ) );
     88        update_post_meta( $post_id, 'pms-content-restrict-message-non_members', ( ! empty( $_POST['pms-content-restrict-message-non_members'] ) ? wp_kses_post( $_POST['pms-content-restrict-message-non_members'] ) : '' ) );
    8989
    9090    }
  • paid-member-subscriptions/trunk/includes/admin/meta-boxes/class-meta-box-subscription-plan-details.php

    r2565019 r2566399  
    7777            }
    7878
    79             if( isset( $_POST['pms_subscription_plan_duration_unit'] ) )
    80                 update_post_meta( $post_id, 'pms_subscription_plan_duration_unit', sanitize_text_field( $_POST['pms_subscription_plan_duration_unit'] ) );
     79            if( isset( $_POST['pms_subscription_plan_duration_unit'] ) ){
     80
     81                $duration_units = array( 'day', 'week', 'month', 'year' );
     82
     83                if( in_array( $_POST['pms_subscription_plan_duration_unit'], $duration_units ) )
     84                    $duration_unit = sanitize_text_field( $_POST['pms_subscription_plan_duration_unit'] );
     85                else
     86                    $duration_unit = 'day';
     87
     88                update_post_meta( $post_id, 'pms_subscription_plan_duration_unit', $duration_unit );
     89
     90            }
    8191
    8292
     
    119129            }
    120130
    121             if( isset( $_POST['pms_subscription_plan_trial_duration_unit'] ) )
    122                 update_post_meta( $post_id, 'pms_subscription_plan_trial_duration_unit', $_POST['pms_subscription_plan_trial_duration_unit'] );
     131            if( isset( $_POST['pms_subscription_plan_trial_duration_unit'] ) ){
     132               
     133                $trial_duration_units = array( 'day', 'week', 'month', 'year' );
     134
     135                if( in_array( $_POST['pms_subscription_plan_trial_duration_unit'], $trial_duration_units ) )
     136                    $trial_duration_unit = sanitize_text_field( $_POST['pms_subscription_plan_trial_duration_unit'] );
     137                else
     138                    $trial_duration_unit = 'day';
     139
     140                update_post_meta( $post_id, 'pms_subscription_plan_trial_duration_unit', $trial_duration_unit );
     141
     142            }
    123143
    124144
  • paid-member-subscriptions/trunk/includes/class-billing-details.php

    r2288267 r2566399  
    5555                    <?php endforeach; ?>
    5656
    57                     <input type="hidden" name="pms_member_id" value="<?php echo isset( $_GET['member_id'] ) ? $_GET['member_id'] : ''; ?>" />
     57                    <input type="hidden" name="pms_member_id" value="<?php echo esc_attr( isset( $_GET['member_id'] ) ? $_GET['member_id'] : '' ); ?>" />
    5858
    5959                    <a href="" id="save" class="button button-secondary"><?php _e( 'Save', 'paid-member-subscriptions' ); ?></a>
  • paid-member-subscriptions/trunk/index.php

    r2565019 r2566399  
    44 * Plugin URI: http://www.cozmoslabs.com/
    55 * Description: Accept payments, create subscription plans and restrict content on your membership website.
    6  * Version: 2.4.1
     6 * Version: 2.4.2
    77 * Author: Cozmoslabs
    88 * Author URI: http://www.cozmoslabs.com/
     
    3737    public function __construct() {
    3838
    39         define( 'PMS_VERSION', '2.4.1' );
     39        define( 'PMS_VERSION', '2.4.2' );
    4040        define( 'PMS_PLUGIN_DIR_PATH', plugin_dir_path( __FILE__ ) );
    4141        define( 'PMS_PLUGIN_DIR_URL', plugin_dir_url( __FILE__ ) );
  • paid-member-subscriptions/trunk/readme.txt

    r2565019 r2566399  
    55Requires at least: 3.1
    66Tested up to: 5.7
    7 Stable tag: 2.4.1
     7Stable tag: 2.4.2
    88License: GPLv2 or later
    99License URI: http://www.gnu.org/licenses/gpl-2.0.html
     
