Plugin Directory

Changeset 3428736


Ignore:
Timestamp:
12/28/2025 09:01:35 PM (7 days ago)
Author:
cameron434
Message:

1.2.0 again

Location:
dialbunny/trunk
Files:
108 added
3 edited

Legend:

Unmodified
Added
Removed
  • dialbunny/trunk/lib/controllers/dashboard.php

    r3428735 r3428736  
    758758    }
    759759    if (!isset($_POST['dialbunny_user'])) { return; exit; }
     760    if (!isset($_POST['videoroom'])) { return; exit; }
    760761    $keys = new DialBunnyKeysClass();
    761762    $accountSid = $keys->TWILIO_SID();
  • dialbunny/trunk/lib/controllers/webcalling.php

    r3428735 r3428736  
    2323      // Try to get existing token within the last 15 minutes
    2424      // Direct database query used below – $wpdb->prepare() is always used to prevent SQL injection.
    25       $result = $wpdb->get_row($wpdb->prepare("SELECT web_token FROM {$wpdb->prefix}dialbunny_phone_details WHERE user = %d LIMIT 1",$user_id)); // phpcs:ignore WordPress.DB.DirectDatabaseQuery
     25      $result = $wpdb->get_row($wpdb->prepare("SELECT web_token FROM {$wpdb->prefix}dialbunny_phone_details WHERE user = %d AND token_created >= (NOW() - INTERVAL 15 MINUTE) LIMIT 1",$user_id)); // phpcs:ignore WordPress.DB.DirectDatabaseQuery
    2626      // AND token_created >= (NOW() - INTERVAL 15 MINUTE)
    2727
  • dialbunny/trunk/lib/views/admin/setup.php

    r3428735 r3428736  
    157157                        ]);
    158158                        foreach ($pages as $page) {
    159                             if (get_option('dialbunny_user_guest_video_page') == $page->ID) { echo '<option selected value="'.$page->ID.'">'. esc_html($page->post_title).'</option>'; }
    160                             else { echo '<option value="'.$page->ID.'">'. esc_html($page->post_title).'</option>'; }
     159                            if (get_option('dialbunny_user_guest_video_page') == $page->ID) { echo '<option selected value="'.esc_attr($page->ID).'">'. esc_html($page->post_title).'</option>'; }
     160                            else { echo '<option value="'.esc_attr($page->ID).'">'. esc_html($page->post_title).'</option>'; }
    161161                        }
    162162                        ?>
Note: See TracChangeset for help on using the changeset viewer.