|
3 | 3 | Plugin Name: CodeBard's Patron Button and Widgets for Patreon |
4 | 4 | Plugin URI: https://wordpress.org/plugins/patron-button-and-widgets-by-codebard/ |
5 | 5 | Description: Patreon Patron Buttons, Widgets and Patreon Functions |
6 | | - Version: 2.2.4 |
| 6 | + Version: 2.2.5 |
7 | 7 | Author: CodeBard |
8 | 8 | Author URI: https://codebard.com |
9 | 9 | Text Domain: cb_p6 |
@@ -66,7 +66,7 @@ private function __construct() |
66 | 66 |
|
67 | 67 | if(isset($_REQUEST[$this->internal['prefix'].'action'] )) |
68 | 68 | { |
69 | | - $this->internal['requested_action'] = filter_var( $_REQUEST[$this->internal['prefix'].'action'], FILTER_SANITIZE_STRING); |
| 69 | + $this->internal['requested_action'] = preg_replace('/[^\w-]/', '', $_REQUEST[$this->internal['prefix'].'action']); |
70 | 70 | } |
71 | 71 | else |
72 | 72 | { |
@@ -693,7 +693,7 @@ public function do_admin_page_tabs_c() |
693 | 693 |
|
694 | 694 | if(isset($_REQUEST[$this->internal['prefix'].'tab'])) |
695 | 695 | { |
696 | | - $tab = filter_var( $_REQUEST[$this->internal['prefix'].'tab'], FILTER_SANITIZE_STRING ) ; |
| 696 | + $tab = preg_replace('/[^\w-]/', '', $_REQUEST[$this->internal['prefix'].'tab']) ; |
697 | 697 | } |
698 | 698 |
|
699 | 699 | if(!isset($tab)) |
@@ -813,7 +813,7 @@ public function do_settings_pages_c($v1) |
813 | 813 |
|
814 | 814 | if(isset($_REQUEST[$this->internal['prefix'] . 'tab'])) |
815 | 815 | { |
816 | | - $tab = filter_var( $_REQUEST[$this->internal['prefix'].'tab'], FILTER_SANITIZE_STRING ); |
| 816 | + $tab = preg_replace('/[^\w-]/', '', $_REQUEST[$this->internal['prefix'].'tab']); |
817 | 817 | } |
818 | 818 | else |
819 | 819 | { |
@@ -862,7 +862,7 @@ public function do_admin_settings_form_header_c() |
862 | 862 |
|
863 | 863 | if(isset($_REQUEST[$this->internal['prefix'] . 'tab'])) |
864 | 864 | { |
865 | | - $tab = filter_var( $_REQUEST[$this->internal['prefix'] . 'tab'], FILTER_SANITIZE_STRING ); |
| 865 | + $tab = preg_replace('/[^\w-]/', '', $_REQUEST[$this->internal['prefix'] . 'tab'] ); |
866 | 866 |
|
867 | 867 | } |
868 | 868 | else |
@@ -891,7 +891,7 @@ public function do_admin_settings_form_footer_c() |
891 | 891 |
|
892 | 892 | if(isset($_REQUEST['tab'])) |
893 | 893 | { |
894 | | - $tab = filter_var( $_REQUEST['tab'], FILTER_SANITIZE_STRING ); |
| 894 | + $tab = preg_replace('/[^\w-]/', '', $_REQUEST['tab'] ); |
895 | 895 |
|
896 | 896 | } |
897 | 897 | else |
|
0 commit comments