Commit Graph

1374 Commits

Author SHA1 Message Date
Claudio Sanches 0b861d6587 Fixed filetype check for digital downloads, closes #8316
@mikejolley
2015-06-07 22:39:32 -03:00
Justin Shreve e88c1bfb9e When the status is changed via bulk actions or by the status button, execute order.updated. 2015-06-05 16:43:24 +00:00
Mike Jolley a4c2a73050 Max array keys 2015-06-05 13:37:45 +01:00
Justin Shreve 01a19cc0c7 Round the total_pages calculation up so we always display the right number of pages. 2015-06-03 23:05:52 +00:00
Mike Jolley 2febc8f20a Add capability checks to ajax requests
Closes #15
2015-06-01 13:38:00 +01:00
Mike Jolley 1505424469 Define allowed_file_types
#13
2015-06-01 13:37:43 +01:00
Mike Jolley 527311d553 Validate file types when saving products. Closes #13
Handles 3 possible types of file;
  1. Relative path on server
  2. Absolute URL
  3. Shortcodes

URLs without extensions are not validated.
2015-06-01 13:37:39 +01:00
Mike Jolley 5b435024ea Use htmlspecialchars to ensure characters get encoded for select2
We cannot update to select2 4.0 until a major release. Closes #4
2015-06-01 13:37:26 +01:00
Mike Jolley c5bb4ad473 Fix tooltip implode 2015-06-01 13:37:21 +01:00
Mike Jolley ed99be9aed Sanitize tooltips with htmlspecialchars and remove esc_attr usage
Part of #4
2015-06-01 13:36:03 +01:00
Claudio Sanches 51c8bbf87c wrong nonce verification 2015-06-01 13:33:51 +01:00
Mike Jolley ec5a693ad7 Use prepare for updating attributes
Closes #7
2015-06-01 13:29:02 +01:00
Claudio Sanches 9eb3b6ddf9 Changed all requests with wp_remote_* to wp_safe_remote_* 2015-06-01 13:28:55 +01:00
Alexander Concha c1db266e80 Explicitly cast as integer the rating comment meta.
On multisite this can contain arbitrary values.
2015-06-01 13:27:16 +01:00
Claudio Sanches 48094b9bf2 Added nonces and check capability when hide admin notices 2015-06-01 13:19:26 +01:00
Alexander Concha f194330aeb Escape properly echoed values
The variables $base_slug/$structures may contain unsafe values due to
the use of urldecode. For example if the post slug is '%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E'
2015-06-01 12:59:03 +01:00
Alexander Concha f38bc86c5d Escape properly the metadata to be copied.
Fixes a SQL injection because the meta key can contain arbitrary values.
2015-06-01 12:58:56 +01:00
Ben Bidner 7b9a22208e readds the `$the_product` global variable 2015-06-01 12:54:14 +01:00
Mike Jolley 1ce272b385 [2.3] Tweak transient clear SQL 2015-06-01 11:38:43 +01:00
Mike Jolley b9708c4df9 Show refunded total shipping and taxes
Closes #8222
2015-06-01 11:06:11 +01:00
Mike Jolley 1e3fcd0e6d [2.3] Avoid initialising classes when saving 2015-05-29 17:38:25 +01:00
Mike Jolley 0a3defd798 Move tax enabled check 2015-05-29 14:55:57 +01:00
roykho b9eefa58fa use esc_textarea function 2015-05-28 16:08:22 -07:00
roykho 54b0a0ca54 changed dynamic variation description to allow limited HTML and some sanitized tweaks 2015-05-28 14:31:45 -07:00
Mike Jolley e51eae80c6 Merge pull request #8167 from roykho/dynamic-variation-description
Dynamic variation description
2015-05-28 15:53:03 +01:00
Mike Jolley 5cac639cff Merge branch 'improve-refund-reporting' Closes #8028
Conflicts:
	includes/admin/reports/class-wc-report-sales-by-date.php
	includes/updates/woocommerce-update-2.4.php
2015-05-28 14:41:20 +01:00
Claudio Sanches 676e09fdd3 Added new woocommerce_api_keys table in wpmu exclude and in status report 2015-05-27 16:46:43 -03:00
Claudio Sanches f503cda874 Improved hold stock input width, closes 8233 2015-05-27 14:26:12 -03:00
Claudio Sanches 169e72b824 Added extra arg to all woocommerce_order_item_name filters #8159 2015-05-27 13:29:15 -03:00
Claudio Sanches 6ff7215f3c Improved the error display for #7959 2015-05-27 13:19:44 -03:00
Claudio Sanches 5c2b14d89f Standardise case of some strings closes #8125 2015-05-27 12:53:04 -03:00
Claudio Sanches cc9721ed9d Merge pull request #7959 from tivnet/patch-4
Check for non-existing attribute ID
2015-05-27 12:24:40 -03:00
Claudio Sanches 267c481d86 Improved admin bar visit store link #8196 2015-05-27 11:55:32 -03:00
Mike Jolley 15e3d23022 Merge pull request #8209 from ChromeOrange/master
Update html-admin-page-status-report.php
2015-05-26 17:50:37 +01:00
Claudio Sanches d53d21781b [2.3] Fixed product category media upload modal and some coding standards, closes #8227 2015-05-26 10:24:49 -03:00
Shiva Poudel 9a818503b9 Updated blockUI Version 2015-05-25 17:03:41 +05:45
Mike Jolley 62c70603ec [2.3] When updating transients, clear previous version of transients
Closes #8131 @claudiosmweb
2015-05-25 01:48:17 +01:00
Andrew Benbow 79d4d921fd Update html-admin-page-status-report.php 2015-05-23 07:22:12 +01:00
Andrew Benbow 54437afc5c Update html-admin-page-status-report.php 2015-05-22 19:33:59 +01:00
Claudio Sanches be0f93f112 [2.3] Fixed theme check notice for core supported themes, closes #8208 2015-05-22 13:52:18 -03:00
Fulvio Notarstefano c0dda8c582 Typos conditonal_includes -> conditional_includes
I believe you meant 'conditional' - I don't think it's referenced elsewhere so it should be safe to rename
2015-05-22 16:01:55 +02:00
Mike Jolley 779b53b2bc Merge pull request #8187 from lukasjuhas/master
#8186 memory exhausted problem fix
2015-05-20 13:48:01 -04:00
Mike Jolley c01bc43369 Adjust #8165 to deal with 0 2015-05-19 12:53:03 -04:00
Mike Jolley a08b2e5968 Loop over all posted attributes by referencing max posted key
Closes #8165
2015-05-19 12:46:32 -04:00
Lukas Juhas 21bda86baa #8186 memory exhausted problem fix
#8186 issue
2015-05-19 17:16:41 +01:00
Claudio Sanches e106d57947 Merged #8021 2015-05-18 16:53:04 -03:00
Claudio Sanches db87add809 Updated the auth endpoint to works with the new woocommerce_api_keys database 2015-05-18 16:46:52 -03:00
Claudio Sanches 22bf7d5c81 Created bulk revoke keys 2015-05-18 16:12:47 -03:00
Claudio Sanches 1c6b91ca14 Improved webhooks nonces and actions 2015-05-18 16:01:51 -03:00
Claudio Sanches 772d45bd06 Added method to revoke api keys 2015-05-18 15:46:16 -03:00