v7.4.8

larangin · larangin · commit aee1f9eedc5a · 2025-02-17T22:39:11.000-05:00
diff --git a/application/config/constants.php b/application/config/constants.php
@@ -1,7 +1,7 @@
 <?php  if ( ! defined( 'BASEPATH' ) ) {
 	exit( 'No direct script access allowed' );}
 
-define( 'UIFORM_VERSION', '7.4.7' );
+define( 'UIFORM_VERSION', '7.4.8' );
 define( 'ZIGAFORM_F_LITE', 1 );
 define( 'UIFORM_DEBUG', 0 );
 define( 'UIFORM_DEMO', 0 );
diff --git a/application/modules/formbuilder/controllers/frontend.php b/application/modules/formbuilder/controllers/frontend.php
@@ -558,31 +558,31 @@ public function shortcode_uifm_recfvar($atts)
             case 'label':
                 ob_start();
                 ?>
-               <span data-zgfm-id="<?php echo $vars['id']; ?>" data-zgfm-type="0" data-zgfm-atr="0" class="zgfm-recfvar-obj"></span>             
+               <span data-zgfm-id="<?php echo esc_attr($vars['id']); ?>" data-zgfm-type="0" data-zgfm-atr="0" class="zgfm-recfvar-obj"></span>             
                 <?php
                 $output = ob_get_contents();
                 ob_end_clean();
                 break;
             case 'input':
                 ob_start();
                 ?>
-               <span data-zgfm-id="<?php echo $vars['id']; ?>" data-zgfm-atr="1" class="zgfm-recfvar-obj"></span>             
+               <span data-zgfm-id="<?php echo esc_attr($vars['id']); ?>" data-zgfm-atr="1" class="zgfm-recfvar-obj"></span>             
                 <?php
                 $output = ob_get_contents();
                 ob_end_clean();
                 break;
             case 'amount':
                 ob_start();
                 ?>
-               <span data-zgfm-id="<?php echo $vars['id']; ?>" data-zgfm-atr="2" class="zgfm-recfvar-obj"></span>             
+               <span data-zgfm-id="<?php echo esc_attr($vars['id']); ?>" data-zgfm-atr="2" class="zgfm-recfvar-obj"></span>             
                 <?php
                 $output = ob_get_contents();
                 ob_end_clean();
                 break;
             case 'qty':
                 ob_start();
                 ?>
-               <span data-zgfm-id="<?php echo $vars['id']; ?>" data-zgfm-atr="3" class="zgfm-recfvar-obj"></span>             
+               <span data-zgfm-id="<?php echo esc_attr($vars['id']); ?>" data-zgfm-atr="3" class="zgfm-recfvar-obj"></span>             
                 <?php
                 $output = ob_get_contents();
                 ob_end_clean();
@@ -621,7 +621,7 @@ public function shortcode_uifm_form_fvar($atts)
                     ob_start();
                     if ( isset($vars['atr1']) && intval($vars['atr1']) >= 0) {
                         ?>
-                            <div class="zgfm-f-calc-var-lbl zgfm-f-calc-var<?php echo $vars['atr1']; ?>-lbl"></div>             
+                            <div class="zgfm-f-calc-var-lbl zgfm-f-calc-var<?php echo esc_attr($vars['atr1']); ?>-lbl"></div>             
                         <?php
                     }
                       $output = ob_get_contents();
diff --git a/assets/backend/json/manifest.json b/assets/backend/json/manifest.json
diff --git a/change_log.txt b/change_log.txt
@@ -1,4 +1,4 @@
-version 7.4.7
+version 7.4.8
 [fix] - minor security issue
 -----------------------------------------------------------------------------------------------------------------
 version 7.4.6
diff --git a/i18n/languages/backend/wprockf.pot b/i18n/languages/backend/wprockf.pot
@@ -1,12 +1,12 @@
-# Copyright (C) 2025 Zigaform WP Cost Estimation Form Builder 7.4.7
-# This file is distributed under the same license as the Zigaform WP Cost Estimation Form Builder 7.4.7 package.
+# Copyright (C) 2025 Zigaform WP Cost Estimation Form Builder 7.4.8
+# This file is distributed under the same license as the Zigaform WP Cost Estimation Form Builder 7.4.8 package.
 msgid ""
 msgstr ""
-"Project-Id-Version: Zigaform WP Cost Estimation Form Builder 7.4.7\n"
+"Project-Id-Version: Zigaform WP Cost Estimation Form Builder 7.4.8\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"POT-Creation-Date: 2025-02-16 22:09+0000\n"
+"POT-Creation-Date: 2025-02-18 03:33+0000\n"
 "X-Poedit-Basepath: ..\n"
 "X-Poedit-KeywordsList: __;_e;_ex:1,2c;_n:1,2;_n_noop:1,2;_nx:1,2,4c;_nx_noop:1,2,3c;_x:1,2c;esc_attr__;esc_attr_e;esc_attr_x:1,2c;esc_html__;esc_html_e;esc_html_x:1,2c\n"
 "X-Poedit-SearchPath-0: .\n"
diff --git a/i18n/languages/front/wprockf-de_DE.po b/i18n/languages/front/wprockf-de_DE.po
@@ -1,5 +1,5 @@
-# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.7
-# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.7 package.
+# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.8
+# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.8 package.
 msgid ""
 msgstr ""
 "Project-Id-Version: Rocket form\n"
diff --git a/i18n/languages/front/wprockf-en_US.po b/i18n/languages/front/wprockf-en_US.po
@@ -1,5 +1,5 @@
-# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.7
-# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.7 package.
+# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.8
+# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.8 package.
 msgid ""
 msgstr ""
 "Project-Id-Version: Rocket form\n"
diff --git a/i18n/languages/front/wprockf-es_ES.po b/i18n/languages/front/wprockf-es_ES.po
@@ -1,5 +1,5 @@
-# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.7
-# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.7 package.
+# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.8
+# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.8 package.
 msgid ""
 msgstr ""
 "Project-Id-Version: Rocket form\n"
diff --git a/i18n/languages/front/wprockf-fr_FR.po b/i18n/languages/front/wprockf-fr_FR.po
@@ -1,5 +1,5 @@
-# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.7
-# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.7 package.
+# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.8
+# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.8 package.
 msgid ""
 msgstr ""
 "Project-Id-Version: Rocket form\n"
diff --git a/i18n/languages/front/wprockf-it_IT.po b/i18n/languages/front/wprockf-it_IT.po
@@ -1,5 +1,5 @@
-# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.7
-# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.7 package.
+# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.8
+# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.8 package.
 msgid ""
 msgstr ""
 "Project-Id-Version: Rocket form\n"
diff --git a/i18n/languages/front/wprockf-pt_BR.po b/i18n/languages/front/wprockf-pt_BR.po
@@ -1,5 +1,5 @@
-# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.7
-# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.7 package.
+# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.8
+# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.8 package.
 msgid ""
 msgstr ""
 "Project-Id-Version: Rocket form\n"
diff --git a/i18n/languages/front/wprockf-ru_RU.po b/i18n/languages/front/wprockf-ru_RU.po
@@ -1,5 +1,5 @@
-# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.7
-# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.7 package.
+# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.8
+# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.8 package.
 msgid ""
 msgstr ""
 "Project-Id-Version: Rocket form\n"
diff --git a/i18n/languages/front/wprockf-zh_CN.po b/i18n/languages/front/wprockf-zh_CN.po
@@ -1,5 +1,5 @@
-# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.7
-# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.7 package.
+# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.8
+# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.8 package.
 msgid ""
 msgstr ""
 "Project-Id-Version: Rocket form\n"
diff --git a/i18n/languages/front/wprockf.pot b/i18n/languages/front/wprockf.pot
@@ -1,12 +1,12 @@
-# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.7
-# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.7 package.
+# Copyright (C) 2025 Zigaform PHP Form Builder 7.4.8
+# This file is distributed under the same license as the Zigaform PHP Form Builder 7.4.8 package.
 msgid ""
 msgstr ""
-"Project-Id-Version: Zigaform PHP Form Builder 7.4.7\n"
+"Project-Id-Version: Zigaform PHP Form Builder 7.4.8\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"POT-Creation-Date: 2025-02-16 22:09+0000\n"
+"POT-Creation-Date: 2025-02-18 03:33+0000\n"
 "X-Poedit-Basepath: ..\n"
 "X-Poedit-KeywordsList: __;_e;_ex:1,2c;_n:1,2;_n_noop:1,2;_nx:1,2,4c;_nx_noop:1,2,3c;_x:1,2c;esc_attr__;esc_attr_e;esc_attr_x:1,2c;esc_html__;esc_html_e;esc_html_x:1,2c\n"
 "X-Poedit-SearchPath-0: .\n"
diff --git a/install/db/structure.sql b/install/db/structure.sql
@@ -178,7 +178,7 @@ CREATE TABLE `fbcf_uiform_settings` (
 -- ----------------------------
 -- Records of fbcf_uiform_settings
 -- ----------------------------
-INSERT INTO `fbcf_uiform_settings` VALUES ('7.4.7', '1', '', '0', '', '','', '/usr/sbin/sendmail', 'en', '1', 'Company name', 'user@testexample.com', '2016-02-09 00:38:01', '1980-01-01 00:00:01');
+INSERT INTO `fbcf_uiform_settings` VALUES ('7.4.8', '1', '', '0', '', '','', '/usr/sbin/sendmail', 'en', '1', 'Company name', 'user@testexample.com', '2016-02-09 00:38:01', '1980-01-01 00:00:01');
 
