Prepare for release (#64)

README.TXT

@@ -5,7 +5,7 @@ Tags: listings, classified ads, classified, classifieds, directory plugin, class
 Requires at least: 6.2.0
 Requires PHP: 5.6
 Tested up to: 6.4.3
-Stable tag: 4.3.2
+Stable tag: 4.3.3
 License: GPLv2 or later
 
 Create a classified listings directory, from auto listings to yard sales with AWP Classifieds plugin.
@@ -166,12 +166,14 @@ Yes it can. Our Classifieds directory plugin comes with many user-provided trans
 Yes it is. However, you cannot "network-activate" the plugin (as this will share the database). Activate it on only the subsites on which you need a directory. This can be done under Plugins->Add New as the Administrator user. Do not "network activate" AWPCP as the "super admin".
 
 == Changelog ==
-= 4.3.2 =
+= 4.3.3 =
 * New: Updates for better PHP 8 support.
 * Security: Add more nonce and user role protection for uninstalling and other ajax functions.
+* Security: Hardening for escaping output and SQL queries.
 * Update SelectWoo script version.
 * Fix: Fallback to native dropdowns if there is a conflict with Select2.
 * Fix: SEO Framework updatesfor outdated code.
+* Code: Update to phpcs 3 standards.
 
 = 4.3.1 =
 * Security update against CSRF attacks in some admin pages. add CSRF tokens "nonce".

awpcp.php

@@ -5,7 +5,7 @@
  * Plugin Name: AWP Classifieds Plugin
  * Plugin URI: https://awpcp.com/
  * Description: Run a free or paid classified ads service on your WordPress site.
- * Version: 4.3.2
+ * Version: 4.3.3
  * Author: AWP Classifieds Team
  * Author URI: https://awpcp.com/
  * License: GPLv2 or any later version
@@ -56,7 +56,7 @@
 global $hasregionsmodule;
 global $hasextrafieldsmodule;
 
-$awpcp_db_version = '4.3.2';
+$awpcp_db_version = '4.3.3';
 
 $awpcp_imagesurl      = AWPCP_URL . '/resources/images';
 $hascaticonsmodule    = 0;

functions.php

@@ -1280,7 +1280,8 @@ function awpcp_sanitize_value( $sanitize, &$value ) {
 }
 
 /**
- * @since x.x
+ * @since 4.3.3
+ *
  * @param string $value
  */
 function awpcp_get_server_value( $value ) {
@@ -1856,7 +1857,7 @@ function awpcp_validate_error($field, $errors) {
 }
 
 /**
- * @since x.x
+ * @since 4.3.3
  */
 function awpcp_show_form_error( $field, $errors ) {
     echo wp_kses_post(

includes/form-fields/class-form-fields-renderer.php

@@ -49,7 +49,7 @@ public function get_field( $slug ) {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @param mixed  $form_values The values for this form.
      * @param array  $form_errors An array of form field errors index by field slug.

includes/frontend/class-captcha.php

@@ -48,7 +48,7 @@ public function is_captcha_required() {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      */
     public function show() {
         $this->provider->show();

includes/frontend/class-default-captcha-provider.php

@@ -21,7 +21,7 @@ public function __construct( $max_number ) {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @return void
      */

includes/frontend/class-recaptcha-provider.php

@@ -38,7 +38,7 @@ public function __construct( $site_key, $secret_key, $delegate ) {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @return void
      */

includes/frontend/class-recaptcha-v2.php

@@ -39,7 +39,7 @@ public function enqueue_scripts( $site_key ) {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @return void
      */

includes/frontend/interface-recaptcha-delegate.php

@@ -14,7 +14,7 @@ interface AWPCP_ReCAPTCHADelegate {
     public function enqueue_scripts( $site_key );
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @return void
      */

includes/helpers/class-recaptcha-v3.php

@@ -37,7 +37,7 @@ public function enqueue_scripts( $site_key ) {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @return void
      */

includes/helpers/widgets/class-listing-actions-component.php

@@ -21,7 +21,7 @@ class AWPCP_ListingActionsComponent {
     /**
      * Show the component.
      *
-     * @since x.x
+     * @since 4.3.3
      *
      * @return void
      */

includes/helpers/widgets/class-user-field.php

@@ -29,7 +29,7 @@ protected function find_selected_user( $args ) {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @return void
      */

includes/helpers/widgets/multiple-region-selector.php

@@ -106,7 +106,7 @@ private function get_region_field_options( $context, $type, $selected, $hierarch
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @param string $context      'search' or 'details'
      * @param array  $translations A region type => field name map.

includes/listings/class-listings-content-renderer.php

@@ -142,7 +142,7 @@ private function get_disabled_listing_warning() {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @param string $content   The content of the post.
      * @param object $post      An instance of WP_Post.

includes/media/class-listings-media-uploader-component.php

@@ -76,7 +76,7 @@ public function render( $configuration ) {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @param array $configuration  An array of configuration options.
      *

includes/media/class-media-uploader-component.php

@@ -47,7 +47,7 @@ public function render( $configuration ) {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @param array $configuration  An array of configuration options.
      *

includes/payment-terms-table.php

@@ -79,7 +79,7 @@ public function item_group_name($item) {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @return void
      */
@@ -106,7 +106,7 @@ public function item_attributes($item) {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @return void
      */

includes/payments-api.php

@@ -701,7 +701,7 @@ public function render_account_balance_for_transaction( $transaction ) {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @return void
      */
@@ -729,7 +729,7 @@ public function render_account_balance() {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @return void
      */
@@ -775,7 +775,7 @@ public function render_credit_plans_table($transaction=null, $table_only=false)
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @return void
      */
@@ -796,7 +796,7 @@ public function render_transaction_items($transaction) {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @return void
      */
@@ -848,7 +848,7 @@ public function render_checkout_payment_template($output, $message, $transaction
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @return void
      */
@@ -905,7 +905,7 @@ public function render_checkout_page($transaction, $hidden=array()) {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @return void
      */
@@ -974,7 +974,7 @@ public function render_payment_completed_page($transaction, $action='', $hidden=
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @return void
      */

includes/ui/class-category-selector.php

@@ -52,7 +52,7 @@ public function __construct( $helper, $categories, $template_renderer ) {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @param array $params An array of parameters for the Category Selector component.
      *

includes/ui/class-classifieds-bar.php

@@ -29,7 +29,7 @@ public function __construct( $classifieds_search_bar, $classifieds_menu, $settin
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @param array $components
      *

includes/ui/class-form-steps-component.php

@@ -20,7 +20,7 @@ public function __construct( AWPCP_FormSteps $form_steps ) {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      */
     public function show( $selected_step, $params = [] ) {
         $this->echo = true;

includes/ui/class-payment-terms-list.php

@@ -47,7 +47,7 @@ private function from_view_to_model( $selected_value ) {
     }
 
     /**
-     * @since x.x
+     * @since 4.3.3
      *
      * @return void
      */

includes/views/class-ajax-handler.php

@@ -20,7 +20,7 @@ public function set_content_type( $content_type ) {
 
     /**
      * @since 3.2.2
-     * @deprecated x.x
+     * @deprecated 4.3.3
      */
     public function write( $content ) {
         // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
@@ -29,7 +29,7 @@ public function write( $content ) {
 
     /**
      * @since 3.2.2
-     * @deprecated x.x
+     * @deprecated 4.3.3
      */
     public function close() {
         die();