Commit Graph

3600 Commits

Author SHA1 Message Date
Nikita Sinelnikov 2004aa7dde Custom dropdown callback functions security enhancements:
- avoid using different letter case for bypass the blacklist e.g. phpInfo
- avoid using root namespace for bypass the blacklist e.g. \phpinfo
2022-11-09 03:17:23 +02:00
Nikita Sinelnikov ce324dd183 Merge pull request #1092 from ultimatemember/fix/sanitize_current_view_type
Sanitize View Type variable
2022-11-03 01:48:12 +02:00
Nikita Sinelnikov 171d06fa04 Merge pull request #1093 from ultimatemember/fix-upgrade-package-visibility
Add validation for upgrade package
2022-11-03 01:46:59 +02:00
Nikita Sinelnikov faa5a9d4f9 Update class-admin-upgrade.php 2022-11-03 01:46:31 +02:00
Champ Camba 907ac38a76 Add validation for upgrade package 2022-11-02 12:33:22 +08:00
Champ Camba 88a9f6c7db Fix sanitization text 2022-11-02 12:32:02 +08:00
Nikita Sinelnikov 096a1caf27 - changed versions; 2022-10-27 01:42:27 +03:00
WordPress .pot File Generator de6f90e9fa 🔄 Generated POT File 2022-10-26 22:34:55 +00:00
Nikita Sinelnikov cb4ca7dbe5 Merge pull request #1087 from ultimatemember/development/2.5.1
2.5.1 release
2022-10-27 01:34:27 +03:00
Nikita Sinelnikov 8ff70c0003 - updated readme files and prepare for release; 2022-10-24 18:15:04 +03:00
Nikita Sinelnikov fac2f9fdc5 - fixed #1085; 2022-10-24 17:34:54 +03:00
Nikita Sinelnikov af13de140a - fixed using "'" symbols in emails. There is possible to register with it and login after that. Closed #1059; 2022-10-24 16:22:04 +03:00
Nikita Sinelnikov b547d899bc - removed outdated setting using in code (force_display_name_capitlized). Moved the functionality to extended repo:
https://github.com/ultimatemember/Extended/tree/main/um-capitalize-name#readme
2022-10-24 14:29:04 +03:00
WordPress .pot File Generator aa6e59f55b 🔄 Generated POT File 2022-10-23 16:24:44 +00:00
Aswin Giri 99d2b4ec27 Fixed issue with class name in checkbox and radio
Issue: class name being 'activeright' instead of 'active right' .
Fix: fixed by adding space around the class name ' right '.
2022-10-23 22:09:17 +05:45
Nikita Sinelnikov e6b4d66b44 - fixed #1071 typo; 2022-10-10 19:10:58 +03:00
Nikita Sinelnikov 98d416deaa - ignore auto_login if the user is already logged in. Fixed #1070; 2022-10-10 18:48:16 +03:00
Nikita Sinelnikov 26b54a48c4 - probably fixed #1075; 2022-10-10 18:02:10 +03:00
Nikita Sinelnikov c8fac38bb9 - fixed #1077; 2022-10-10 17:57:44 +03:00
Nikita Sinelnikov 5db8232202 - fixed restriction post displaying when 404 is enabled and old restiction logic isn't active; 2022-10-10 17:42:52 +03:00
Nikita Sinelnikov a93970aa56 - probably fixed #1078; 2022-10-10 17:11:21 +03:00
Nikita Sinelnikov 6746f0ce03 - fixed directory checking for localhosts; 2022-10-10 15:29:30 +03:00
Nikita Sinelnikov 0c8e24a194 - fixed #1081; 2022-10-10 14:10:32 +03:00
Nikita Sinelnikov 8cdbafe879 - changed getting blacklist functions; 2022-10-06 15:27:51 +03:00
Nikita Sinelnikov aa6a238c61 - added callbacks blacklist. Added PHP command execution functions here to exclude the running them from the custom callback; 2022-09-30 12:31:40 +03:00
