Commit Graph

2709 Commits

Author SHA1 Message Date
Mykyta Synelnikov c3755baa16 Merge pull request #1624 from ultimatemember/fix/um-erase-data
The "Erase of your data" layout (CU-86cxneg3d)
2025-02-12 17:58:06 +02:00
Mykyta Synelnikov 422d2b7c67 Refactor password handling to bypass wp_unslash.
Introduce a dedicated method to handle password fields securely, avoiding `wp_unslash` for these fields. This enhances consistency and security when processing form data across the plugin.
2025-02-12 17:47:19 +02:00
Mykyta Synelnikov cbc8c24b35 Merge pull request #1647 from ultimatemember/fix/password
Password set in Dashboard can't be used for UM login or vice versa (CU-86cxwy7ww)
2025-02-12 17:21:27 +02:00
Mykyta Synelnikov 38593400ba Merge pull request #1644 from ultimatemember/fix/updates-request
Fixes updates request
2025-02-12 17:16:56 +02:00
yuriinalivaiko 17d95a189b Task CU-86cxwy7ww
- password sanitize has been changed to the standard WordPress one.
2025-02-04 23:23:26 +02:00
Mykyta Synelnikov 4adbe19cbe * fixed CVE-2024-12276;
* reviewed using $wpdb and WPCS;
* set minimum required version to 6.2 due to using %i for $wpdb->prepare;
2025-02-03 16:17:37 +02:00
Mykyta Synelnikov a760a6242e * updated requests to site URL;
* WPCS;
2025-01-31 15:19:28 +02:00
Mykyta Synelnikov 865fbf83c2 * added honeypot scripts/styles via
`wp_add_inline_script()`, `wp_add_inline_style()`
2025-01-30 13:00:17 +02:00
Mykyta Synelnikov 4d43d94502 * related to https://github.com/ultimatemember/ultimatemember/commit/8ca44d02a02e887fc4ab9bcb8ea9ff18ab2c0413 2025-01-30 12:33:49 +02:00
Mykyta Synelnikov bb0a49e08a * update dropdown items texts on cover photo change/remove;
* WPCS;
2025-01-29 16:44:29 +02:00
Mykyta Synelnikov fce490f54b * update dropdown items texts on cover photo change/remove;
* WPCS;
2025-01-29 16:43:05 +02:00
Mykyta Synelnikov 4dd1be344e * backward compatibility;
* update dropdown items texts on profile photo change/remove;
* added escapers;
* WPCS;
2025-01-29 16:01:02 +02:00
Mykyta Synelnikov 0520a55cc4 * removed hidden inputs on view mode;
* handle data attribute instead of the hidden input;
* WPCS;
2025-01-29 14:49:47 +02:00
Mykyta Synelnikov 817bc4b2e3 * fixed #1636 2025-01-24 18:32:11 +02:00
Mykyta Synelnikov 5fc2cd54a4 * Reviewed #1634 2025-01-24 18:19:14 +02:00
yuriinalivaiko 5952c06c59 Task CU-86cxq9tuk
- changed Open Graph image size.
