- fixed vulnerability with uploading cover/profile photo for other user ID;

- re-written member directory meta queries;
- fixed search line additional slashes;
This commit is contained in:
nikitasinelnikov
2020-01-08 15:19:24 +02:00
parent f0e3bc9ef4
commit 2496825590
5 changed files with 309 additions and 489 deletions
@@ -120,6 +120,7 @@ if ( ! class_exists( 'um\admin\core\Admin_Settings' ) ) {
//member directory data
$metakeys[] = 'um_member_directory_data';
$metakeys[] = '_um_verified';
$skip_fields = UM()->builtin()->get_fields_without_metakey();
$skip_fields = array_merge( $skip_fields, UM()->member_directory()->core_search_fields );