Get WordPress

Plugin Directory

Changeset 3042326

Timestamp:
02/28/2024 07:18:18 AM (5 months ago)
Author:
nextendweb
Message:

3.1.13

  • Security fix: Error message sanitization.
Location:
nextend-facebook-connect/trunk
Files:
12 edited

Legend:

Unmodified
Added
Removed

  • nextend-facebook-connect/trunk/admin/admin.php

    r3039167 r3042326  
    523523        if (is_wp_error($request)) {
    524524
    525             throw new Exception($request->get_error_message());
     525            throw new Exception($request->get_error_message());
    526526        } else if (wp_remote_retrieve_response_code($request) !== 200) {
    527527
    … …  
    535535            }
    536536
    537             throw new Exception(sprintf(__('Unexpected response: %s', 'nextend-facebook-connect'), wp_remote_retrieve_body($request)));
     537            throw new Exception(sprintf(__('Unexpected response: %s', 'nextend-facebook-connect'), wp_remote_retrieve_body($request)));
    538538        }
    539539

  • nextend-facebook-connect/trunk/includes/exceptions.php

    r2267946 r3042326  
    44
    55}
     6
     7
     8
     9
     10
     11
     12
     13

  • nextend-facebook-connect/trunk/includes/oauth2.php

    r2741997 r3042326  
    2727        if (isset($_REQUEST['error']) && isset($_REQUEST['error_description'])) {
    2828            if ($this->validateState()) {
    29                 throw new Exception($_REQUEST['error'] . ': ' . htmlspecialchars_decode($_REQUEST['error_description']));
     29                throw new Exception($_REQUEST['error'] . ': ' . htmlspecialchars_decode($_REQUEST['error_description']));
    3030            }
    3131        }
    … …  
    132132            if (is_wp_error($request)) {
    133133
    134                 throw new Exception($request->get_error_message());
     134                throw new Exception($request->get_error_message());
    135135            } else if (wp_remote_retrieve_response_code($request) !== 200) {
    136136
    … …  
    141141
    142142            if (!is_array($accessTokenData)) {
    143                 throw new Exception(sprintf(__('Unexpected response: %s', 'nextend-facebook-connect'), wp_remote_retrieve_body($request)));
     143                throw new Exception(sprintf(__('Unexpected response: %s', 'nextend-facebook-connect'), wp_remote_retrieve_body($request)));
    144144            }
    145145
    … …  
    163163    protected function errorFromResponse($response) {
    164164        if (isset($response['error'])) {
    165             throw new Exception($response['error'] . ': ' . $response['error_description']);
     165            throw new Exception($response['error'] . ': ' . $response['error_description']);
    166166        }
    167167    }
    … …  
    279279        if (is_wp_error($request)) {
    280280
    281             throw new Exception($request->get_error_message());
     281            throw new Exception($request->get_error_message());
    282282        } else if (wp_remote_retrieve_response_code($request) !== 200) {
    283283
    … …  
    288288
    289289        if (!is_array($result)) {
    290             throw new Exception(sprintf(__('Unexpected response: %s', 'nextend-facebook-connect'), wp_remote_retrieve_body($request)));
     290            throw new Exception(sprintf(__('Unexpected response: %s', 'nextend-facebook-connect'), wp_remote_retrieve_body($request)));
    291291        }
    292292
    … …  
    318318        if (is_wp_error($request)) {
    319319
    320             throw new Exception($request->get_error_message());
     320            throw new Exception($request->get_error_message());
    321321        } else if (wp_remote_retrieve_response_code($request) !== 200) {
    322322            $this->errorFromResponse(json_decode(wp_remote_retrieve_body($request), true));
    … …  
    326326
    327327        if (!is_array($result)) {
    328             throw new Exception(sprintf(__('Unexpected response: %s', 'nextend-facebook-connect'), wp_remote_retrieve_body($request)));
     328            throw new Exception(sprintf(__('Unexpected response: %s', 'nextend-facebook-connect'), wp_remote_retrieve_body($request)));
    329329        }
    330330
    … …  
    340340     */
    341341    protected function extendHttpArgs($http_args) {
    342         $http_args['headers'] = array(
    343             'Authorization' => 'Bearer ' . $this->access_token_data['access_token']
    344         );
     342        if (isset($this->access_token_data['access_token'])) {
     343            $http_args['headers'] = array(
     344                'Authorization' => 'Bearer ' . $this->access_token_data['access_token']
     345            );
     346        }
    345347
    346348        return $http_args;

  • nextend-facebook-connect/trunk/includes/provider.php

    r2989700 r3042326  
    793793        if (!empty($_GET['trackerdata']) && !empty($_GET['trackerdata_hash'])) {
    794794            if (wp_hash($_GET['trackerdata']) === $_GET['trackerdata_hash']) {
    795                 Persistent::set('trackerdata', $_GET['trackerdata']);
     795                Persistent::set('trackerdata', );
    796796            }
    797797        }
    798798        if (!empty($_GET['redirect'])) {
    799             Persistent::set('redirect', $_GET['redirect']);
     799            Persistent::set('redirect', );
    800800        }
    801801    }