Nikita Sinelnikov e1bc94c110 - fixed Directory Traversal vulnerability. Using realpath for that; 2022-09-27 15:13:35 +03:00
Nikita Sinelnikov 14dc36b813 - fixed directory traversal vulnerability; 2022-09-27 13:58:01 +03:00
Nikita Sinelnikov 7bff69f52b - fixed admin upgrade scripts and upgrades pack validation; 2022-09-26 13:59:45 +03:00
Nikita Sinelnikov 1bf5b71f16 Merge branch 'master' of https://github.com/ultimatemember/ultimatemember into development/2.5.1 2022-09-13 14:23:07 +03:00
Nikita Sinelnikov 689123eea8 - updated version; 2022-09-03 01:57:41 +03:00
WordPress .pot File Generator 9cd81cfbc0 🔄 Generated POT File 2022-09-02 22:56:39 +00:00
Nikita Sinelnikov d34a5faa11 - fixed restriction base on term restriction settings; 2022-09-03 01:56:03 +03:00
WordPress .pot File Generator bbb873a09d 🔄 Generated POT File 2022-08-17 16:11:56 +00:00
Nikita Sinelnikov 2cc01bf23a Merge pull request #1067 from ultimatemember/fix/empty_label
- fixed text filter label on the member directory;
2022-08-17 19:11:22 +03:00
Nikita Sinelnikov fc1ecbf74a - fixed text filter label on the member directory; 2022-08-17 18:54:12 +03:00
WordPress .pot File Generator 0fdd0ed443 🔄 Generated POT File 2022-08-15 16:58:54 +00:00
Nikita Sinelnikov d234e7136b - added ability for 3rd-party same page upgrade fields; 2022-08-15 19:58:18 +03:00
WordPress .pot File Generator 3925e8bf74 🔄 Generated POT File 2022-08-15 11:44:59 +00:00
Nikita Sinelnikov bd02a52d89 - updated README.md; 2022-08-15 14:44:27 +03:00
WordPress .pot File Generator 53ffa45e8c 🔄 Generated POT File 2022-08-15 11:43:09 +00:00
Nikita Sinelnikov 86a4ec9103 Merge pull request #1064 from ultimatemember/development/2.4.3
Development/2.4.3
2022-08-15 14:42:39 +03:00
Nikita Sinelnikov 5281c1e654 - fixed upgrade script; 2022-08-15 14:25:19 +03:00
Nikita Sinelnikov 6aa634f812 Merge pull request #1026 from ultimatemember/fixed/wp-admin-performance
Fixed/wp admin performance
2022-08-13 02:28:52 +03:00
Nikita Sinelnikov 1da32184df - the fix for the flushing cache; 2022-08-13 00:31:23 +03:00
Nikita Sinelnikov c1b3b0d3c4 - fixed issues related to the registration users with awaiting admin review or email confirmation; 2022-08-12 23:07:16 +03:00
Nikita Sinelnikov 221e54f6ce - added separate button for the user statuses count cache clearing; 2022-08-12 20:14:39 +03:00
Nikita Sinelnikov f4f84bbd7e - added expiration for the um_count_users_unassigned transient for the checking everyday the users who don't have the account_status meta (registered 3rd-party way); 2022-08-12 16:33:23 +03:00
Nikita Sinelnikov 69321f0cb1 - return from the function update_usermeta when old value the same as new; 2022-08-12 16:20:14 +03:00
Nikita Sinelnikov 5e077d51e6 - set release date to 17 August;
- added changelog;
- added update scripts for the phone fields;
2022-08-12 15:51:57 +03:00
Nikita Sinelnikov beb8cc1486 Merge pull request #1062 from ultimatemember/fix/user_password_reset
- fixed issue with visible ID in password reset link and form
2022-08-12 14:55:05 +03:00