Changeset 3787465

Timestamp:

11/06/2026 08:32:16 AM (15 hours ago)

Author:

bookingalgorithms

Message:

Release 1.8.35: * Fixed an issue with call to undefined function is_plugin_active

Location:

ba-book-everything/trunk

Files:

• babe-bootstrap.php (modified) (3 diffs)
• includes/class-babe-html.php (modified) (2 diffs)
• includes/class-babe-order.php (modified) (3 diffs)
• readme.txt (modified) (2 diffs)

ba-book-everything/trunk/babe-bootstrap.php

@@ -5 +5 @@
  * Plugin URI: https://ba-booking.com/ba-book-everything/
  * Description: The really fast and powerful Booking engine for any booking or rental sites (tours, hotels, apartments, yachts, cars, events, etc.).
- * Version: 1.8.34
+ * Version: 1.8.35
  * Author: Booking Algorithms
  * Author URI: https://ba-booking.com
@@ -21 +21 @@
         exit;
 
-define( 'BABE_VERSION', '1.8.34' );
+define( 'BABE_VERSION', '1.8.35' );
 define( 'BABE_PLUGIN_SLUG', 'ba-book-everything' );
 define( 'BABE_PLUGIN', __FILE__ );
@@ -34 +34 @@
   require_once BABE_PLUGIN_DIR . '/includes/plugins/cmb2-conditionals/cmb2-conditionals.php';
 }
+
+include_once( ABSPATH . 'wp-admin/includes/plugin.php' );
 
 include_once BABE_PLUGIN_DIR . '/includes/class-babe-install.php';

ba-book-everything/trunk/includes/class-babe-html.php

@@ -3183 +3183 @@
             }
             
-            $output .= $message . '</h4>';
+            $output .= esc_html($message) . '</h4>';
             
         } else {
@@ -3278 +3278 @@
             }
 
-            $output .= $message . '</h4>';
+            $output .= esc_html($message) . '</h4>';
 
             if ( $args['order_status'] === 'payment_expected' ){

ba-book-everything/trunk/includes/class-babe-order.php

@@ -383 +383 @@
     }
 
-     /**
-         * Get order hash
-     * @param int $order_id
-     * @return string
-         */
-    public static function get_order_hash( $order_id ) {
-       return get_post_meta($order_id, '_order_hash', true);
-    }
-
-     /**
-         * Get order admin hash
-     * @param int $order_id
-     * @return string
-         */
-    public static function get_order_admin_hash( $order_id ) {
-       return get_post_meta($order_id, '_order_admin_hash', true);
+    public static function get_order_hash( int $order_id ): string {
+       return (string)get_post_meta($order_id, '_order_hash', true);
+    }
+
+    public static function get_order_admin_hash( int $order_id ): string {
+       return (string)get_post_meta($order_id, '_order_admin_hash', true);
     }
 
@@ -2324 +2314 @@
             && BABE_Post_types::$order_post_type === get_post_type($order_id)
             && self::get_order_number($order_id) === $order_num
-            && self::get_order_hash($order_id) === $order_hash
+            && hash_equals(self::get_order_hash($order_id), $order_hash)
             ;
         
@@ -2336 +2326 @@
             && BABE_Post_types::$order_post_type === get_post_type($order_id)
             && self::get_order_number($order_id) === $order_num
-            && self::get_order_admin_hash($order_id) === $order_admin_hash
+            && hash_equals(self::get_order_admin_hash($order_id), $order_admin_hash)
             ;
     }

ba-book-everything/trunk/readme.txt

@@ -5 +5 @@
 Requires PHP: 8.1
 Tested up to: 7.1
-Stable tag: 1.8.34
+Stable tag: 1.8.35
 License: GPLv3 or later
 License URI: https://www.gnu.org/licenses/gpl-3.0.html
@@ -91 +91 @@
 == Changelog ==
 
+= 1.8.35 =
+* Fixed an issue with call to undefined function is_plugin_active
+
 = 1.8.34 =
 * Security update: fixed an XSS vulnerability related to the manual order confirmation process. Reported by AndrewN, patchstack