2025-01-19 14:58:59 +02:00
yuriinalivaiko 8bf8a0130b fixed "Download your data" and "Erase of your data" fields layout. 2025-01-17 16:03:51 +02:00
Mykyta Synelnikov b0b9f82ebe * fixed order_count meta table update 2025-01-15 12:02:08 +02:00
Mykyta Synelnikov 0624a634d2 * fixed money_spent meta table update 2025-01-14 17:36:20 +02:00
Mykyta Synelnikov 5cb6ae6dc5 * prepared to the release 2025-01-14 15:39:01 +02:00
Mykyta Synelnikov 27aeef42af * prepared to the release 2025-01-14 15:24:03 +02:00
Mykyta Synelnikov dc81fa44ae Merge pull request #1607 from ultimatemember/fix/remove_mobile_detect
Deprecates mobile detect library
2025-01-14 12:02:23 +02:00
Mykyta Synelnikov 5ebefde6b8 * fixed security issue CVE ID: CVE-2025-0308 2025-01-10 02:17:18 +02:00
Mykyta Synelnikov e5fe05503a * fixed security issue CVE ID: CVE-2025-0308
* fixed security issue CVE ID: CVE-2025-0318
2025-01-08 12:20:35 +02:00
Mykyta Synelnikov a0892e18aa * enhancements related to #1599; 2024-12-19 17:24:52 +02:00
Mykyta Synelnikov 1ba3809344 * using wp_is_mobile instead of MobileDetect library 2024-12-17 21:53:18 +02:00
ashubawork 6653769d72 - add a hooks for submitted registration data 2024-12-17 15:48:20 +02:00
Mykyta Synelnikov b41ac2bb96 * uncommented Zapier extension; 2024-12-16 12:35:32 +02:00
Mykyta Synelnikov 8a86737472 * updated methods for properly searchable code; 2024-12-03 14:30:01 +02:00
Mykyta Synelnikov 6f4f43f035 * added todos; 2024-11-29 15:54:55 +02:00
Mykyta Synelnikov 823f98906f * sorted deprecated function; 2024-11-29 14:24:35 +02:00
Mykyta Synelnikov b892a70756 * changed hook for initialization of email templates paths;
* removed `load_plugin_textdomain` due to (article)[https://make.wordpress.org/core/2024/10/21/i18n-improvements-6-7/#Enhanced-support-for-only-using-PHP-translation-files]
* deprecated `UM()->localize()` function;
* deprecated `um_language_textdomain` filter hook;
2024-11-29 14:09:23 +02:00
Mykyta Synelnikov f5d81f1a41 * added todos; 2024-11-29 12:57:18 +02:00
Mykyta Synelnikov 0e0977f37b * fixed #1595; 2024-11-28 17:49:48 +02:00
Mykyta Synelnikov 909dd7f987 * added is_new_ui() function; 2024-11-19 22:58:04 +02:00
Mykyta Synelnikov 8d33c43130 Fixes 'um_dispatch_email' action #1589
* Sending email notifications directly (without Action Scheduler) on user delete action;
* Changed activation handler priority for integration with Action Scheduler
* Added 'fetch_user_id' argument for fetching the necessary user before email sending when Action Scheduler is active.
2024-11-19 17:48:10 +02:00
Mykyta Synelnikov 1a11581d12 * fixed um_current_user_can(); 2024-11-15 11:16:55 +02:00
Mykyta Synelnikov 51f36e4dd2 * release preparations; 2024-11-15 02:12:17 +02:00
Mykyta Synelnikov 234e200d20 * release preparations; 2024-11-15 02:11:10 +02:00
Mykyta Synelnikov 2086ddb53f * added um_image_upload_validation hook for 3rd-party validation during upload images; 2024-11-15 02:06:03 +02:00
Mykyta Synelnikov e561557e22 * added user_id attribute to the hooks; 2024-11-14 15:54:42 +02:00
Mykyta Synelnikov daa3ba87ef * fixed #1583; 2024-11-14 01:08:30 +02:00
Mykyta Synelnikov b4becdbcf5 * reviewed #1582; 2024-11-13 17:20:52 +02:00
Mykyta Synelnikov 7414e10efd Merge pull request #1582 from ultimatemember/fix/fetch_user
Fix for fetch user
2024-11-13 17:04:08 +02:00
Mykyta Synelnikov 48371d1d06 * fixed #1581; 2024-11-13 16:42:26 +02:00
yuriinalivaiko 9d373c968e - fixed incorrect usage of the um_fetch_user function 2024-11-13 14:32:47 +02:00
Mykyta Synelnikov a5e0caf5f5 Merge pull request #1579 from ultimatemember/fix/rest_api_calling
Fixes allowed query variables
2024-11-13 00:37:48 +02:00
Mykyta Synelnikov b63ebf1a63 Merge pull request #1578 from ultimatemember/fix/registration_role
Fixes validation of the form slug
2024-11-13 00:37:32 +02:00
Mykyta Synelnikov aa60e74639 Merge pull request #1577 from ultimatemember/fix/invalid_fields_array
Fixes issues when the custom fields meta has a wrong format
2024-11-13 00:37:10 +02:00
Mykyta Synelnikov 349939ed75 * fixed checking profile_photo and cover_photo fields editable condition on profile image upload/crop handlers; 2024-11-12 16:50:09 +02:00