    194194
    195195== Changelog ==
     196= 2.4.2 =
     197* Fix: Security issue on Members and Payments pages
     198
    196199= 2.4.1 =
    197200* Fix: Compatibility issue between reCaptcha and new Stripe add-on version
  • paid-member-subscriptions/trunk/translations/paid-member-subscriptions.pot

    r2565019 r2566399  
    115115msgstr ""
    116116
    117 #: ../pms-add-on-discount-codes/class-admin-discount-codes.php:125, includes/functions-user.php:247, ../pms-add-on-content-dripping/includes/class-admin-content-dripping.php:205, ../pms-add-on-discount-codes/views/view-meta-box-discount-codes.php:133, ../pms-add-on-email-reminders/includes/class-admin-email-reminders.php:109, includes/admin/class-admin-member-payments-list-table.php:53, includes/admin/class-admin-member-subscription-list-table.php:71, includes/admin/class-admin-members-list-table.php:503, includes/admin/class-admin-payments-list-table.php:106, includes/admin/class-admin-subscription-plans.php:323, ../pms-add-on-content-dripping/includes/views/view-meta-box-content-dripping-details.php:28, ../pms-add-on-email-reminders/includes/views/view-meta-box-email-reminders.php:127, ../pms-add-on-group-memberships/includes/admin/class-admin-group-members-list-table.php:65, ../pms-add-on-group-memberships/includes/views/view-members-list.php:40, ../pms-add-on-group-memberships/includes/views/view-shortcode-account-subscriptions-row.php:19, includes/admin/views/view-page-members-add-new-edit-subscription.php:273, includes/admin/views/view-page-payments-add-new-edit.php:210, includes/views/shortcodes/view-shortcode-account-subscription-details.php:36, includes/views/shortcodes/view-shortcode-account.php:14, includes/views/shortcodes/view-shortcode-payment-history.php:40, includes/admin/meta-boxes/views/view-meta-box-subscription-details.php:147, extend/woocommerce/includes/admin/meta-boxes/class-meta-box-product-membership-discounts.php:82, extend/woocommerce/includes/admin/meta-boxes/class-meta-box-subscription-plan-product-discounts.php:64
     117#: ../pms-add-on-discount-codes/class-admin-discount-codes.php:125, includes/functions-user.php:247, ../pms-add-on-content-dripping/includes/class-admin-content-dripping.php:205, ../pms-add-on-discount-codes/views/view-meta-box-discount-codes.php:133, ../pms-add-on-email-reminders/includes/class-admin-email-reminders.php:109, includes/admin/class-admin-member-payments-list-table.php:53, includes/admin/class-admin-member-subscription-list-table.php:71, includes/admin/class-admin-members-list-table.php:508, includes/admin/class-admin-payments-list-table.php:106, includes/admin/class-admin-subscription-plans.php:323, ../pms-add-on-content-dripping/includes/views/view-meta-box-content-dripping-details.php:28, ../pms-add-on-email-reminders/includes/views/view-meta-box-email-reminders.php:127, ../pms-add-on-group-memberships/includes/admin/class-admin-group-members-list-table.php:65, ../pms-add-on-group-memberships/includes/views/view-members-list.php:40, ../pms-add-on-group-memberships/includes/views/view-shortcode-account-subscriptions-row.php:19, includes/admin/views/view-page-members-add-new-edit-subscription.php:273, includes/admin/views/view-page-payments-add-new-edit.php:210, includes/views/shortcodes/view-shortcode-account-subscription-details.php:36, includes/views/shortcodes/view-shortcode-account.php:14, includes/views/shortcodes/view-shortcode-payment-history.php:40, includes/admin/meta-boxes/views/view-meta-box-subscription-details.php:147, extend/woocommerce/includes/admin/meta-boxes/class-meta-box-product-membership-discounts.php:82, extend/woocommerce/includes/admin/meta-boxes/class-meta-box-subscription-plan-product-discounts.php:64
    118118msgid "Status"
    119119msgstr ""
     
    131131msgstr ""
    132132
    133 #: ../pms-add-on-discount-codes/class-admin-discount-codes.php:189, ../pms-add-on-content-dripping/includes/class-admin-content-dripping.php:174, ../pms-add-on-email-reminders/includes/class-admin-email-reminders.php:267, ../pms-add-on-email-reminders/includes/class-admin-email-reminders.php:302, includes/admin/class-admin-payments-list-table.php:327, includes/admin/class-admin-subscription-plans.php:296, ../pms-add-on-tax/includes/views/view-settings-tab-tax.php:129, includes/views/shortcodes/view-shortcode-edit-profile-form.php:80
     133#: ../pms-add-on-discount-codes/class-admin-discount-codes.php:189, ../pms-add-on-content-dripping/includes/class-admin-content-dripping.php:174, ../pms-add-on-email-reminders/includes/class-admin-email-reminders.php:267, ../pms-add-on-email-reminders/includes/class-admin-email-reminders.php:302, includes/admin/class-admin-payments-list-table.php:337, includes/admin/class-admin-subscription-plans.php:296, ../pms-add-on-tax/includes/views/view-settings-tab-tax.php:129, includes/views/shortcodes/view-shortcode-edit-profile-form.php:80
    134134msgid "Delete"
    135135msgstr ""
     
