Nikita Sinelnikov
172e681714
- probably fixed : #1084 ;
2022-12-13 23:39:42 +02:00
Nikita Sinelnikov
2004aa7dde
Custom dropdown callback functions security enhancements:
...
- avoid using different letter case for bypass the blacklist e.g. phpInfo
- avoid using root namespace for bypass the blacklist e.g. \phpinfo
2022-11-09 03:17:23 +02:00
Nikita Sinelnikov
cb4ca7dbe5
Merge pull request #1087 from ultimatemember/development/2.5.1
...
2.5.1 release
2022-10-27 01:34:27 +03:00
Nikita Sinelnikov
fac2f9fdc5
- fixed #1085 ;
2022-10-24 17:34:54 +03:00
Aswin Giri
99d2b4ec27
Fixed issue with class name in checkbox and radio
...
Issue: class name being 'activeright' instead of 'active right' .
Fix: fixed by adding space around the class name ' right '.
2022-10-23 22:09:17 +05:45
Nikita Sinelnikov
8cdbafe879
- changed getting blacklist functions;
2022-10-06 15:27:51 +03:00
Nikita Sinelnikov
aa6a238c61
- added callbacks blacklist. Added PHP command execution functions here to exclude the running them from the custom callback;
2022-09-30 12:31:40 +03:00
Nikita Sinelnikov
95a26c97bb
Merge pull request #1033 from ultimatemember/feature/phone_field
...
Phone fields (issue #988 )
2022-08-11 15:44:24 +03:00
yuriinalivaiko
c0f5ec75e2
- fix fatal error on unset
2022-07-12 19:35:22 +03:00
ashubawork
4da0ae5392
- fix url for edit tabs
2022-07-06 13:04:09 +03:00
ashubawork
6440499b17
- change type for phones fields
2022-06-29 13:49:10 +03:00
Nikita Sinelnikov
fe88b40939
- using slashes in the callback function setting of the dropdown fields;
2022-06-08 21:24:23 +03:00
Nikita Sinelnikov
9cdf65973c
- prepared for 2.4.0 release;
2022-05-24 18:29:39 +03:00
Nikita Sinelnikov
a35dbba905
- fixed issue with echo XSS in user description;
2022-03-22 23:06:34 +02:00
ashubawork
e90efd0983
- fixed editing upload fields (issue #958 )
2021-12-22 10:44:27 +02:00
Nikita Sinelnikov
e5e2fb1b31
- code review;
...
- updated readme changelog;
2021-12-14 15:01:45 +02:00
Nikita Sinelnikov
75db9f7562
Merge pull request #836 from ultimatemember/fix/extending_deleting_fields
...
Delete Member Directory displaying fields, filters, sorting
2021-12-14 14:04:55 +02:00
Nikita Sinelnikov
5e8039b523
- fixed empty max_size data for the uploaders;
2021-09-16 15:40:11 +03:00
Nikita Sinelnikov
ff89c26628
- fixed PHP fatal error on the page list widget displaying;
2021-08-19 14:09:57 +03:00
Nikita Sinelnikov
5d773256b9
- fixed profile form nonce;
...
- fixed profile form getting ID and data;
- fixed class-access.php when restricted taxonomies are disabled;
2021-08-19 12:58:13 +03:00
yuriinalivaiko
d970f54c8e
Keep description formatting in a view mode.
2021-08-15 17:29:44 +03:00
Nikita Sinelnikov
15ee898905
- fixed stripping tags in the biography field;
2021-08-12 14:39:50 +03:00
Nikita Sinelnikov
7a9e2b118b
- code formatting;
2021-08-02 17:47:50 +03:00
yuriinalivaiko
bc5aec27d3
Fix columns
2021-08-02 16:31:58 +03:00
Nikita Sinelnikov
eeb7c39471
- fixed maybe serialized custom fields;
...
