Commit Graph

1699 Commits

Author SHA1 Message Date
Nikita Sinelnikov d9919c249b Merge branch 'development/2.5.2' of https://github.com/ultimatemember/ultimatemember into development/2.5.2 2022-11-09 03:17:40 +02:00
Nikita Sinelnikov 2004aa7dde Custom dropdown callback functions security enhancements:
- avoid using different letter case for bypass the blacklist e.g. phpInfo
- avoid using root namespace for bypass the blacklist e.g. \phpinfo
2022-11-09 03:17:23 +02:00
Nikita Sinelnikov faa5a9d4f9 Update class-admin-upgrade.php 2022-11-03 01:46:31 +02:00
Champ Camba 907ac38a76 Add validation for upgrade package 2022-11-02 12:33:22 +08:00
Nikita Sinelnikov cb4ca7dbe5 Merge pull request #1087 from ultimatemember/development/2.5.1
2.5.1 release
2022-10-27 01:34:27 +03:00
Nikita Sinelnikov fac2f9fdc5 - fixed #1085; 2022-10-24 17:34:54 +03:00
Nikita Sinelnikov af13de140a - fixed using "'" symbols in emails. There is possible to register with it and login after that. Closed #1059; 2022-10-24 16:22:04 +03:00
Nikita Sinelnikov b547d899bc - removed outdated setting using in code (force_display_name_capitlized). Moved the functionality to extended repo:
https://github.com/ultimatemember/Extended/tree/main/um-capitalize-name#readme
2022-10-24 14:29:04 +03:00
Aswin Giri 99d2b4ec27 Fixed issue with class name in checkbox and radio
Issue: class name being 'activeright' instead of 'active right' .
Fix: fixed by adding space around the class name ' right '.
2022-10-23 22:09:17 +05:45
Nikita Sinelnikov e6b4d66b44 - fixed #1071 typo; 2022-10-10 19:10:58 +03:00
Nikita Sinelnikov 98d416deaa - ignore auto_login if the user is already logged in. Fixed #1070; 2022-10-10 18:48:16 +03:00
Nikita Sinelnikov 26b54a48c4 - probably fixed #1075; 2022-10-10 18:02:10 +03:00
Nikita Sinelnikov c8fac38bb9 - fixed #1077; 2022-10-10 17:57:44 +03:00
Nikita Sinelnikov 5db8232202 - fixed restriction post displaying when 404 is enabled and old restiction logic isn't active; 2022-10-10 17:42:52 +03:00
Nikita Sinelnikov a93970aa56 - probably fixed #1078; 2022-10-10 17:11:21 +03:00
Nikita Sinelnikov 6746f0ce03 - fixed directory checking for localhosts; 2022-10-10 15:29:30 +03:00
Nikita Sinelnikov 0c8e24a194 - fixed #1081; 2022-10-10 14:10:32 +03:00
Nikita Sinelnikov 8cdbafe879 - changed getting blacklist functions; 2022-10-06 15:27:51 +03:00
Nikita Sinelnikov aa6a238c61 - added callbacks blacklist. Added PHP command execution functions here to exclude the running them from the custom callback; 2022-09-30 12:31:40 +03:00
Nikita Sinelnikov e1bc94c110 - fixed Directory Traversal vulnerability. Using realpath for that; 2022-09-27 15:13:35 +03:00
Nikita Sinelnikov 14dc36b813 - fixed directory traversal vulnerability; 2022-09-27 13:58:01 +03:00
Nikita Sinelnikov 7bff69f52b - fixed admin upgrade scripts and upgrades pack validation; 2022-09-26 13:59:45 +03:00
Nikita Sinelnikov d34a5faa11 - fixed restriction base on term restriction settings; 2022-09-03 01:56:03 +03:00
Nikita Sinelnikov fc1ecbf74a - fixed text filter label on the member directory; 2022-08-17 18:54:12 +03:00
Nikita Sinelnikov d234e7136b - added ability for 3rd-party same page upgrade fields; 2022-08-15 19:58:18 +03:00
Nikita Sinelnikov 86a4ec9103 Merge pull request #1064 from ultimatemember/development/2.4.3
Development/2.4.3
2022-08-15 14:42:39 +03:00
Nikita Sinelnikov 5281c1e654 - fixed upgrade script; 2022-08-15 14:25:19 +03:00
Nikita Sinelnikov 6aa634f812 Merge pull request #1026 from ultimatemember/fixed/wp-admin-performance
Fixed/wp admin performance
2022-08-13 02:28:52 +03:00
Nikita Sinelnikov 1da32184df - the fix for the flushing cache; 2022-08-13 00:31:23 +03:00
Nikita Sinelnikov c1b3b0d3c4 - fixed issues related to the registration users with awaiting admin review or email confirmation; 2022-08-12 23:07:16 +03:00
Nikita Sinelnikov 221e54f6ce - added separate button for the user statuses count cache clearing; 2022-08-12 20:14:39 +03:00
Nikita Sinelnikov f4f84bbd7e - added expiration for the um_count_users_unassigned transient for the checking everyday the users who don't have the account_status meta (registered 3rd-party way); 2022-08-12 16:33:23 +03:00
Nikita Sinelnikov 69321f0cb1 - return from the function update_usermeta when old value the same as new; 2022-08-12 16:20:14 +03:00
Nikita Sinelnikov 5e077d51e6 - set release date to 17 August;
- added changelog;
- added update scripts for the phone fields;
2022-08-12 15:51:57 +03:00
Nikita Sinelnikov 9b74beab8b - fixed performance issue by using add or deduct count instead of the WP_Users_Query; 2022-08-12 02:53:25 +03:00
Nikita Sinelnikov b98f2a6edf - fixed issue with visible ID. Changed it to the user_login. It's WordPress native logic for reset password links and form; 2022-08-11 21:49:19 +03:00
Nikita Sinelnikov 95a26c97bb Merge pull request #1033 from ultimatemember/feature/phone_field
Phone fields (issue #988)
2022-08-11 15:44:24 +03:00
Champ Camba 9fe061de4d Fix info_text sanitazation to accept specific tags for formatting 2022-08-08 14:03:03 +08:00
ashubawork 1568f0189c - change label in filter for select 2022-07-25 22:09:39 +03:00
ashubawork c8c7ee8fd9 - leave symbol + 2022-07-15 10:08:30 +03:00
yuriinalivaiko c0f5ec75e2 - fix fatal error on unset 2022-07-12 19:35:22 +03:00
Nikita Sinelnikov 5df4dfcde5 Merge pull request #1038 from ultimatemember/fix/tab_edit_url
Edit tabs URL
2022-07-07 14:36:13 +03:00
Nikita Sinelnikov fb6a4f5679 - fixed security vulnerability in member directories queries; 2022-07-07 14:30:10 +03:00
ashubawork 4da0ae5392 - fix url for edit tabs 2022-07-06 13:04:09 +03:00
ashubawork bc8a0b1f04 - fix code for phone field 2022-06-30 09:33:47 +03:00
ashubawork 6440499b17 - change type for phones fields 2022-06-29 13:49:10 +03:00
Nikita Sinelnikov d1b4b08af0 - added flushing the users query transients; 2022-06-20 20:24:31 +03:00
Nikita Sinelnikov c9f90c54dd - User queries performance fix; 2022-06-20 17:29:31 +03:00
Nikita Sinelnikov fa9b85773e - fixed using special chars inside the password; 2022-06-10 01:53:35 +03:00
Nikita Sinelnikov 03af2b3c0c - fixed #1002; 2022-06-09 17:31:49 +03:00