← All changes | iframe.php +31 -36 3.0 → 4.5 View file →

		@@ -1,19 +1,24 @@
1	1	<?php
2	2	/*
3	3	Plugin Name: iframe
4	4	Plugin URI: http://wordpress.org/plugins/iframe/
5		-Description: [iframe src="http://www.youtube.com/embed/4qsGTXLnmKs" width="100%" height="500"] shortcode
6		-Version: 3.0
	5	+Description: [iframe src="http://www.youtube.com/embed/oDlbBy9vfgI" width="100%" height="500"] shortcode
	6	+Version: 4.5
7	7	Author: webvitaly
8		-Author URI: http://web-profile.com.ua/wordpress/plugins/
	8	+Author URI: http://web-profile.net/wordpress/plugins/
9	9	License: GPLv3
10	10	*/
11	11
	12	+if ( ! defined( 'ABSPATH' ) ) { // Avoid direct calls to this file and prevent full path disclosure
	13	+ exit;
	14	+}
12	15
13		-function iframe_unqprfx_embed_shortcode( $atts, $content = null ) {
	16	+define('IFRAME_PLUGIN_VERSION', '4.5');
	17	+
	18	+function iframe_plugin_add_shortcode_cb( $atts ) {
14	19	$defaults = array(
15		- 'src' => 'http://www.youtube.com/embed/4qsGTXLnmKs',
	20	+ 'src' => 'http://www.youtube.com/embed/oDlbBy9vfgI',
16	21	'width' => '100%',
17	22	'height' => '500',
18	23	'scrolling' => 'yes',
19	24	'class' => 'iframe-class',
		@@ -25,33 +30,20 @@
25	30	$atts[$default] = $value;
26	31	}
27	32	}
28	33
29		- // get_params_from_url
30		- if ( isset( $atts["get_params_from_url"] ) && ( $atts["get_params_from_url"] == '1' || $atts["get_params_from_url"] == 1 ) ) {
31		- $encode_string = '';
32		- if ( $_GET != NULL ) {
33		- if ( strpos( $atts["src"], '?' ) ) { // if we already have '?' and GET params
34		- $encode_string = '&';
35		- } else {
36		- $encode_string = '?';
37		- }
38		- foreach( $_GET as $key => $value ) {
39		- $encode_string .= $key.'='.$value.'&';
40		- }
41		- }
42		- $encode_string = rtrim($encode_string, '&'); // remove last '&'
43		- $atts["src"] .= $encode_string;
44		- }
45		-
46		- $html = "\n".'<!-- iframe plugin v.3.0 wordpress.org/plugins/iframe/ -->'."\n";
	34	+ $html = "\n".'<!-- iframe plugin v.'.IFRAME_PLUGIN_VERSION.' wordpress.org/plugins/iframe/ -->'."\n";
47	35	$html .= '<iframe';
48	36	foreach( $atts as $attr => $value ) {
49		- if ( $attr != 'same_height_as' ) { // remove some attributes
	37	+ if ( strtolower($attr) == 'src' ) { // sanitize url
	38	+ $value = esc_url( $value );
	39	+ }
	40	+ if ( strtolower($attr) != 'same_height_as' AND strtolower($attr) != 'onload'
	41	+ AND strtolower($attr) != 'onpageshow' AND strtolower($attr) != 'onclick') { // remove some attributes
50	42	if ( $value != '' ) { // adding all attributes
51		- $html .= ' ' . $attr . '="' . $value . '"';
	43	+ $html .= ' ' . esc_attr( $attr ) . '="' . esc_attr( $value ) . '"';
52	44	} else { // adding empty attributes
53		- $html .= ' ' . $attr;
	45	+ $html .= ' ' . esc_attr( $attr );
54	46	}
55	47	}
56	48	}
57	49	$html .= '></iframe>'."\n";
		@@ -60,10 +52,10 @@
60	52	$html .= '
61	53	<script>
62	54	document.addEventListener("DOMContentLoaded", function(){
63	55	var target_element, iframe_element;
64		- iframe_element = document.querySelector("iframe.' . $atts["class"] . '");
65		- target_element = document.querySelector("' . $atts["same_height_as"] . '");
	56	+ iframe_element = document.querySelector("iframe.' . esc_attr( $atts["class"] ) . '");
	57	+ target_element = document.querySelector("' . esc_attr( $atts["same_height_as"] ) . '");
66	58	iframe_element.style.height = target_element.offsetHeight + "px";
67	59	});
68	60	</script>
69	61	';
		@@ -70,16 +62,19 @@
70	62	}
71	63
72	64	return $html;
73	65	}
74		-add_shortcode( 'iframe', 'iframe_unqprfx_embed_shortcode' );
	66	+add_shortcode( 'iframe', 'iframe_plugin_add_shortcode_cb' );
75	67
76	68
77		-function iframe_unqprfx_plugin_meta( $links, $file ) { // add 'Plugin page' and 'Donate' links to plugin meta row
78		- if ( strpos( $file, 'iframe.php' ) !== false ) {
79		- $links = array_merge( $links, array( '<a href="http://web-profile.com.ua/wordpress/plugins/iframe/" title="Plugin page">Iframe</a>' ) );
80		- $links = array_merge( $links, array( '<a href="http://web-profile.com.ua/donate/" title="Support the development">Donate</a>' ) );
81		- $links = array_merge( $links, array( '<a href="http://codecanyon.net/item/advanced-iframe-pro/5344999?ref=webvitaly">Advanced iFrame Pro</a>' ) );
	69	+function iframe_plugin_row_meta_cb( $links, $file ) {
	70	+ if ( $file == plugin_basename( __FILE__ ) ) {
	71	+ $row_meta = array(
	72	+ 'support' => '<a href="http://web-profile.net/wordpress/plugins/iframe/" target="_blank">' . __( 'Iframe', 'iframe' ) . '</a>',
	73	+ 'donate' => '<a href="http://web-profile.net/donate/" target="_blank">' . __( 'Donate', 'iframe' ) . '</a>',
	74	+ 'pro' => '<a href="https://1.envato.market/Ym5aq" target="_blank">' . __( 'Advanced iFrame Pro', 'iframe' ) . '</a>'
	75	+ );
	76	+ $links = array_merge( $links, $row_meta );
82	77	}
83		- return $links;
	78	+ return (array) $links;
84	79	}
85		-add_filter( 'plugin_row_meta', 'iframe_unqprfx_plugin_meta', 10, 2 );
	80	+add_filter( 'plugin_row_meta', 'iframe_plugin_row_meta_cb', 10, 2 );