← All changes | iframe.php +53 -16 4.1 → 5.0 View file →

		@@ -1,19 +1,24 @@
1	1	<?php
2	2	/*
3	3	Plugin Name: iframe
4	4	Plugin URI: http://wordpress.org/plugins/iframe/
5		-Description: [iframe src="http://www.youtube.com/embed/4qsGTXLnmKs" width="100%" height="500"] shortcode
6		-Version: 4.1
	5	+Description: [iframe src="http://www.youtube.com/embed/dUpTjDqjQoo" width="100%" height="500"] shortcode
	6	+Version: 5.0
7	7	Author: webvitaly
8		-Author URI: http://web-profile.com.ua/wordpress/plugins/
	8	+Author URI: http://web-profile.net/wordpress/plugins/
9	9	License: GPLv3
10	10	*/
11	11
	12	+if ( ! defined( 'ABSPATH' ) ) { // Avoid direct calls to this file and prevent full path disclosure
	13	+ exit;
	14	+}
12	15
13		-function iframe_unqprfx_embed_shortcode( $atts ) {
	16	+define('IFRAME_PLUGIN_VERSION', '5.0');
	17	+
	18	+function iframe_plugin_add_shortcode_cb( $atts ) {
14	19	$defaults = array(
15		- 'src' => 'http://www.youtube.com/embed/4qsGTXLnmKs',
	20	+ 'src' => 'http://www.youtube.com/embed/dUpTjDqjQoo',
16	21	'width' => '100%',
17	22	'height' => '500',
18	23	'scrolling' => 'yes',
19	24	'class' => 'iframe-class',
		@@ -19,8 +24,29 @@
19	24	'class' => 'iframe-class',
20	25	'frameborder' => '0'
21	26	);
22	27
	28	+ $allowed_tags = array(
	29	+ 'h1' => array(),
	30	+ 'h2' => array(),
	31	+ 'h3' => array(),
	32	+ 'h4' => array(),
	33	+ 'h5' => array(),
	34	+ 'h6' => array(),
	35	+ 'p' => array(),
	36	+ 'a' => array(
	37	+ 'href' => true,
	38	+ 'title' => true,
	39	+ ),
	40	+ 'br' => array(),
	41	+ 'em' => array(),
	42	+ 'strong' => array()
	43	+ );
	44	+
	45	+ if ( ! is_array( $atts ) ) {
	46	+ $atts = array();
	47	+ }
	48	+
23	49	foreach ( $defaults as $default => $value ) { // add defaults
24	50	if ( ! @array_key_exists( $default, $atts ) ) { // mute warning with "@" when no params at all
25	51	$atts[$default] = $value;
26	52	}
		@@ -25,13 +51,21 @@
25	51	$atts[$default] = $value;
26	52	}
27	53	}
28	54
29		- $html = "\n".'<!-- iframe plugin v.4.1 wordpress.org/plugins/iframe/ -->'."\n";
	55	+ $html = "\n".'<!-- iframe plugin v.'.IFRAME_PLUGIN_VERSION.' wordpress.org/plugins/iframe/ -->'."\n";
30	56	$html .= '<iframe';
31	57	foreach( $atts as $attr => $value ) {
32		- if ( strtolower($attr) != 'same_height_as' AND strtolower($attr) != 'onload'
33		- AND strtolower($attr) != 'onpageshow' AND strtolower($attr) != 'onclick') { // remove some attributes
	58	+ if ( strtolower($attr) == 'src' ) { // sanitize url
	59	+ $value = esc_url( $value );
	60	+ }
	61	+ if ( strtolower($attr) == 'srcdoc' ) { // sanitize html
	62	+ $value = htmlspecialchars_decode( $value );
	63	+ $value = wp_kses( $value, $allowed_tags );
	64	+ $value = esc_html( $value );
	65	+ }
	66	+ // Remove all attributes starting with "on". Examples: onload, onmouseover, onfocus, onpageshow, onclick
	67	+ if ( strpos( strtolower( $attr ), 'on' ) !== 0 ) {
34	68	if ( $value != '' ) { // adding all attributes
35	69	$html .= ' ' . esc_attr( $attr ) . '="' . esc_attr( $value ) . '"';
36	70	} else { // adding empty attributes
37	71	$html .= ' ' . esc_attr( $attr );
		@@ -54,16 +88,19 @@
54	88	}
55	89
56	90	return $html;
57	91	}
58		-add_shortcode( 'iframe', 'iframe_unqprfx_embed_shortcode' );
	92	+add_shortcode( 'iframe', 'iframe_plugin_add_shortcode_cb' );
59	93
60	94
61		-function iframe_unqprfx_plugin_meta( $links, $file ) { // add 'Plugin page' and 'Donate' links to plugin meta row
62		- if ( strpos( $file, 'iframe.php' ) !== false ) {
63		- $links = array_merge( $links, array( '<a href="http://web-profile.com.ua/wordpress/plugins/iframe/" title="Plugin page">Iframe</a>' ) );
64		- $links = array_merge( $links, array( '<a href="http://web-profile.com.ua/donate/" title="Support the development">Donate</a>' ) );
65		- $links = array_merge( $links, array( '<a href="http://codecanyon.net/item/advanced-iframe-pro/5344999?ref=webvitaly">Advanced iFrame Pro</a>' ) );
	95	+function iframe_plugin_row_meta_cb( $links, $file ) {
	96	+ if ( $file == plugin_basename( __FILE__ ) ) {
	97	+ $row_meta = array(
	98	+ 'support' => '<a href="http://web-profile.net/wordpress/plugins/iframe/" target="_blank">' . __( 'Iframe', 'iframe' ) . '</a>',
	99	+ 'donate' => '<a href="http://web-profile.net/donate/" target="_blank">' . __( 'Donate', 'iframe' ) . '</a>',
	100	+ 'pro' => '<a href="https://1.envato.market/Ym5aq" target="_blank">' . __( 'Advanced iFrame Pro', 'iframe' ) . '</a>'
	101	+ );
	102	+ $links = array_merge( $links, $row_meta );
66	103	}
67		- return $links;
	104	+ return (array) $links;
68	105	}
69		-add_filter( 'plugin_row_meta', 'iframe_unqprfx_plugin_meta', 10, 2 );
	106	+add_filter( 'plugin_row_meta', 'iframe_plugin_row_meta_cb', 10, 2 );