Jili slot 777 login register philippines download,49 jili university register.REGISTER NOW GET FREE 888 PESOS REWARDS!

Resolved G.
(@accentsduterroir)

1 year, 7 months ago
Hello,

I updated the plugin today (v1.8.4 to v1.8.5.3), and now my website is broken. I suspect this is related to your recent changes concerning esc_attr and esc_html for XSS injection vulnerability compliance.

However, my code is very straightforward and has been working perfectly until now. Here it is:
```
function ninjaForm( $args = array(), $content = '' ) {    
    if ( is_singular() ) {
        $sendEmail = do_shortcode('[expand title="Send e-mail" trigclass="envoimail" swaptitle="Reduce" targpos="inline"][gd_ninja_forms form_id="5" text="Contact Form" post_contact="1" output="form"][/expand]');
        return $sendEmail;
    }
}
add_shortcode( 'ninjaForm', 'ninjaForm' );
```
Could you please let me know what I should modify?
Thank you in advance for your help.

Viewing 10 replies - 1 through 10 (of 10 total)

Plugin Author twinpictures
(@twinpictures)

1 year, 7 months ago

@accentsduterroir it seems like it’s related to passing a shortcode as the hidden content. we’ll publish an update on github and you can see if that resolves the issue. Yes, these updates are all about being XSS security compliant w/o breaking the plugin for users like… you.

Stand-by for an update… in 5…4…

Tim Derouin
(@tderouindesign)

1 year, 7 months ago

Is this function to use the plugin in an email?

Plugin Author twinpictures
(@twinpictures)

1 year, 7 months ago

3..2..1
Give this version a try and let us know if it resolves your issue:
https://github.com/baden03/collapse-o-matic/releases/tag/1.8.5.4

Plugin Author twinpictures
(@twinpictures)

1 year, 7 months ago

@tderouindesign your words are confusing. Please start your own thread, thank you.

Tim Derouin
(@tderouindesign)

1 year, 7 months ago

I don’t have a need at the moment for a support ticket but was curious about the function as it notes “$sendEmail = do_shortcode”

Just wondering how the function works in case it is something that could be useful for me.

Plugin Author twinpictures
(@twinpictures)

1 year, 7 months ago

@tderouindesign No. In the example above $sendEmail is only a PHP variable that might return a Ninja Form if the visitor is on a single post or page.

Tim Derouin
(@tderouindesign)

1 year, 7 months ago

Ahh, that makes sense. Thank you!

Thread Starter G.
(@accentsduterroir)

1 year, 7 months ago

Wow, I must say you are very responsive, both to my post and to the vulnerability issue. Huge thanks and respect for that.

I can confirm that this update works perfectly and has fixed the issue.
Thank you again for your hard work and best wishes for the future ??

@tderouindesign : yes it’s just a little custom shortcode, and $sendEmail itt’s only a PHP variable not a function.

Plugin Author twinpictures
(@twinpictures)

1 year, 7 months ago

We do what we can.
Issue marked as resolved.
Reviews are always welcomed.

Plugin Author twinpictures
(@twinpictures)

1 year, 6 months ago

Sunset notice.
This plugin is going away. Please find another.

Viewing 10 replies - 1 through 10 (of 10 total)

The topic ‘Broken site after v1.8.5.3 update’ is closed to new replies.