  • nextend-facebook-connect/trunk/nextend-facebook-connect.php

    r3039167 r3042326  
    44Plugin URI: https://nextendweb.com/
    55Description: Nextend Social Login displays social login buttons for Facebook, Google and X (formerly Twitter).
    6 Version: 3.1.12
     6Version: 3.1.1
    77Requires PHP: 7.0
    88Requires at least: 4.9

  • nextend-facebook-connect/trunk/nextend-social-login.php

    r3039167 r3042326  
    2121class NextendSocialLogin {
    2222
    23     public static $version = '3.1.12';
    24 
    25     public static $nslPROMinVersion = '3.1.12';
     23    public static $version = '3.1.1';
     24
     25    public static $nslPROMinVersion = '3.1.1';
    2626
    2727    public static $proxyPage = false;

  • nextend-facebook-connect/trunk/providers/facebook/facebook-client.php

    r3039167 r3042326  
    7575        if (is_wp_error($request)) {
    7676
    77             throw new Exception($request->get_error_message());
     77            throw new Exception($request->get_error_message());
    7878        } else if (wp_remote_retrieve_response_code($request) !== 200) {
    7979
    … …  
    8484
    8585        if (!is_array($accessTokenData)) {
    86             throw new Exception(sprintf(__('Unexpected response: %s', 'nextend-facebook-connect'), wp_remote_retrieve_body($request)));
     86            throw new Exception(sprintf(__('Unexpected response: %s', 'nextend-facebook-connect'), wp_remote_retrieve_body($request)));
    8787        }
    8888
    … …  
    9696    protected function errorFromResponse($response) {
    9797        if (isset($response['error'])) {
    98             throw new Exception($response['error']['message']);
     98            throw new Exception($response['error']['message']);
    9999        }
    100100    }

  • nextend-facebook-connect/trunk/providers/google/google-client.php

    r2907957 r3042326  
    6262    protected function errorFromResponse($response) {
    6363        if (isset($response['error']['message'])) {
    64             throw new Exception($response['error']['message']);
     64            throw new Exception($response['error']['message']);
    6565        }
    6666    }

  • nextend-facebook-connect/trunk/providers/twitter/twitter-client.php

    r2267946 r3042326  
    158158        if (is_wp_error($request)) {
    159159
    160             throw new Exception($request->get_error_message());
     160            throw new Exception($request->get_error_message());
    161161        } else if (wp_remote_retrieve_response_code($request) !== 200) {
    162162
    163163            $this->errorFromResponse(json_decode(wp_remote_retrieve_body($request), true));
    164164
    165             throw new Exception(sprintf(__('Unexpected response: %s', 'nextend-facebook-connect'), wp_remote_retrieve_body($request)));
     165            throw new Exception(sprintf(__('Unexpected response: %s', 'nextend-facebook-connect'), wp_remote_retrieve_body($request)));
    166166        }
    167167
    … …  
    217217    private function errorFromResponse($response) {
    218218        if (isset($response['errors']) && is_array($response['errors'])) {
    219             throw new Exception($response['errors'][0]['message']);
     219            throw new Exception($response['errors'][0]['message']);
    220220        }
    221221    }

  • nextend-facebook-connect/trunk/providers/twitter/twitter.php

    r2969204 r3042326  
    298298        }
    299299
    300         throw new Exception(sprintf(__('Unexpected response: %s', 'nextend-facebook-connect'), json_encode($response)));
     300        throw new Exception(sprintf(__('Unexpected response: %s', 'nextend-facebook-connect'), json_encode($response)));
    301301    }
    302302

  • nextend-facebook-connect/trunk/providers/twitter/twitterv2-client.php

    r2907957 r3042326  
    5151            return add_query_arg($args, $this->getEndpointAuthorization());
    5252        } catch (Exception $e) {
    53             throw new Exception($e->getMessage());
     53            throw new Exception($e->getMessage());
    5454        }
    5555    }

  • nextend-facebook-connect/trunk/readme.txt

    r3039167 r3042326  
    55Requires at least: 4.9
    66Tested up to: 6.4.3
    7 Stable tag: 3.1.12
     7Stable tag: 3.1.1
    88Requires PHP: 7.0
    99License: GPLv2 or later
    … …  
    4848* Ultimate Member compatibility
    4949* Easy Digital Downloads compatibility
    50 * Pro providers: LinkedIn, Amazon, VKontakte, WordPress.com, Yahoo, PayPal, Disqus, Apple, GitHub, Microsoft, Line, Discord, Slack, TikTok, Steam, Twitch, Kakao, Reddit and more coming soon
     50* Pro providers: LinkedIn, Amazon, VKontakte, WordPress.com, Yahoo, PayPal, Disqus, Apple, GitHub, Microsoft, Line, Discord, Slack, TikTok, Steam, Twitch, Kakao, Reddit and more coming soon
    5151* Configure whether email address should be asked on registration at each provider
    5252* Configure whether username should be asked on registration at each provider
    … …  
    125125
    126126== Changelog ==
     127
     128
     129
     130
    127131
    128132= 3.1.12 =
Note: See TracChangeset for help on using the changeset viewer.