Skip to content

Commit 0013747

Browse files
Merge pull request #123 from TycheSoftwares/v-1.9.4
Updated version into 1.9.4 & Fixed security nonce.
2 parents 9479f61 + 342be20 commit 0013747

File tree

3 files changed

+15
-12
lines changed

3 files changed

+15
-12
lines changed

includes/component/tracking-data/ts-tracking.php

+7-9
Original file line numberDiff line numberDiff line change
@@ -298,16 +298,14 @@ public static function ts_admin_notices_scripts() {
298298
* @since 6.8
299299
* @access public
300300
*/
301-
302-
public static function ts_admin_notices() {
301+
public static function ts_admin_notices() {
303302
$nonce = $_POST['tracking_notice'];//phpcs:ignore
304-
if ( ! wp_verify_nonce( $nonce, 'tracking_notice' ) ) {
305-
return;
303+
if ( is_user_logged_in() && current_user_can( 'manage_options' ) && wp_verify_nonce( $nonce, 'tracking_notice' ) ) {
304+
update_option( self::$plugin_prefix . '_allow_tracking', 'dismissed' );
305+
FAQ_TS_Tracker::ts_send_tracking_data( false );
306+
die();
306307
}
307-
update_option( self::$plugin_prefix . '_allow_tracking', 'dismissed' );
308-
FAQ_TS_Tracker::ts_send_tracking_data( false );
309-
die();
310-
}
308+
}
311309

312310
/**
313311
* Send the data tracking data to the server.
@@ -351,4 +349,4 @@ public static function ts_track_usage_data() {
351349
</div>
352350
<?php endif;
353351
}
354-
}
352+
}

plugin.php

+2-2
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
* Plugin URI: https://www.tychesoftwares.com/
55
* Description: Plugin to handle the display of FAQs
66
*
7-
* Version: 1.9.3
7+
* Version: 1.9.4
88
*
99
* Author: Tyche Softwares
1010
* Author URI: https://www.tychesoftwares.com/
@@ -44,7 +44,7 @@ class Arconix_FAQ {
4444
* @since 1.6.0
4545
*/
4646
public function __construct() {
47-
$this->version = '1.9.3';
47+
$this->version = '1.9.4';
4848
$this->inc = trailingslashit( plugin_dir_path( __FILE__ ) . '/includes' );
4949
$this->load_dependencies();
5050
$this->load_admin();

readme.txt

+6-1
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
Contributors: jgardner03, tychesoftwares, shasvat
33
Tags: arconix, faq, toggle, accordion, faq plugin, frequently asked questions
44
Requires at least: 3.8
5-
Tested up to: 6.4.3
5+
Tested up to: 6.5
66
Stable tag: trunk
77

88
Arconix FAQ provides an easy way to add FAQ items to your website.
@@ -101,6 +101,11 @@ That's fantastic! Feel free to open an issue or submit a pull request over at [G
101101

102102
== Changelog ==
103103

104+
= 1.9.4 =
105+
* Tweak - Update compatibility with WordPress 6.5.
106+
* Tweak - Update compatibility with WooCommerce 8.7.
107+
* Fix - Cross Site Request Forgery (CSRF) vulnerability.
108+
104109
= 1.9.3 =
105110
* Fix - Cross Site Request Forgery (CSRF) vulnerability.
106111

0 commit comments

Comments
 (0)