← All changes | taskbuilder.php +17 -17 5.0.2 → 6.0.6 View file →

		@@ -1,16 +1,19 @@
1	1	<?php
2	2	/**
3	3	* Plugin Name: Taskbuilder
4	4	* Plugin URI: https://taskbuilder.net/
5		- * Description: Wordpress Project Management & Task Management plugin. Easy to keep track of projects & tasks!
6		- * Version: 5.0.2
	5	+ * Description: All-in-One Project & Task Management Tool for WordPress.
	6	+ * Version: 6.0.6
7	7	* Author: Taskbuilder Team
8	8	* Author URI: https://taskbuilder.net/
9		- * Requires at least: 4.4
10		- * Tested up to: 6.9
	9	+ * Requires at least: 5.6
	10	+ * Requires PHP: 7.4
	11	+ * Tested up to: 7.1
11	12	* Text Domain: taskbuilder
12	13	* Domain Path: /lang
	14	+ * License: GPLv3 or later
	15	+ * License URI: https://www.gnu.org/licenses/gpl-3.0.html
13	16	*/
14	17
15	18	if ( ! defined( 'ABSPATH' ) ) {
16	19	exit; // Exit if accessed directly
		@@ -18,9 +21,9 @@
18	21
19	22	if ( ! class_exists( 'WP_Taskbuilder' ) ) :
20	23
21	24	final class WP_Taskbuilder {
22		- public $version = '5.0.2';
	25	+ public $version = '6.0.6';
23	26	public function __construct() {
24	27	// define global constants
25	28	$this->define_constants();
26	29	// Include required files and classes
		@@ -49,8 +52,9 @@
49	52	include_once( WPPM_ABSPATH . 'includes/wppm-install.php' );
50	53	include_once( WPPM_ABSPATH . 'includes/class-wppm-functions.php' );
51	54	include( WPPM_ABSPATH.'includes/wppm_cron.php' );
52	55	include_once( WPPM_ABSPATH . 'includes/wppm_actions.php' );
	56	+ include_once( WPPM_ABSPATH . 'includes/wppm-pro-addons.php' );
53	57	if ($this->is_request('admin')) {
54	58	include_once( WPPM_ABSPATH . 'includes/class-wppm-admin.php' );
55	59	include_once( WPPM_ABSPATH . 'includes/class-wppm-profile-update.php' );
56	60	}
		@@ -56,11 +60,8 @@
56	60	}
57	61	if ($this->is_request('frontend')) {
58	62	include_once( WPPM_ABSPATH . 'includes/class-wppm-frontend.php' );
59	63	}
60		- if( !class_exists( 'EDD_SL_Plugin_Updater' ) ) {
61		- include_once( WPPM_ABSPATH . 'includes/EDD_SL_Plugin_Updater.php' );
62		- }
63	64
64	65	}
65	66
66	67	public function define($name, $value) {
		@@ -80,22 +81,21 @@
80	81
81	82	public function wppm_check_download_file(){
82	83	global $wpdb,$wppmfunction;
83	84	if( isset($_REQUEST['wppm_attachment']) && isset($_REQUEST['tid']) && isset($_REQUEST['tac'])){
84		- $attach_id = intval(sanitize_text_field($_REQUEST['wppm_attachment']));
85		- $auth_code = (sanitize_text_field($_REQUEST['tac']));
86		- $task_id = intval(sanitize_text_field($_REQUEST['tid']));
	85	+ $attach_id = intval(sanitize_text_field(wp_unslash($_REQUEST['wppm_attachment'])));
	86	+ $auth_code = (sanitize_text_field(wp_unslash($_REQUEST['tac'])));
	87	+ $task_id = intval(sanitize_text_field(wp_unslash($_REQUEST['tid'])));
87	88	$task_auth_code = $wppmfunction->get_task_fields($task_id,'task_auth_code');
88	89	$task_auth_code = sanitize_text_field($task_auth_code);
89	90	if($task_auth_code == $auth_code){
90	91	$this->wppm_file_download($attach_id);
91	92	}
92		- }
93		- if( isset($_REQUEST['wppm_attachment']) && isset($_REQUEST['pid']) && isset($_REQUEST['pac'])){
94		- $attach_id = intval(sanitize_text_field($_REQUEST['wppm_attachment']));
95		- $auth_code = (sanitize_text_field($_REQUEST['pac']));
96		- $proj_id = intval(sanitize_text_field($_REQUEST['pid']));
97		- $proj_auth_code = $wppmfunction->get_project_meta($proj_id,'project_auth_code',true);
	93	+ }elseif( isset($_REQUEST['wppm_attachment']) && isset($_REQUEST['pid']) && isset($_REQUEST['pac'])){
	94	+ $attach_id = intval(sanitize_text_field(wp_unslash($_REQUEST['wppm_attachment'])));
	95	+ $auth_code = (sanitize_text_field(wp_unslash($_REQUEST['pac'])));
	96	+ $proj_id = intval(sanitize_text_field(wp_unslash($_REQUEST['pid'])));
	97	+ $proj_auth_code = $wppmfunction->get_project_fields($proj_id,'project_auth_code');
98	98	$proj_auth_code = sanitize_text_field($proj_auth_code);
99	99	if($proj_auth_code == $auth_code){
100	100	$this->wppm_file_download($attach_id);
101	101	}