- fixed sanitizing;
2021-07-16 01:35:13 +03:00
yuriinalivaiko
a2f8efb412
Fix placeholder for the “Confirm password” field
2021-07-08 12:43:05 +03:00
Nikita Sinelnikov
fec9c50c1c
Merge branch 'master' of https://github.com/ultimatemember/ultimatemember into development/2.1.22
2021-07-07 21:06:08 +03:00
Nikita Sinelnikov
07e664be80
- intermediate results with sanitizing form handlers;
2021-06-29 02:51:54 +03:00
yuriinalivaiko
9f4585de43
The field setting "Confirm password field label"
...
See GitHub issue #828
2021-06-07 16:50:05 +03:00
andrewshuba
aa22dac432
- Delete Member Directory displaying fields, filters, sorting (issue #801 )
2021-05-13 11:53:50 +03:00
nikitasinelnikov
60187cdc67
- fixed XSS issue with current profile URL
2021-05-07 13:42:20 +03:00
nikitasinelnikov
b2bb2c13eb
- code formatting;
...
- small changes for #790 ;
2021-04-05 19:06:44 +03:00
nikitasinelnikov
6889f2244d
Merge branch 'development/2.1.17' of https://github.com/ultimatemember/ultimatemember into development/2.1.17
2021-04-05 13:21:19 +03:00
nikitasinelnikov
a495d43fbb
- code formatting;
2021-04-05 13:21:05 +03:00
Nikita Sinelnikov
70993ed6c2
Merge pull request #790 from ultimatemember/fix/permanently_delete_fields
...
Permanently deleting form's field (issue #786 )
2021-04-05 13:20:55 +03:00
yuriinalivaiko
ce73840ce2
Fixed: default value with comma for checkbox
2021-04-01 13:51:07 +03:00
andrewshuba
2f31e574ee
- fixed permanently deleting form's field
2021-03-25 13:41:37 +02:00
Champ Camba
5fb10b8228
Remove notice in empty label of confirm password
2021-03-25 17:25:00 +08:00
Champ Camba
b396240eff
Refactor confirm password label and placeholder
2021-03-25 17:16:00 +08:00
Champ Camba
19abbce9c3
Fix confirm password placeholder when label is empty
2021-03-25 17:13:49 +08:00
Champ Camba
ef849c7fb6
Fix notice in confirm password label
...
https://wordpress.org/support/topic/undefined-index-label-php-notice/
2021-03-25 14:54:49 +08:00
nikitasinelnikov
5740bc637d
- fixed: PHP notices and warnings
...
- fixed: security vulnerability with User Account page and password field
2021-03-03 13:13:44 +02:00
nikitasinelnikov
d1feb6dd75
- fixed conditional logic;
2020-12-24 14:55:18 +02:00
Nikita Sinelnikov
4b4137b267
Merge pull request #705 from ultimatemember/fix/fields_without_metakey_displaying_by_hook
...
Fixed displaying by the hook issues with fields without metakeys
2020-12-21 02:58:26 +02:00
nikitasinelnikov
41350e1391
- fixed PHP notices when there aren't UM custom roles and we get bool variable from get_option( 'um_roles' );
2020-12-16 13:37:13 +02:00
nikitasinelnikov
1adc51aa02
- fixed displaying by the hook issues with fields without metakeys;
2020-12-14 14:39:47 +02:00
nikitasinelnikov
67420b11b0
- Fixed: Vulnerability with timestamp field on UM Forms
...
- changed readme;
2020-12-04 00:10:20 +02:00
Champ Camba
124addd38e
Fix translation for Password label
2020-12-01 17:40:20 +08:00
nikitasinelnikov
dfc6f876ac
- Added: um_member_directory_cover_image_size hook with ability to change the cover photo size on the member directory
...
- Added: `um_member_directory_get_members_allow` JS hook for 3rd-party integration with the member directory. You could use a time throttle until some data is loaded
- Fixed: Upgrade process on websites where a hosting locks the frequent AJAX requests (added default JS throttle between requests)
2020-11-18 16:56:01 +02:00
nikitasinelnikov
427bb6da1c
- 2.1.12 pre-release;
2020-10-29 19:02:40 +02:00