    12021202msgstr ""
    12031203
    1204 #: includes/functions-content-filtering.php:467, includes/admin/class-admin-member-subscription-list-table.php:273, includes/admin/class-admin-members-list-table.php:502, ../pms-add-on-group-memberships/includes/views/view-shortcode-account-subscriptions-row.php:63, includes/views/shortcodes/view-shortcode-account-subscription-details.php:53, includes/views/shortcodes/view-shortcode-account.php:43
     1204#: includes/functions-content-filtering.php:467, includes/admin/class-admin-member-subscription-list-table.php:273, includes/admin/class-admin-members-list-table.php:507, ../pms-add-on-group-memberships/includes/views/view-shortcode-account-subscriptions-row.php:63, includes/views/shortcodes/view-shortcode-account-subscription-details.php:53, includes/views/shortcodes/view-shortcode-account.php:43
    12051205msgid "Unlimited"
    12061206msgstr ""
     
    40264026msgstr ""
    40274027
    4028 #: ../pms-add-on-tax/includes/functions-admin.php:345, includes/admin/class-admin-payments-list-table.php:406
     4028#: ../pms-add-on-tax/includes/functions-admin.php:345, includes/admin/class-admin-payments-list-table.php:416
    40294029msgid "Discount code"
    40304030msgstr ""
     
    40584058msgstr ""
    40594059
    4060 #: ../pms-add-on-tax/includes/functions-admin.php:491, includes/admin/class-admin-member-subscription-list-table.php:309, includes/admin/class-admin-member-subscription-list-table.php:317, includes/admin/class-admin-members-list-table.php:506, includes/admin/class-admin-members-list-table.php:509, extend/elementor/widgets/class-widget-account.php:63, includes/admin/views/view-page-settings-general.php:25, extend/beaver-builder/modules/pms-account/pms-account.php:38, extend/siteorigin/widgets/pms-account/pms-account.php:26
     4060#: ../pms-add-on-tax/includes/functions-admin.php:491, includes/admin/class-admin-member-subscription-list-table.php:309, includes/admin/class-admin-member-subscription-list-table.php:317, includes/admin/class-admin-members-list-table.php:511, includes/admin/class-admin-members-list-table.php:514, extend/elementor/widgets/class-widget-account.php:63, includes/admin/views/view-page-settings-general.php:25, extend/beaver-builder/modules/pms-account/pms-account.php:38, extend/siteorigin/widgets/pms-account/pms-account.php:26
    40614061msgid "Yes"
    40624062msgstr ""
     
    43624362msgstr ""
    43634363
    4364 #: includes/admin/class-admin-member-payments-list-table.php:185, includes/admin/class-admin-payments-list-table.php:444, includes/views/shortcodes/view-shortcode-payment-history.php:66
     4364#: includes/admin/class-admin-member-payments-list-table.php:185, includes/admin/class-admin-payments-list-table.php:454, includes/views/shortcodes/view-shortcode-payment-history.php:66
    43654365msgid "No payments found"
    43664366msgstr ""
    43674367
    4368 #: includes/admin/class-admin-member-subscription-list-table.php:70, includes/admin/class-admin-members-list-table.php:502
     4368#: includes/admin/class-admin-member-subscription-list-table.php:70, includes/admin/class-admin-members-list-table.php:507
    43694369msgid "Expiration date"
    43704370msgstr ""
    43714371
    4372 #: includes/admin/class-admin-member-subscription-list-table.php:72, includes/admin/class-admin-members-list-table.php:506
     4372#: includes/admin/class-admin-member-subscription-list-table.php:72, includes/admin/class-admin-members-list-table.php:511
    43734373msgid "Auto-renewing"
    43744374msgstr ""
    43754375
    4376 #: includes/admin/class-admin-member-subscription-list-table.php:73, includes/admin/class-admin-members-list-table.php:509
     4376#: includes/admin/class-admin-member-subscription-list-table.php:73, includes/admin/class-admin-members-list-table.php:514
    43774377msgid "Active Trial"
    43784378msgstr ""
     
