Commit Graph

970 Commits

Author SHA1 Message Date
Mykyta Synelnikov 39b3b3873e Add new sanitization cases for array-based input validation
Introduced 'sanitize_array_key_int' and 'sanitize_array_key' cases to enhance sanitization of array-based input in admin settings. This ensures default values are used for invalid keys and enforces stricter validation for cleaner and more secure input handling.
2025-09-08 23:20:59 +03:00
ashubawork 4522e6d64c - fix fatal error 2.0-beta1 package update 2025-07-30 13:09:54 +03:00
Mykyta Synelnikov 976c0c75e2 Add Extensions_Updater class for handling extension updates
Introduced a new `Extensions_Updater` class to manage extension update processes, including version checks and file execution. Added a corresponding `extension_updater` method in `class-admin.php` to initialize and manage updater instances based on provided data.
2025-07-07 13:04:19 +03:00
Mykyta Synelnikov 524670ad53 Merge pull request #1683 from ultimatemember/fix/sitehealth
Sitehealth
2025-06-24 16:56:38 +03:00
Mykyta Synelnikov d2dcfb645a Refactor debug information structure across plugins
Updated the structure of debug information methods by replacing `array_merge` with simpler array extensions and renaming variables for clarity. This ensures consistent handling of role metadata and improves readability and maintainability of code across multiple plugins.
2025-06-24 16:42:20 +03:00
Mykyta Synelnikov 032119a8ce Refactor batch action scheduling for account status updates (#1692)
Updated batch action logic to utilize correct constants and ensure proper scheduling. Added fallback scheduling logic in admin notices to address unscheduled batch actions and improve reliability.
2025-06-18 15:17:19 +03:00
Mykyta Synelnikov 9d83fba560 Update dynamic function blacklist for security enhancement
Added a mechanism to dynamically retrieve and merge updated WordPress function lists into the blacklist to prevent unsafe usage in dropdown options. Addresses a security issue (CVE-2025-47691) by using a JSON-based function source tied to WordPress versioning.
2025-05-12 13:16:17 +03:00
ashubawork c347d8bcf7 - wpcs fixes 2025-04-30 11:07:22 +03:00
ashubawork ccbce2f663 - small fix 2025-04-30 10:36:52 +03:00
ashubawork 7bca143d50 - forms sitehealth 2025-04-30 10:36:24 +03:00
ashubawork 9b8365acb0 - roles, directories sitehealth 2025-04-29 15:14:28 +03:00
ashubawork a52954e8ae - access, appearance, emails sitehealth 2025-04-28 13:33:22 +03:00
ashubawork 004cfd12cd - fix general sitehealth 2025-04-25 12:42:42 +03:00
Mykyta Synelnikov f1f1bddeaf Add new settings fields to Site Health info
Introduce fields for "Ignore User Role Registration Options" and re-add "Email sending by Action Scheduler" under the Site Health settings. This improves the clarity and organization of user options in the admin interface.
2025-04-23 16:13:27 +03:00
Mykyta Synelnikov c6859072a0 Update to version 2.10.3 with enhancements and bug fixes
Added new settings for registration management and improved Action Scheduler flexibility. Resolved issues with Member Directory styling, filtering, and email placeholders. Updated terminology and documentation; ensure cached assets are refreshed post-update.
2025-04-23 16:05:34 +03:00
Mykyta Synelnikov 54deffd244 Enhance password reset logic and add Action Scheduler filter
Ensure proper handling of user data in password reset functions by adding checks and updating parameter handling. Introduce a new filter to extend site health information and include a setting for enabling email sending via Action Scheduler. Improve code clarity with updated comments and function annotations.
2025-04-22 17:16:55 +03:00
Mykyta Synelnikov df7e0e9357 Merge pull request #1676 from ultimatemember/fix/extend_baneed_fields
Extend baneed fields
2025-04-17 19:58:01 +03:00
Mykyta Synelnikov 206dab3215 Merge pull request #1670 from ultimatemember/feature/schedule_account_status_check
account_status schedule action
2025-04-17 19:57:21 +03:00
Mykyta Synelnikov f89b29426a Add validation for banned and blacklisted custom fields.
This update enhances security by introducing checks for banned and blacklisted meta keys in custom fields. It includes CSS updates for admin builder styles and ensures banned fields are flagged accurately in the site health tool.
2025-04-15 18:08:44 +03:00
Mykyta Synelnikov 5356148cc4 Implement batch processing for users with empty account statuses
Introduced a new batch process to handle users lacking an `account_status` meta efficiently. Refactored legacy methods, added async scheduling, and created helper functions to manage and track progress. These changes improve performance and reliability for large user bases.
2025-04-15 14:27:59 +03:00
Mykyta Synelnikov fa04a49032 Merge pull request #1672 from ultimatemember/feature/user_auto_approve
User auto approve
2025-04-14 16:05:20 +03:00
Mykyta Synelnikov 695d522cb7 Rename 'auto_user_approve' to 'admin_ignore_user_status'.
Updated the setting name across relevant files to improve clarity and better reflect its functionality. Adjusted related logic to ensure consistent behavior with the new naming.
2025-04-14 16:04:29 +03:00
ashubawork 8ef597ad74 - fix banned fields and site health status 2025-04-14 14:21:41 +03:00
ashubawork 42e6e71e65 - add auto approval after the wp-admin registration 2025-04-10 11:07:13 +03:00
ashubawork 4dc4b7497c - small CSS fixes for directory block 2025-04-08 13:55:32 +03:00
Mykyta Synelnikov 3858c6af83 Refactor Action Scheduler for not only email handling.
Updated the Action Scheduler implementation to improve flexibility and clarity. Replaced the 'enable_action_scheduler' option with 'enable_as_email_sending' for better specificity. Introduced hook-based checks to selectively enable email scheduling, ensuring compatibility and optimized performance.
2025-04-04 12:59:10 +03:00
Mykyta Synelnikov ccc7cd099b Add comments and legacy key for WooCommerce 9.1.0 support
Added comments to clarify the usage of meta keys introduced in WooCommerce 9.1.0 and marked TODOs for future cleanup. Also included a legacy key, `_money_spent`, for backward compatibility with WooCommerce versions below 9.1.0.
2025-04-03 13:05:10 +03:00
Mykyta Synelnikov 77f6a13730 Refactor and enhance member directory search functionality.
Replaced deprecated and complex search query methods with a more streamlined and flexible implementation. Introduced improved handling of core and custom search fields, optimized search logic, and added better filter support. Incremented plugin version to 2.10.2 to reflect these changes.
2025-03-25 23:31:13 +02:00
Mykyta Synelnikov 0c183594b1 Update Ultimate Member to version 2.10.0
Bump plugin version to 2.10.0, update documentation, and adjust URLs and metadata accordingly. This release includes increased minimum PHP and WordPress requirements and addresses security-related issues. Users are strongly advised to update immediately.
2025-02-13 11:28:28 +02:00
Mykyta Synelnikov 2c01e25b5c Enhance form preview options and improve code consistency
Added separate buttons for 'Live Preview Screen' and 'Live Preview Mobile' in the form builder for better user experience. Updated coding standards for consistency, including proper handling of PHP tags and escaping functions. These changes improve readability, maintainability, and enhance functionality.

