Woodojo uses the add_query_arg() and remove_query_arg() functions. Does it need to be/will it be updated?

It looks like this plugin contains a few instances of the problematic usage of these functions. Could you verify this and let me know if you will be issuing an update? We are auditing this issue for clients. Thanks!

https://www.ads-software.com/plugins/term-management-tools/

I noticed what to me seemed like some examples of this issue in your excellent plugin Admin Menu Editor, at least if I fully understand the documentation omission that led to it. For instance:

$hide_url = add_query_arg($hide_param_name, 1);

Since no URL is provided in the third parameter of add_query_arg, does this mean that the vulnerability exists in your code? There were other examples but I’m sure you are more familiar with it than I. Please let me know if I am mistaken, and/or if there will be an update soon to handle it. I’m trying to complete a security audit for clients.

Thanks again for your work.

https://www.ads-software.com/plugins/admin-menu-editor/

I have a new query inside the page.

When I call wp_pagenavi from https://test.com/net/x-page this adress

it creates me page adresses like https://test.com/net/x-page/page2
https://test.com/net/x-page/page3 etc..

I want to change this adress’s to https://test.com/c/yc/page2
https://test.com/c/yc/page3 to prevent dublicate content. to link it (category)

I found that this adress given by get_pagenum_link( $page ) function from wordpress to the wp_pagenavi.

And get_pagenum_link function uses remove_query_arg to obtain this adress.

But this process being before all query.

So how can I change this adress from net/x-page/page2 to /c/yc/page2

If I cannot solve the problem I will redirect net/x-page/page2 page to the /c/yc/page2 but this will not solve my problem because I want to show page’s content in first page.

Are there any solution

https://www.ads-software.com/extend/plugins/wp-pagenavi/

I have a new query inside the page.

When I call wp_pagenavi from https://test.com/net/x-page this adress

it creates me page adresses like https://test.com/net/x-page/page2
https://test.com/net/x-page/page3 etc..

I want to change this adress’s to https://test.com/c/yc/page2
https://test.com/c/yc/page3 to prevent dublicate content. to link it (category)

I found that this adress given by get_pagenum_link( $page ) function from wordpress to the wp_pagenavi.

And get_pagenum_link function uses remove_query_arg to obtain this adress.

But this process being before all query.

So how can I change this adress from net/x-page/page2 to /c/yc/page2

If I cannot solve the problem I will redirect net/x-page/page2 page to the /c/yc/page2 but this will not solve my problem because I want to show page’s content in first page.

Are there any solution

https://www.ads-software.com/extend/plugins/wp-pagenavi/

I have a new query inside the page.

When I call wp_pagenavi from https://test.com/net/x-page this adress

it creates me page adresses like https://test.com/net/x-page/page2
https://test.com/net/x-page/page3 etc..

I want to change this adress’s to https://test.com/c/yc/page2
https://test.com/c/yc/page3 to prevent dublicate content. to link it (category)

I found that this adress given by get_pagenum_link( $page ) function from wordpress to the wp_pagenavi.

And get_pagenum_link function uses remove_query_arg to obtain this adress.

But this process being before all query.

So how can I change this adress from net/x-page/page2 to /c/yc/page2

If I cannot solve the problem I will redirect net/x-page/page2 page to the /c/yc/page2 but this will not solve my problem because I want to show page’s content in first page.

Are there any solution

https://www.ads-software.com/extend/plugins/wp-pagenavi/

remove_query_arg('action',  $_SERVER['HTTP_REFERER']);
$redirect = remove_query_arg('id', $_SERVER['HTTP_REFERER']);
wp_redirect($redirect);

the other by passing an array to the method.

$redirect = remove_query_arg(array('id', 'action'),  $_SERVER['HTTP_REFERER']);
wp_redirect($redirect);

None is working. Tried to google for an example, but am only able to find with one variable to remove.

Any ideas?