Commit Graph

1349 Commits

Author SHA1 Message Date
Nikita Sinelnikov 72a0d9128e Merge pull request #1139 from ultimatemember/fix/role_profile_noindex
Avoid indexing profile by search engines
2023-03-27 11:05:11 +03:00
Nikita Sinelnikov 963a4653e5 Merge pull request #1140 from ultimatemember/fix/unslash_password
Password with quotes
2023-03-27 10:59:45 +03:00
Nikita Sinelnikov c2033ef0c8 Merge pull request #1138 from ultimatemember/fix/php_notice_undefined_index_options
Notice: Undefined index: options
2023-03-27 10:56:25 +03:00
ashubawork 0642986696 - add the user_registered field to restricted array of fields 2023-03-22 13:32:45 +02:00
yuriinalivaiko dee3ea90c5 - added hooks to change the profile SEO image
- added hook 'um_profile_dynamic_meta_image_size'
- added hook 'um_profile_dynamic_meta_image_type'
2023-03-08 14:07:49 +02:00
yuriinalivaiko 2f9300e936 - fixed: Date Picker field value format 2023-03-03 17:05:53 +02:00
yuriinalivaiko 861930f108 - fixed input POST data on Change Password 2023-03-01 15:33:11 +02:00
yuriinalivaiko 2a184cbe68 - fixed role setting "Avoid indexing profile by search engines" 2023-02-24 16:08:16 +02:00
yuriinalivaiko 9da45a076f - fixed PHP Notice: Undefined index: options 2023-02-24 10:48:59 +02:00
yuriinalivaiko 03a541dab1 - fixed social links in profile header 2023-02-17 20:21:22 +02:00
Nikita Sinelnikov 19585072f0 Merge branch 'master' of https://github.com/ultimatemember/ultimatemember into development/2.5.4 2023-02-14 11:34:40 +02:00
ashubawork 9b7ed5bcd5 - change esc_url to esc_url_raw 2023-02-08 14:43:51 +02:00
Nikita Sinelnikov 2d036eafa4 Merge pull request #1124 from ultimatemember/feature/new_social_networks
New social networks
2023-02-06 12:41:50 +02:00
Nikita Sinelnikov e28c66acb7 Merge pull request #1119 from ultimatemember/fix/php_warning_if_empty_password
Fix php warning if empty password
2023-02-06 12:39:44 +02:00
Nikita Sinelnikov 6e753887f7 Merge pull request #1126 from ultimatemember/feature/add_hook_for_date_field
Hook a for a date field
2023-02-06 12:37:21 +02:00
Nikita Sinelnikov 08b44fb842 - fixed #1125; 2023-01-20 01:40:44 +02:00
ashubawork 4d9f3e0341 - add twitch and reddit 2023-01-18 14:56:03 +02:00
ashubawork 055f7984c8 - add tiktok 2023-01-18 13:47:07 +02:00
ashubawork d43c200713 - add hook for date field 2023-01-16 13:56:09 +02:00
Nikita Sinelnikov 1cf8d88f5d - added support of the iframes inside textarea with enabled the "HTML using" option; 2023-01-13 00:51:51 +02:00
Daniel Winzen d18943771d Fix honeypot triggering in password reset, when not set 2023-01-10 13:11:18 +01:00
yuriinalivaiko 32517ccbe4 - fixed PHP Warning if password is empty 2023-01-09 21:49:12 +02:00
Nikita Sinelnikov b312b31d1e - closed #1115; 2023-01-05 20:45:41 +02:00
Nikita Sinelnikov 172e681714 - probably fixed: #1084; 2022-12-13 23:39:42 +02:00
Nikita Sinelnikov 8b2770b12e - deprecated: UM()->user()->password_reset_key variable;
- fixed: #1083, #991
2022-12-13 23:16:33 +02:00
Nikita Sinelnikov 43d2fe6a45 - possible solution for #1091; 2022-12-13 16:41:35 +02:00
Nikita Sinelnikov c5501fe6d6 - fixed #1094; 2022-12-13 16:13:29 +02:00
Nikita Sinelnikov 8b5bb5d784 - fixed #1082;
- used wp_mkdir to avoid the filesystem conflict;
2022-12-13 15:52:57 +02:00
Nikita Sinelnikov 0f8b87f288 - closed #1100; 2022-12-13 15:25:32 +02:00
Nikita Sinelnikov 19c83933f2 - closed #1101; 2022-12-13 14:53:35 +02:00
yuriinalivaiko 0771f56df2 - added data type verification for the 'url' field 2022-12-08 14:49:28 +02:00
Nikita Sinelnikov 2004aa7dde Custom dropdown callback functions security enhancements:
- avoid using different letter case for bypass the blacklist e.g. phpInfo
- avoid using root namespace for bypass the blacklist e.g. \phpinfo
2022-11-09 03:17:23 +02:00
Nikita Sinelnikov cb4ca7dbe5 Merge pull request #1087 from ultimatemember/development/2.5.1
2.5.1 release
2022-10-27 01:34:27 +03:00
Nikita Sinelnikov fac2f9fdc5 - fixed #1085; 2022-10-24 17:34:54 +03:00
Nikita Sinelnikov af13de140a - fixed using "'" symbols in emails. There is possible to register with it and login after that. Closed #1059; 2022-10-24 16:22:04 +03:00
Aswin Giri 99d2b4ec27 Fixed issue with class name in checkbox and radio
Issue: class name being 'activeright' instead of 'active right' .
Fix: fixed by adding space around the class name ' right '.
2022-10-23 22:09:17 +05:45
Nikita Sinelnikov e6b4d66b44 - fixed #1071 typo; 2022-10-10 19:10:58 +03:00
Nikita Sinelnikov 98d416deaa - ignore auto_login if the user is already logged in. Fixed #1070; 2022-10-10 18:48:16 +03:00
Nikita Sinelnikov 26b54a48c4 - probably fixed #1075; 2022-10-10 18:02:10 +03:00
Nikita Sinelnikov c8fac38bb9 - fixed #1077; 2022-10-10 17:57:44 +03:00
Nikita Sinelnikov 5db8232202 - fixed restriction post displaying when 404 is enabled and old restiction logic isn't active; 2022-10-10 17:42:52 +03:00
Nikita Sinelnikov a93970aa56 - probably fixed #1078; 2022-10-10 17:11:21 +03:00
Nikita Sinelnikov 6746f0ce03 - fixed directory checking for localhosts; 2022-10-10 15:29:30 +03:00
Nikita Sinelnikov 0c8e24a194 - fixed #1081; 2022-10-10 14:10:32 +03:00
Nikita Sinelnikov 8cdbafe879 - changed getting blacklist functions; 2022-10-06 15:27:51 +03:00
Nikita Sinelnikov aa6a238c61 - added callbacks blacklist. Added PHP command execution functions here to exclude the running them from the custom callback; 2022-09-30 12:31:40 +03:00
Nikita Sinelnikov e1bc94c110 - fixed Directory Traversal vulnerability. Using realpath for that; 2022-09-27 15:13:35 +03:00
Nikita Sinelnikov 14dc36b813 - fixed directory traversal vulnerability; 2022-09-27 13:58:01 +03:00
Nikita Sinelnikov d34a5faa11 - fixed restriction base on term restriction settings; 2022-09-03 01:56:03 +03:00
Nikita Sinelnikov fc1ecbf74a - fixed text filter label on the member directory; 2022-08-17 18:54:12 +03:00