Mykyta Synelnikov
fc2c5456e4
Implement directory privacy settings and add rate limiting
...
Adds configurable privacy options for member directories, allowing restrictions on visibility based on roles or login status. Introduces rate limiting for unauthenticated AJAX requests to prevent brute-force attacks or abuse.
2025-12-11 17:36:42 +02:00
Mykyta Synelnikov
5c67164cc2
Fix cover image size handling and add fallback for invalid sizes
...
Improved logic to handle cases where the cover image size array is invalid or empty by adding a fallback default size. For mobile devices, the second size is used if available, or the first size is used as a fallback. This ensures proper cover size selection and prevents potential errors.
2025-09-06 14:42:15 +03:00
yuriinalivaiko
661aa2060f
- fixed a member directory 'select' filter query
2025-04-11 16:04:55 +03:00
Mykyta Synelnikov
4adbe19cbe
* fixed CVE-2024-12276;
...
* reviewed using $wpdb and WPCS;
* set minimum required version to 6.2 due to using %i for $wpdb->prepare;
2025-02-03 16:17:37 +02:00
Mykyta Synelnikov
1ba3809344
* using wp_is_mobile instead of MobileDetect library
2024-12-17 21:53:18 +02:00
Mykyta Synelnikov
dca31429db
- reviewed #1510 ;
2024-04-24 02:42:44 +03:00
ashubawork
13e584173f
- add hook for member directory custom meta table
2024-04-18 14:09:34 +03:00
ashubawork
50bcca2904
- fix for custom table
2024-04-16 13:47:09 +03:00
Mykyta Synelnikov
1827359dfb
- manually reviewed #1489 ;
2024-04-15 17:58:18 +03:00
Mykyta Synelnikov
7e240edb6d
- reviewed #1442 ;
2024-04-09 13:55:39 +03:00
Mykyta Synelnikov
8b64d5fae9
Merge branch 'development/2.8.x' into feature/search_exclude_fields
2024-04-09 01:09:13 +03:00
Mykyta Synelnikov
a4d20fe4fd
- reviewed #1481 ;
2024-04-02 17:28:54 +03:00
Mykyta Synelnikov
6839e07b10
- reviewed #1480 ;
2024-03-28 12:24:29 +02:00
Mykyta Synelnikov
beb5b1724f
Merge pull request #1480 from ultimatemember/feature/select_filter_relation_hook
...
Select filter relation hook
2024-03-28 11:04:59 +02:00
Mykyta Synelnikov
5b79b03be7
- fixed gender member directory filter with Male/Female field values;
2024-03-26 00:47:40 +02:00
ashubawork
8981337c6e
- add esc_sql()
2024-03-14 09:25:51 +02:00
ashubawork
eda97a0d8f
- add hook for select filter relation
2024-03-13 11:25:41 +02:00
Mykyta Synelnikov
3a490b8915
- fixed member directory sorting in cases when wp_users fields are in custom usermeta keys;
2024-02-19 13:29:49 +02:00
Mykyta Synelnikov
cb9818e41c
- fixed sorting by user registered date when custom meta table is enabled;
2024-02-14 17:12:35 +02:00
ashubawork
ee1e1e1c1a
- include for custom usermeta
2024-02-07 12:07:48 +02:00
Mykyta Synelnikov
476de92f4c
- added validation before escape sql;
2024-02-05 10:54:54 +02:00
Mykyta Synelnikov
c61008bdbe
- fixed security issue with mysql query escape;
...
- wpcs;
2024-02-02 02:19:15 +02:00
ashubawork
37739fdd47
- exclude fields for um meta table
2024-01-30 12:56:31 +02:00
Mykyta Synelnikov
f494c8972d
- last login date filter;
2023-12-01 02:17:37 +02:00
Mykyta Synelnikov
bacf66c2b4
- probably fix with another way for this PR #1304 ;
2023-09-20 21:31:50 +03:00
Mykyta Synelnikov
8057d06f81
- reviewed #769 ;
...
