Commit Graph

62 Commits

Author SHA1 Message Date
Mykyta Synelnikov fc2c5456e4 Implement directory privacy settings and add rate limiting
Adds configurable privacy options for member directories, allowing restrictions on visibility based on roles or login status. Introduces rate limiting for unauthenticated AJAX requests to prevent brute-force attacks or abuse.
2025-12-11 17:36:42 +02:00
Mykyta Synelnikov 5c67164cc2 Fix cover image size handling and add fallback for invalid sizes
Improved logic to handle cases where the cover image size array is invalid or empty by adding a fallback default size. For mobile devices, the second size is used if available, or the first size is used as a fallback. This ensures proper cover size selection and prevents potential errors.
2025-09-06 14:42:15 +03:00
yuriinalivaiko 661aa2060f - fixed a member directory 'select' filter query 2025-04-11 16:04:55 +03:00
Mykyta Synelnikov 4adbe19cbe * fixed CVE-2024-12276;
* reviewed using $wpdb and WPCS;
* set minimum required version to 6.2 due to using %i for $wpdb->prepare;
2025-02-03 16:17:37 +02:00
Mykyta Synelnikov 1ba3809344 * using wp_is_mobile instead of MobileDetect library 2024-12-17 21:53:18 +02:00
Mykyta Synelnikov dca31429db - reviewed #1510; 2024-04-24 02:42:44 +03:00
ashubawork 13e584173f - add hook for member directory custom meta table 2024-04-18 14:09:34 +03:00
ashubawork 50bcca2904 - fix for custom table 2024-04-16 13:47:09 +03:00
Mykyta Synelnikov 1827359dfb - manually reviewed #1489; 2024-04-15 17:58:18 +03:00
Mykyta Synelnikov 7e240edb6d - reviewed #1442; 2024-04-09 13:55:39 +03:00
Mykyta Synelnikov 8b64d5fae9 Merge branch 'development/2.8.x' into feature/search_exclude_fields 2024-04-09 01:09:13 +03:00
Mykyta Synelnikov a4d20fe4fd - reviewed #1481; 2024-04-02 17:28:54 +03:00
Mykyta Synelnikov 6839e07b10 - reviewed #1480; 2024-03-28 12:24:29 +02:00
Mykyta Synelnikov beb5b1724f Merge pull request #1480 from ultimatemember/feature/select_filter_relation_hook
Select filter relation hook
2024-03-28 11:04:59 +02:00
Mykyta Synelnikov 5b79b03be7 - fixed gender member directory filter with Male/Female field values; 2024-03-26 00:47:40 +02:00
ashubawork 8981337c6e - add esc_sql() 2024-03-14 09:25:51 +02:00
ashubawork eda97a0d8f - add hook for select filter relation 2024-03-13 11:25:41 +02:00
Mykyta Synelnikov 3a490b8915 - fixed member directory sorting in cases when wp_users fields are in custom usermeta keys; 2024-02-19 13:29:49 +02:00
Mykyta Synelnikov cb9818e41c - fixed sorting by user registered date when custom meta table is enabled; 2024-02-14 17:12:35 +02:00
ashubawork ee1e1e1c1a - include for custom usermeta 2024-02-07 12:07:48 +02:00
Mykyta Synelnikov 476de92f4c - added validation before escape sql; 2024-02-05 10:54:54 +02:00
Mykyta Synelnikov c61008bdbe - fixed security issue with mysql query escape;
- wpcs;
2024-02-02 02:19:15 +02:00
ashubawork 37739fdd47 - exclude fields for um meta table 2024-01-30 12:56:31 +02:00
Mykyta Synelnikov f494c8972d - last login date filter; 2023-12-01 02:17:37 +02:00
Mykyta Synelnikov bacf66c2b4 - probably fix with another way for this PR #1304; 2023-09-20 21:31:50 +03:00
Mykyta Synelnikov 8057d06f81 - reviewed #769;
- added `get_member_directory_id()` function for getting member directory ID based on page ID;
- commented hooks 'um_prepare_user_results_array', 'um_prepare_user_results_array_meta'
- added snippet fo hiding filters from member directory based on public or private visibility;
2023-06-12 15:22:35 +03:00
Mykyta Synelnikov 30663c3ecd - reviewed #1190; 2023-06-12 13:20:00 +03:00
ashubawork e4c30a472e - sorting for meta table 2023-05-24 15:45:27 +03:00
ashubawork 781d21d329 - for meta table 2023-05-24 11:04:50 +03:00
Nikita Sinelnikov fb6a4f5679 - fixed security vulnerability in member directories queries; 2022-07-07 14:30:10 +03:00
Nikita Sinelnikov 72d58f709d - fixed #1008;
- fixed #1005;
- fixed #1006;
- fixed #1010;
2022-06-09 17:17:15 +03:00
Nikita Sinelnikov 6feebac07f - hotfixes for member directory settings and frontend functionality; 2021-07-02 17:36:01 +03:00
Nikita Sinelnikov 07e664be80 - intermediate results with sanitizing form handlers; 2021-06-29 02:51:54 +03:00
andrewshuba 45576093c8 - changed apply_filter to do_action 2021-04-02 13:24:48 +03:00
andrewshuba a619ee3ffc - added hooks for change a wp_um_metadata table
- added hooks for user_location fields (hooks for comparison in text fields)
2021-03-12 12:24:31 +02:00
nikitasinelnikov 98e266dc18 - updated readme; 2021-03-03 16:43:57 +02:00
andrewshuba be4b56b5d6 - add comment about SQL_CALC_FOUND_ROWS 2021-01-20 15:26:01 +02:00
andrewshuba 9a298581dc - changes for a meta table 2021-01-19 13:54:31 +02:00
nikitasinelnikov fa13e82202 - There are changed PHP’s intval(), strval(), floatval(), and boolval() typecasting functions to (int), (string), (float) and (bool) regarding [this doc](https://make.wordpress.org/core/2020/11/20/miscellaneous-developer-focused-changes-in-wordpress-5-6/). 2020-11-24 12:55:22 +02:00
nikitasinelnikov 05b008c767 Merge branch 'master' of https://github.com/ultimatemember/ultimatemember 2020-08-10 11:36:31 +03:00
nikitasinelnikov 8466373c63 - fixed roles in query for usermeta table; 2020-08-10 11:36:11 +03:00
denisbaranov 419b22dedf Fixed: Admin filtering by the 'user_registered' 2020-08-06 15:14:53 +03:00
nikitasinelnikov 3e2f77a857 - fixed member directory roles query; 2020-07-23 16:09:56 +03:00
nikitasinelnikov 4be0e70bac - fixed member directory roles query; 2020-07-23 16:06:59 +03:00
nikitasinelnikov 0a86b3ec52 - exclude these users for active UM custom metatable;
- code formatting;
2020-05-25 17:51:48 +03:00
nikitasinelnikov 1ee20b9b33 - fixed user locations for custom usermeta table; 2020-04-10 17:32:32 +03:00
nikitasinelnikov a4e44a32f1 - fixed Ultimate Member wrapper's visibility on add/edit user page; 2020-02-21 09:01:18 +02:00
nikitasinelnikov aebc5af5cc - code formatting; 2020-02-17 17:54:02 +02:00
nikitasinelnikov f0cf88ac32 - fixed last login order on member directories when UM metatable is turned on;
- fixed update script 2.1.0-beta1 for UM:User Tags settings;
2020-02-13 16:46:18 +02:00
nikitasinelnikov c8a847f2d3 - fixed issue with not editable fields and their visibility; 2020-01-29 15:53:39 +02:00