10h30/ultimatemember
1
0
Fork 0
mirror of https://github.com/10h30/ultimatemember.git synced 2026-06-05 15:09:37 +09:00
Code Issues Packages Projects Releases Wiki Activity
3,425 Commits 4 Branches 13 Tags
82bf304bcbc593c1273579913c851a96a9c8703d
Commit Graph

1709 Commits

Author SHA1 Message Date
Daniel Winzen d18943771d Fix honeypot triggering in password reset, when not set 2023-01-10 13:11:18 +01:00
Nikita Sinelnikov bd0b92ef24 - fixed #1110; 2022-12-16 15:53:46 +02:00
Nikita Sinelnikov 172e681714 - probably fixed: #1084; 2022-12-13 23:39:42 +02:00
Nikita Sinelnikov 8b2770b12e - deprecated: UM()->user()->password_reset_key variable; 
- fixed: #1083, #991
 2022-12-13 23:16:33 +02:00
Nikita Sinelnikov 43d2fe6a45 - possible solution for #1091; 2022-12-13 16:41:35 +02:00
Nikita Sinelnikov c5501fe6d6 - fixed #1094; 2022-12-13 16:13:29 +02:00
Nikita Sinelnikov 8b5bb5d784 - fixed #1082; 
- used wp_mkdir to avoid the filesystem conflict;
 2022-12-13 15:52:57 +02:00
Nikita Sinelnikov 0f8b87f288 - closed #1100; 2022-12-13 15:25:32 +02:00
Nikita Sinelnikov 19c83933f2 - closed #1101; 2022-12-13 14:53:35 +02:00
yuriinalivaiko 0771f56df2 - added data type verification for the 'url' field 2022-12-08 14:49:28 +02:00
Nikita Sinelnikov d9919c249b Merge branch 'development/2.5.2' of https://github.com/ultimatemember/ultimatemember into development/2.5.2 2022-11-09 03:17:40 +02:00
Nikita Sinelnikov 2004aa7dde Custom dropdown callback functions security enhancements: 
- avoid using different letter case for bypass the blacklist e.g. phpInfo
- avoid using root namespace for bypass the blacklist e.g. \phpinfo
 2022-11-09 03:17:23 +02:00
Nikita Sinelnikov faa5a9d4f9 Update class-admin-upgrade.php 2022-11-03 01:46:31 +02:00
Champ Camba 907ac38a76 Add validation for upgrade package 2022-11-02 12:33:22 +08:00
Nikita Sinelnikov cb4ca7dbe5 Merge pull request #1087 from ultimatemember/development/2.5.1 
2.5.1 release
 2022-10-27 01:34:27 +03:00
Nikita Sinelnikov fac2f9fdc5 - fixed #1085; 2022-10-24 17:34:54 +03:00
Nikita Sinelnikov af13de140a - fixed using "'" symbols in emails. There is possible to register with it and login after that. Closed #1059; 2022-10-24 16:22:04 +03:00
Nikita Sinelnikov b547d899bc - removed outdated setting using in code (force_display_name_capitlized). Moved the functionality to extended repo: 
https://github.com/ultimatemember/Extended/tree/main/um-capitalize-name#readme
 2022-10-24 14:29:04 +03:00
Aswin Giri 99d2b4ec27 Fixed issue with class name in checkbox and radio 
Issue: class name being 'activeright' instead of 'active right' .
Fix: fixed by adding space around the class name ' right '.