Issue #1646
2025-02-12 18:44:46 +02:00
Mykyta Synelnikov aadad09ea9 Fix spacing for query arguments in action listener.
Adjusted spacing for better code readability and consistency in the query arguments within the class-actions-listener.php file. This change ensures the code aligns with coding standards without affecting functionality.
2025-02-12 18:26:37 +02:00
Mykyta Synelnikov 3ada6c71d9 Update PHP requirement and improve user action handling
Raised minimum PHP version to 7.0 and finalized the plugin version to 2.9.3. Introduced a centralized user actions array and replaced 'manage_options' capability with 'edit_users' for better permission handling. Optimized the nonce actions extension method for cleaner code.

* reviewed #1619
2025-02-12 18:25:26 +02:00
Mykyta Synelnikov 38593400ba Merge pull request #1644 from ultimatemember/fix/updates-request
Fixes updates request
2025-02-12 17:16:56 +02:00
Mykyta Synelnikov 4adbe19cbe * fixed CVE-2024-12276;
* reviewed using $wpdb and WPCS;
* set minimum required version to 6.2 due to using %i for $wpdb->prepare;
2025-02-03 16:17:37 +02:00
Mykyta Synelnikov a760a6242e * updated requests to site URL;
* WPCS;
2025-01-31 15:19:28 +02:00
Mykyta Synelnikov 817bc4b2e3 * fixed #1636 2025-01-24 18:32:11 +02:00
Mykyta Synelnikov b0b9f82ebe * fixed order_count meta table update 2025-01-15 12:02:08 +02:00
Mykyta Synelnikov 0624a634d2 * fixed money_spent meta table update 2025-01-14 17:36:20 +02:00
Mykyta Synelnikov a0892e18aa * enhancements related to #1599; 2024-12-19 17:24:52 +02:00
Mykyta Synelnikov b41ac2bb96 * uncommented Zapier extension; 2024-12-16 12:35:32 +02:00
Mykyta Synelnikov f5d81f1a41 * added todos; 2024-11-29 12:57:18 +02:00
Mykyta Synelnikov 48371d1d06 * fixed #1581; 2024-11-13 16:42:26 +02:00
Mykyta Synelnikov 920fb168dc * fix related to commit 945b79a97940406b40a5996f9aa2159bd11e29ab 2024-11-11 18:53:17 +02:00
Mykyta Synelnikov 9712e507ce Merge pull request #1575 from ultimatemember/security/uploader_conditions
Fixes security issue related to the file/image upload and image resize
2024-11-11 14:01:55 +02:00
Mykyta Synelnikov c28135f212 * fixed #1573;
* WPCS;
2024-11-06 14:30:27 +02:00
Mykyta Synelnikov 61ea1b3e8d * maybe fixed CVE-2024-10528; 2024-11-05 11:55:07 +02:00
Mykyta Synelnikov 91a0c13399 Merge branch 'development/2.8.x' into feature/action-schedule-integration 2024-10-21 17:45:42 +03:00
Mykyta Synelnikov 4b2fbe525d * Fixed: User status filter on wp-admin > Users on mobile devices; 2024-10-15 22:06:55 +03:00
Mykyta Synelnikov f27dcd6e41 * manually reviewed https://github.com/ultimatemember/ultimatemember/tree/fix/um_member_directory_data; 2024-10-14 17:14:56 +03:00
Mykyta Synelnikov 02745d804c * WPCS;
* Better UI for role settings place;
2024-10-11 16:43:05 +03:00