Skip to content

Conversation

@upsellpl
Copy link

@upsellpl upsellpl commented Sep 7, 2023

Fixes #

Proposed Changes:
1.
2.
3.

Please do not submit PRs with minified CSS or JS files. This is managed at the time of release by the Core Team

cklosowski and others added 30 commits January 11, 2016 22:20
…/4169

Fix missing second argument for wpdb()->prepare. awesomemotive#4169
…/4155

Pass context to date() to ensure the timezone is properly set when ge…
…/4174

array index check hardening on process add to cart
…/4166

Use Class to update status in admin/payments/actions.php::edd_update_…
…ncyOnPayment

Added logic to ensure that a currency is always associated to a payment
…/4167

Allow updating the date on EDD_Payment objects
…/4156

Better backwards compat for settings subsections
…/4178

Run date_default_timezone_set() at top of edd_insert_payment(). awesomemotive#4178
…/4155

Force timezone to be set properly - Issue/4155
remove unused (huge) downloads query on adding discount screen
…t status selected

Just wrote this on a phone. Shows how to solve awesomemotive#4187. Untested.
upsellpl and others added 26 commits March 24, 2022 09:35
dodanie filtra edd_file_download_method_redirect
Fix negative discount code
PB-707 Naprawić nieprawidłowo zliczające się statystyki w zakładce Ra…
PB-732 Naprawić zliczanie kodów zniżkowych
@upsellpl upsellpl marked this pull request as draft September 7, 2023 13:34
@sonarqubecloud
Copy link

SonarCloud Quality Gate failed.    Quality Gate failed

Bug E 194 Bugs
Vulnerability E 8 Vulnerabilities
Security Hotspot E 59 Security Hotspots
Code Smell A 3652 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

idea Catch issues before they fail your Quality Gate with our IDE extension sonarlint SonarLint


// If the main section was empty and we overrode the view with the next subsection, prepare the section for saving
if ( true === $override ) {
?><input type="hidden" name="edd_section_override" value="<?php echo $section; ?>" /><?php

Check failure

Code scanning / SonarCloud

Endpoints should not be vulnerable to reflected cross-site scripting (XSS) attacks

<!--SONAR_ISSUE_KEY:AYrUeaCUHQvOLjvcHmCA-->Change this code to not reflect user-controlled data. <p>See more on <a href="https://sonarcloud.io/project/issues?id=awesomemotive_easy-digital-downloads&issues=AYrUeaCUHQvOLjvcHmCA&open=AYrUeaCUHQvOLjvcHmCA&pullRequest=9669">SonarCloud</a></p>
if ( ( empty( $edd_options['purchase_page'] ) || 'trash' == get_post_status( $edd_options['purchase_page'] ) ) && current_user_can( 'edit_pages' ) && ! get_user_meta( get_current_user_id(), '_edd_set_checkout_dismissed' ) ) {
echo '<div class="error">';
echo '<p>' . sprintf( __( 'No checkout page has been configured. Visit <a href="%s">Settings</a> to set one.', 'edd' ), admin_url( 'edit.php?post_type=download&page=edd-settings' ) ) . '</p>';
echo '<p><a href="' . add_query_arg( array( 'edd_action' => 'dismiss_notices', 'edd_notice' => 'set_checkout' ) ) . '">' . __( 'Dismiss Notice', 'edd' ) . '</a></p>';

Check failure

Code scanning / SonarCloud

Endpoints should not be vulnerable to reflected cross-site scripting (XSS) attacks

<!--SONAR_ISSUE_KEY:AYrUeaNOHQvOLjvcHmHN-->Change this code to not reflect user-controlled data. <p>See more on <a href="https://sonarcloud.io/project/issues?id=awesomemotive_easy-digital-downloads&issues=AYrUeaNOHQvOLjvcHmHN&open=AYrUeaNOHQvOLjvcHmHN&pullRequest=9669">SonarCloud</a></p>
echo '<div class="error">';
echo '<p>' . __( 'Your site appears to be blocking the WordPress ajax interface. This may causes issues with your store.', 'edd' ) . '</p>';
echo '<p>' . sprintf( __( 'Please see <a href="%s" target="_blank">this reference</a> for possible solutions.', 'edd' ), 'https://easydigitaldownloads.com/docs/admin-ajax-blocked' ) . '</p>';
echo '<p><a href="' . add_query_arg( array( 'edd_action' => 'dismiss_notices', 'edd_notice' => 'admin_ajax_inaccessible' ) ) . '">' . __( 'Dismiss Notice', 'edd' ) . '</a></p>';

Check failure

Code scanning / SonarCloud

Endpoints should not be vulnerable to reflected cross-site scripting (XSS) attacks

<!--SONAR_ISSUE_KEY:AYrUeaNOHQvOLjvcHmHO-->Change this code to not reflect user-controlled data. <p>See more on <a href="https://sonarcloud.io/project/issues?id=awesomemotive_easy-digital-downloads&issues=AYrUeaNOHQvOLjvcHmHO&open=AYrUeaNOHQvOLjvcHmHO&pullRequest=9669">SonarCloud</a></p>
echo '<p>' . sprintf( __( 'The Easy Digital Downloads .htaccess file is missing from <strong>%s</strong>!', 'edd' ), edd_get_upload_dir() ) . '</p>';
echo '<p>' . sprintf( __( 'First, please resave the Misc settings tab a few times. If this warning continues to appear, create a file called ".htaccess" in the <strong>%s</strong> directory, and copy the following into it:', 'edd' ), edd_get_upload_dir() ) . '</p>';
echo '<p><pre>' . edd_get_htaccess_rules() . '</pre>';
echo '<p><a href="' . add_query_arg( array( 'edd_action' => 'dismiss_notices', 'edd_notice' => 'htaccess_missing' ) ) . '">' . __( 'Dismiss Notice', 'edd' ) . '</a></p>';

Check failure

Code scanning / SonarCloud

Endpoints should not be vulnerable to reflected cross-site scripting (XSS) attacks

<!--SONAR_ISSUE_KEY:AYrUeaNOHQvOLjvcHmHP-->Change this code to not reflect user-controlled data. <p>See more on <a href="https://sonarcloud.io/project/issues?id=awesomemotive_easy-digital-downloads&issues=AYrUeaNOHQvOLjvcHmHP&open=AYrUeaNOHQvOLjvcHmHP&pullRequest=9669">SonarCloud</a></p>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.