    43824382msgstr ""
    43834383
    4384 #: includes/admin/class-admin-member-subscription-list-table.php:309, includes/admin/class-admin-member-subscription-list-table.php:317, includes/admin/class-admin-members-list-table.php:506, extend/elementor/widgets/class-widget-account.php:64, includes/admin/views/view-page-settings-general.php:24, extend/beaver-builder/modules/pms-account/pms-account.php:39, extend/siteorigin/widgets/pms-account/pms-account.php:27
     4384#: includes/admin/class-admin-member-subscription-list-table.php:309, includes/admin/class-admin-member-subscription-list-table.php:317, includes/admin/class-admin-members-list-table.php:511, extend/elementor/widgets/class-widget-account.php:64, includes/admin/views/view-page-settings-general.php:24, extend/beaver-builder/modules/pms-account/pms-account.php:39, extend/siteorigin/widgets/pms-account/pms-account.php:27
    43854385msgid "No"
    43864386msgstr ""
     
    44224422msgstr ""
    44234423
    4424 #: includes/admin/class-admin-members-add-new-bulk-list-table.php:376, includes/admin/class-admin-members-list-table.php:494
     4424#: includes/admin/class-admin-members-add-new-bulk-list-table.php:376, includes/admin/class-admin-members-list-table.php:499
    44254425msgid "Subscription Plan Not Found - ID: %s"
    44264426msgstr ""
     
    44424442msgstr ""
    44434443
    4444 #: includes/admin/class-admin-members-list-table.php:452, ../pms-add-on-group-memberships/includes/admin/class-admin-group-members-list-table.php:233, includes/admin/views/view-page-members-edit.php:14
     4444#: includes/admin/class-admin-members-list-table.php:457, ../pms-add-on-group-memberships/includes/admin/class-admin-group-members-list-table.php:233, includes/admin/views/view-page-members-edit.php:14
    44454445msgid "Edit Member"
    44464446msgstr ""
    44474447
    4448 #: includes/admin/class-admin-members-list-table.php:501
     4448#: includes/admin/class-admin-members-list-table.php:506
    44494449msgid "Start date"
    44504450msgstr ""
    44514451
    4452 #: includes/admin/class-admin-members-list-table.php:528
     4452#: includes/admin/class-admin-members-list-table.php:533
    44534453msgid "View Abandoned Subscriptions"
    44544454msgstr ""
    44554455
    4456 #: includes/admin/class-admin-members-list-table.php:529
     4456#: includes/admin/class-admin-members-list-table.php:534
    44574457msgid "%s %s abandoned subscription"
    44584458msgid_plural "%s %s abandoned subscriptions"
     
    44604460msgstr[1] ""
    44614461
    4462 #: includes/admin/class-admin-members-list-table.php:544
     4462#: includes/admin/class-admin-members-list-table.php:549
    44634463msgid "No members found"
    44644464msgstr ""
     
    46504650msgstr ""
    46514651
    4652 #: includes/admin/class-admin-payments-list-table.php:232
     4652#: includes/admin/class-admin-payments-list-table.php:242
    46534653msgid "User no longer exists"
    46544654msgstr ""
    46554655
    4656 #: includes/admin/class-admin-payments-list-table.php:324
     4656#: includes/admin/class-admin-payments-list-table.php:334
    46574657msgid "Edit Payment"
    46584658msgstr ""
    46594659
    4660 #: includes/admin/class-admin-payments-list-table.php:327
     4660#: includes/admin/class-admin-payments-list-table.php:337
    46614661msgid "Are you sure you want to delete this Payment?"
    46624662msgstr ""
    46634663
    4664 #: includes/admin/class-admin-payments-list-table.php:381
     4664#: includes/admin/class-admin-payments-list-table.php:391
    46654665msgid "View Logs"
    46664666msgstr ""
     
    57635763msgstr ""
    57645764
    5765 #: includes/admin/meta-boxes/class-meta-box-subscription-plan-details.php:208
     5765#: includes/admin/meta-boxes/class-meta-box-subscription-plan-details.php:228
    57665766msgid "Subscription Plan Details"
    57675767msgstr ""
Note: See TracChangeset for help on using the changeset viewer.