 2022-10-23 22:09:17 +05:45
Nikita Sinelnikov e6b4d66b44 - fixed #1071 typo; 2022-10-10 19:10:58 +03:00
Nikita Sinelnikov 98d416deaa - ignore auto_login if the user is already logged in. Fixed #1070; 2022-10-10 18:48:16 +03:00
Nikita Sinelnikov 26b54a48c4 - probably fixed #1075; 2022-10-10 18:02:10 +03:00
Nikita Sinelnikov c8fac38bb9 - fixed #1077; 2022-10-10 17:57:44 +03:00
Nikita Sinelnikov 5db8232202 - fixed restriction post displaying when 404 is enabled and old restiction logic isn't active; 2022-10-10 17:42:52 +03:00
Nikita Sinelnikov a93970aa56 - probably fixed #1078; 2022-10-10 17:11:21 +03:00
Nikita Sinelnikov 6746f0ce03 - fixed directory checking for localhosts; 2022-10-10 15:29:30 +03:00
Nikita Sinelnikov 0c8e24a194 - fixed #1081; 2022-10-10 14:10:32 +03:00
Nikita Sinelnikov 8cdbafe879 - changed getting blacklist functions; 2022-10-06 15:27:51 +03:00
Nikita Sinelnikov aa6a238c61 - added callbacks blacklist. Added PHP command execution functions here to exclude the running them from the custom callback; 2022-09-30 12:31:40 +03:00
Nikita Sinelnikov e1bc94c110 - fixed Directory Traversal vulnerability. Using realpath for that; 2022-09-27 15:13:35 +03:00
Nikita Sinelnikov 14dc36b813 - fixed directory traversal vulnerability; 2022-09-27 13:58:01 +03:00
Nikita Sinelnikov 7bff69f52b - fixed admin upgrade scripts and upgrades pack validation; 2022-09-26 13:59:45 +03:00
Nikita Sinelnikov d34a5faa11 - fixed restriction base on term restriction settings; 2022-09-03 01:56:03 +03:00
Nikita Sinelnikov fc1ecbf74a - fixed text filter label on the member directory; 2022-08-17 18:54:12 +03:00
Nikita Sinelnikov d234e7136b - added ability for 3rd-party same page upgrade fields; 2022-08-15 19:58:18 +03:00
Nikita Sinelnikov 86a4ec9103 Merge pull request #1064 from ultimatemember/development/2.4.3 
Development/2.4.3
 2022-08-15 14:42:39 +03:00
Nikita Sinelnikov 5281c1e654 - fixed upgrade script; 2022-08-15 14:25:19 +03:00
Nikita Sinelnikov 6aa634f812 Merge pull request #1026 from ultimatemember/fixed/wp-admin-performance 
Fixed/wp admin performance
 2022-08-13 02:28:52 +03:00
Nikita Sinelnikov 1da32184df - the fix for the flushing cache; 2022-08-13 00:31:23 +03:00
Nikita Sinelnikov c1b3b0d3c4 - fixed issues related to the registration users with awaiting admin review or email confirmation; 2022-08-12 23:07:16 +03:00
Nikita Sinelnikov 221e54f6ce - added separate button for the user statuses count cache clearing; 2022-08-12 20:14:39 +03:00
Nikita Sinelnikov f4f84bbd7e - added expiration for the um_count_users_unassigned transient for the checking everyday the users who don't have the account_status meta (registered 3rd-party way); 2022-08-12 16:33:23 +03:00
Nikita Sinelnikov 69321f0cb1 - return from the function update_usermeta when old value the same as new; 2022-08-12 16:20:14 +03:00
Nikita Sinelnikov 5e077d51e6 - set release date to 17 August; 
- added changelog;
- added update scripts for the phone fields;
 2022-08-12 15:51:57 +03:00
Nikita Sinelnikov 9b74beab8b - fixed performance issue by using add or deduct count instead of the WP_Users_Query; 2022-08-12 02:53:25 +03:00
Nikita Sinelnikov b98f2a6edf - fixed issue with visible ID. Changed it to the user_login. It's WordPress native logic for reset password links and form; 2022-08-11 21:49:19 +03:00
Nikita Sinelnikov 95a26c97bb Merge pull request #1033 from ultimatemember/feature/phone_field 
Phone fields (issue #988)
 2022-08-11 15:44:24 +03:00
Champ Camba 9fe061de4d Fix info_text sanitazation to accept specific tags for formatting 2022-08-08 14:03:03 +08:00
ashubawork 1568f0189c - change label in filter for select 2022-07-25 22:09:39 +03:00
ashubawork c8c7ee8fd9 - leave symbol + 2022-07-15 10:08:30 +03:00