| @@ -1,19 +1,24 @@ | ||
| 1 | 1 | <?php |
| 2 | 2 | /* |
| 3 | 3 | Plugin Name: iframe |
| 4 | 4 | Plugin URI: http://wordpress.org/plugins/iframe/ |
| 5 | -Description: [iframe src="http://www.youtube.com/embed/4qsGTXLnmKs" width="100%" height="500"] shortcode | |
| 6 | -Version: 4.2 | |
| 5 | +Description: [iframe src="http://www.youtube.com/embed/oDlbBy9vfgI" width="100%" height="500"] shortcode | |
| 6 | +Version: 4.5 | |
| 7 | 7 | Author: webvitaly |
| 8 | -Author URI: http://web-profile.com.ua/wordpress/plugins/ | |
| 8 | +Author URI: http://web-profile.net/wordpress/plugins/ | |
| 9 | 9 | License: GPLv3 |
| 10 | 10 | */ |
| 11 | 11 | |
| 12 | +if ( ! defined( 'ABSPATH' ) ) { // Avoid direct calls to this file and prevent full path disclosure | |
| 13 | + exit; | |
| 14 | +} | |
| 12 | 15 | |
| 13 | -function iframe_unqprfx_embed_shortcode( $atts ) { | |
| 16 | +define('IFRAME_PLUGIN_VERSION', '4.5'); | |
| 17 | + | |
| 18 | +function iframe_plugin_add_shortcode_cb( $atts ) { | |
| 14 | 19 | $defaults = array( |
| 15 | - 'src' => 'http://www.youtube.com/embed/4qsGTXLnmKs', | |
| 20 | + 'src' => 'http://www.youtube.com/embed/oDlbBy9vfgI', | |
| 16 | 21 | 'width' => '100%', |
| 17 | 22 | 'height' => '500', |
| 18 | 23 | 'scrolling' => 'yes', |
| 19 | 24 | 'class' => 'iframe-class', |
| @@ -25,11 +30,14 @@ | ||
| 25 | 30 | $atts[$default] = $value; |
| 26 | 31 | } |
| 27 | 32 | } |
| 28 | 33 | |
| 29 | - $html = "\n".'<!-- iframe plugin v.4.2 wordpress.org/plugins/iframe/ -->'."\n"; | |
| 34 | + $html = "\n".'<!-- iframe plugin v.'.IFRAME_PLUGIN_VERSION.' wordpress.org/plugins/iframe/ -->'."\n"; | |
| 30 | 35 | $html .= '<iframe'; |
| 31 | 36 | foreach( $atts as $attr => $value ) { |
| 37 | + if ( strtolower($attr) == 'src' ) { // sanitize url | |
| 38 | + $value = esc_url( $value ); | |
| 39 | + } | |
| 32 | 40 | if ( strtolower($attr) != 'same_height_as' AND strtolower($attr) != 'onload' |
| 33 | 41 | AND strtolower($attr) != 'onpageshow' AND strtolower($attr) != 'onclick') { // remove some attributes |
| 34 | 42 | if ( $value != '' ) { // adding all attributes |
| 35 | 43 | $html .= ' ' . esc_attr( $attr ) . '="' . esc_attr( $value ) . '"'; |
| @@ -54,19 +62,19 @@ | ||
| 54 | 62 | } |
| 55 | 63 | |
| 56 | 64 | return $html; |
| 57 | 65 | } |
| 58 | -add_shortcode( 'iframe', 'iframe_unqprfx_embed_shortcode' ); | |
| 66 | +add_shortcode( 'iframe', 'iframe_plugin_add_shortcode_cb' ); | |
| 59 | 67 | |
| 60 | 68 | |
| 61 | -function iframe_unqprfx_plugin_meta( $links, $file ) { // add links to plugin meta row | |
| 69 | +function iframe_plugin_row_meta_cb( $links, $file ) { | |
| 62 | 70 | if ( $file == plugin_basename( __FILE__ ) ) { |
| 63 | 71 | $row_meta = array( |
| 64 | - 'support' => '<a href="http://web-profile.com.ua/wordpress/plugins/iframe/" target="_blank"><span class="dashicons dashicons-editor-help"></span> ' . __( 'Iframe', 'iframe' ) . '</a>', | |
| 65 | - 'donate' => '<a href="http://web-profile.com.ua/donate/" target="_blank"><span class="dashicons dashicons-heart"></span> ' . __( 'Donate', 'iframe' ) . '</a>', | |
| 66 | - 'pro' => '<a href="http://codecanyon.net/item/advanced-iframe-pro/5344999?ref=webvitalii" target="_blank"><span class="dashicons dashicons-star-filled"></span> ' . __( 'Advanced iFrame Pro', 'iframe' ) . '</a>' | |
| 72 | + 'support' => '<a href="http://web-profile.net/wordpress/plugins/iframe/" target="_blank">' . __( 'Iframe', 'iframe' ) . '</a>', | |
| 73 | + 'donate' => '<a href="http://web-profile.net/donate/" target="_blank">' . __( 'Donate', 'iframe' ) . '</a>', | |
| 74 | + 'pro' => '<a href="https://1.envato.market/Ym5aq" target="_blank">' . __( 'Advanced iFrame Pro', 'iframe' ) . '</a>' | |
| 67 | 75 | ); |
| 68 | 76 | $links = array_merge( $links, $row_meta ); |
| 69 | 77 | } |
| 70 | 78 | return (array) $links; |
| 71 | 79 | } |
| 72 | -add_filter( 'plugin_row_meta', 'iframe_unqprfx_plugin_meta', 10, 2 ); | |
| 80 | +add_filter( 'plugin_row_meta', 'iframe_plugin_row_meta_cb', 10, 2 ); | |
