Commit Graph

1724 Commits

Author SHA1 Message Date
yuriinalivaiko 03a541dab1 - fixed social links in profile header 2023-02-17 20:21:22 +02:00
Nikita Sinelnikov 19585072f0 Merge branch 'master' of https://github.com/ultimatemember/ultimatemember into development/2.5.4 2023-02-14 11:34:40 +02:00
ashubawork 9b7ed5bcd5 - change esc_url to esc_url_raw 2023-02-08 14:43:51 +02:00
Nikita Sinelnikov 2d036eafa4 Merge pull request #1124 from ultimatemember/feature/new_social_networks
New social networks
2023-02-06 12:41:50 +02:00
Nikita Sinelnikov e28c66acb7 Merge pull request #1119 from ultimatemember/fix/php_warning_if_empty_password
Fix php warning if empty password
2023-02-06 12:39:44 +02:00
Nikita Sinelnikov 6e753887f7 Merge pull request #1126 from ultimatemember/feature/add_hook_for_date_field
Hook a for a date field
2023-02-06 12:37:21 +02:00
Nikita Sinelnikov 08b44fb842 - fixed #1125; 2023-01-20 01:40:44 +02:00
ashubawork 4d9f3e0341 - add twitch and reddit 2023-01-18 14:56:03 +02:00
ashubawork 055f7984c8 - add tiktok 2023-01-18 13:47:07 +02:00
ashubawork d43c200713 - add hook for date field 2023-01-16 13:56:09 +02:00
Nikita Sinelnikov 1cf8d88f5d - added support of the iframes inside textarea with enabled the "HTML using" option; 2023-01-13 00:51:51 +02:00
Daniel Winzen d18943771d Fix honeypot triggering in password reset, when not set 2023-01-10 13:11:18 +01:00
yuriinalivaiko 32517ccbe4 - fixed PHP Warning if password is empty 2023-01-09 21:49:12 +02:00
Nikita Sinelnikov b312b31d1e - closed #1115; 2023-01-05 20:45:41 +02:00
Nikita Sinelnikov 4984acb3bc - upgrade Extensions page; 2023-01-03 01:11:26 +02:00
Nikita Sinelnikov ce5adf050b - added function for getting allowed tags in wp_kses sanitizing; 2023-01-02 16:10:31 +02:00
Nikita Sinelnikov bd0b92ef24 - fixed #1110; 2022-12-16 15:53:46 +02:00
Nikita Sinelnikov 172e681714 - probably fixed: #1084; 2022-12-13 23:39:42 +02:00
Nikita Sinelnikov 8b2770b12e - deprecated: UM()->user()->password_reset_key variable;
- fixed: #1083, #991
2022-12-13 23:16:33 +02:00
Nikita Sinelnikov 43d2fe6a45 - possible solution for #1091; 2022-12-13 16:41:35 +02:00
Nikita Sinelnikov c5501fe6d6 - fixed #1094; 2022-12-13 16:13:29 +02:00
Nikita Sinelnikov 8b5bb5d784 - fixed #1082;
- used wp_mkdir to avoid the filesystem conflict;
2022-12-13 15:52:57 +02:00
Nikita Sinelnikov 0f8b87f288 - closed #1100; 2022-12-13 15:25:32 +02:00
Nikita Sinelnikov 19c83933f2 - closed #1101; 2022-12-13 14:53:35 +02:00
yuriinalivaiko 0771f56df2 - added data type verification for the 'url' field 2022-12-08 14:49:28 +02:00
Nikita Sinelnikov d9919c249b Merge branch 'development/2.5.2' of https://github.com/ultimatemember/ultimatemember into development/2.5.2 2022-11-09 03:17:40 +02:00
Nikita Sinelnikov 2004aa7dde Custom dropdown callback functions security enhancements:
- avoid using different letter case for bypass the blacklist e.g. phpInfo
- avoid using root namespace for bypass the blacklist e.g. \phpinfo
2022-11-09 03:17:23 +02:00
Nikita Sinelnikov faa5a9d4f9 Update class-admin-upgrade.php 2022-11-03 01:46:31 +02:00
Champ Camba 907ac38a76 Add validation for upgrade package 2022-11-02 12:33:22 +08:00
Nikita Sinelnikov cb4ca7dbe5 Merge pull request #1087 from ultimatemember/development/2.5.1
2.5.1 release
2022-10-27 01:34:27 +03:00
Nikita Sinelnikov fac2f9fdc5 - fixed #1085; 2022-10-24 17:34:54 +03:00
Nikita Sinelnikov af13de140a - fixed using "'" symbols in emails. There is possible to register with it and login after that. Closed #1059; 2022-10-24 16:22:04 +03:00
Nikita Sinelnikov b547d899bc - removed outdated setting using in code (force_display_name_capitlized). Moved the functionality to extended repo:
https://github.com/ultimatemember/Extended/tree/main/um-capitalize-name#readme
2022-10-24 14:29:04 +03:00
Aswin Giri 99d2b4ec27 Fixed issue with class name in checkbox and radio
Issue: class name being 'activeright' instead of 'active right' .
Fix: fixed by adding space around the class name ' right '.
2022-10-23 22:09:17 +05:45
Nikita Sinelnikov e6b4d66b44 - fixed #1071 typo; 2022-10-10 19:10:58 +03:00
Nikita Sinelnikov 98d416deaa - ignore auto_login if the user is already logged in. Fixed #1070; 2022-10-10 18:48:16 +03:00
Nikita Sinelnikov 26b54a48c4 - probably fixed #1075; 2022-10-10 18:02:10 +03:00
Nikita Sinelnikov c8fac38bb9 - fixed #1077; 2022-10-10 17:57:44 +03:00
Nikita Sinelnikov 5db8232202 - fixed restriction post displaying when 404 is enabled and old restiction logic isn't active; 2022-10-10 17:42:52 +03:00
Nikita Sinelnikov a93970aa56 - probably fixed #1078; 2022-10-10 17:11:21 +03:00
Nikita Sinelnikov 6746f0ce03 - fixed directory checking for localhosts; 2022-10-10 15:29:30 +03:00
Nikita Sinelnikov 0c8e24a194 - fixed #1081; 2022-10-10 14:10:32 +03:00
Nikita Sinelnikov 8cdbafe879 - changed getting blacklist functions; 2022-10-06 15:27:51 +03:00
Nikita Sinelnikov aa6a238c61 - added callbacks blacklist. Added PHP command execution functions here to exclude the running them from the custom callback; 2022-09-30 12:31:40 +03:00
Nikita Sinelnikov e1bc94c110 - fixed Directory Traversal vulnerability. Using realpath for that; 2022-09-27 15:13:35 +03:00
Nikita Sinelnikov 14dc36b813 - fixed directory traversal vulnerability; 2022-09-27 13:58:01 +03:00
Nikita Sinelnikov 7bff69f52b - fixed admin upgrade scripts and upgrades pack validation; 2022-09-26 13:59:45 +03:00
Nikita Sinelnikov d34a5faa11 - fixed restriction base on term restriction settings; 2022-09-03 01:56:03 +03:00
Nikita Sinelnikov fc1ecbf74a - fixed text filter label on the member directory; 2022-08-17 18:54:12 +03:00
Nikita Sinelnikov d234e7136b - added ability for 3rd-party same page upgrade fields; 2022-08-15 19:58:18 +03:00