- added `get_member_directory_id()` function for getting member directory ID based on page ID;
- commented hooks 'um_prepare_user_results_array', 'um_prepare_user_results_array_meta'
- added snippet fo hiding filters from member directory based on public or private visibility;
2023-06-12 15:22:35 +03:00
Mykyta Synelnikov
30663c3ecd
- reviewed #1190 ;
2023-06-12 13:20:00 +03:00
ashubawork
e4c30a472e
- sorting for meta table
2023-05-24 15:45:27 +03:00
ashubawork
781d21d329
- for meta table
2023-05-24 11:04:50 +03:00
Nikita Sinelnikov
fb6a4f5679
- fixed security vulnerability in member directories queries;
2022-07-07 14:30:10 +03:00
Nikita Sinelnikov
72d58f709d
- fixed #1008 ;
...
- fixed #1005 ;
- fixed #1006 ;
- fixed #1010 ;
2022-06-09 17:17:15 +03:00
Nikita Sinelnikov
6feebac07f
- hotfixes for member directory settings and frontend functionality;
2021-07-02 17:36:01 +03:00
Nikita Sinelnikov
07e664be80
- intermediate results with sanitizing form handlers;
2021-06-29 02:51:54 +03:00
andrewshuba
45576093c8
- changed apply_filter to do_action
2021-04-02 13:24:48 +03:00
andrewshuba
a619ee3ffc
- added hooks for change a wp_um_metadata table
...
- added hooks for user_location fields (hooks for comparison in text fields)
2021-03-12 12:24:31 +02:00
nikitasinelnikov
98e266dc18
- updated readme;
2021-03-03 16:43:57 +02:00
andrewshuba
be4b56b5d6
- add comment about SQL_CALC_FOUND_ROWS
2021-01-20 15:26:01 +02:00
andrewshuba
9a298581dc
- changes for a meta table
2021-01-19 13:54:31 +02:00
nikitasinelnikov
fa13e82202
- There are changed PHP’s intval(), strval(), floatval(), and boolval() typecasting functions to (int), (string), (float) and (bool) regarding [this doc]( https://make.wordpress.org/core/2020/11/20/miscellaneous-developer-focused-changes-in-wordpress-5-6/ ).
2020-11-24 12:55:22 +02:00
nikitasinelnikov
05b008c767
Merge branch 'master' of https://github.com/ultimatemember/ultimatemember
2020-08-10 11:36:31 +03:00
nikitasinelnikov
8466373c63
- fixed roles in query for usermeta table;
2020-08-10 11:36:11 +03:00
denisbaranov
419b22dedf
Fixed: Admin filtering by the 'user_registered'
2020-08-06 15:14:53 +03:00
nikitasinelnikov
3e2f77a857
- fixed member directory roles query;
2020-07-23 16:09:56 +03:00
nikitasinelnikov
4be0e70bac
- fixed member directory roles query;
2020-07-23 16:06:59 +03:00
nikitasinelnikov
0a86b3ec52
- exclude these users for active UM custom metatable;
...
- code formatting;
2020-05-25 17:51:48 +03:00
nikitasinelnikov
1ee20b9b33
- fixed user locations for custom usermeta table;
2020-04-10 17:32:32 +03:00
nikitasinelnikov
a4e44a32f1
- fixed Ultimate Member wrapper's visibility on add/edit user page;
2020-02-21 09:01:18 +02:00
nikitasinelnikov
aebc5af5cc
- code formatting;
2020-02-17 17:54:02 +02:00
nikitasinelnikov
f0cf88ac32
- fixed last login order on member directories when UM metatable is turned on;
...
- fixed update script 2.1.0-beta1 for UM:User Tags settings;
2020-02-13 16:46:18 +02:00
nikitasinelnikov
c8a847f2d3
- fixed issue with not editable fields and their visibility;
2020-01-29 15:53:39 +02:00