 -- ----------------------------
 -- Table structure for `fbcf_uiform_user`
diff --git a/install/db/structure_mysql8.sql b/install/db/structure_mysql8.sql
@@ -178,7 +178,7 @@ CREATE TABLE `fbcf_uiform_settings` (
 -- ----------------------------
 -- Records of fbcf_uiform_settings
 -- ----------------------------
-INSERT INTO `fbcf_uiform_settings` VALUES ('7.4.7', '1', '', '0', '', '','', '/usr/sbin/sendmail', 'en', '1', 'Company name', 'user@testexample.com', '2016-02-09 00:38:01', '1980-01-01 00:00:01');
+INSERT INTO `fbcf_uiform_settings` VALUES ('7.4.8', '1', '', '0', '', '','', '/usr/sbin/sendmail', 'en', '1', 'Company name', 'user@testexample.com', '2016-02-09 00:38:01', '1980-01-01 00:00:01');
 
 -- ----------------------------
 -- Table structure for `fbcf_uiform_user`
diff --git a/readme.txt b/readme.txt
@@ -7,7 +7,7 @@ Tags: form, forms, contact form, custom form, form builder, form creator, form m
 Requires at least: 5.0  
 Tested up to: 6.6.1  
 Requires PHP: 5.4  
-Stable tag: 7.4.7  
+Stable tag: 7.4.8  
 
 Create forms with total control using this powerful drag-and-drop form builder, allowing you to build contact forms or any custom forms in minutes.
 
diff --git a/vendor/autoload.php b/vendor/autoload.php
@@ -4,4 +4,4 @@
 
 require_once __DIR__ . '/composer/autoload_real.php';
 
-return ComposerAutoloaderInitbcfd498a3e73e6f26873acd8112e8e89::getLoader();
+return ComposerAutoloaderInit37d197e6a6d1af2cdb74387302a269b9::getLoader();
diff --git a/vendor/composer/autoload_real.php b/vendor/composer/autoload_real.php
@@ -2,7 +2,7 @@
 
 // autoload_real.php @generated by Composer
 
-class ComposerAutoloaderInitbcfd498a3e73e6f26873acd8112e8e89
+class ComposerAutoloaderInit37d197e6a6d1af2cdb74387302a269b9
 {
     private static $loader;
 
@@ -22,15 +22,15 @@ public static function getLoader()
             return self::$loader;
         }
 
-        spl_autoload_register(array('ComposerAutoloaderInitbcfd498a3e73e6f26873acd8112e8e89', 'loadClassLoader'), true, true);
+        spl_autoload_register(array('ComposerAutoloaderInit37d197e6a6d1af2cdb74387302a269b9', 'loadClassLoader'), true, true);
         self::$loader = $loader = new \Composer\Autoload\ClassLoader();
-        spl_autoload_unregister(array('ComposerAutoloaderInitbcfd498a3e73e6f26873acd8112e8e89', 'loadClassLoader'));
+        spl_autoload_unregister(array('ComposerAutoloaderInit37d197e6a6d1af2cdb74387302a269b9', 'loadClassLoader'));
 
         $useStaticLoader = PHP_VERSION_ID >= 50600 && !defined('HHVM_VERSION') && (!function_exists('zend_loader_file_encoded') || !zend_loader_file_encoded());
         if ($useStaticLoader) {
             require_once __DIR__ . '/autoload_static.php';
 
-            call_user_func(\Composer\Autoload\ComposerStaticInitbcfd498a3e73e6f26873acd8112e8e89::getInitializer($loader));
+            call_user_func(\Composer\Autoload\ComposerStaticInit37d197e6a6d1af2cdb74387302a269b9::getInitializer($loader));
         } else {
             $map = require __DIR__ . '/autoload_namespaces.php';
             foreach ($map as $namespace => $path) {
@@ -51,19 +51,19 @@ public static function getLoader()
         $loader->register(true);
 
         if ($useStaticLoader) {
-            $includeFiles = Composer\Autoload\ComposerStaticInitbcfd498a3e73e6f26873acd8112e8e89::$files;
+            $includeFiles = Composer\Autoload\ComposerStaticInit37d197e6a6d1af2cdb74387302a269b9::$files;
         } else {
             $includeFiles = require __DIR__ . '/autoload_files.php';
         }
         foreach ($includeFiles as $fileIdentifier => $file) {
-            composerRequirebcfd498a3e73e6f26873acd8112e8e89($fileIdentifier, $file);
+            composerRequire37d197e6a6d1af2cdb74387302a269b9($fileIdentifier, $file);
         }
 
         return $loader;
     }
 }
 
-function composerRequirebcfd498a3e73e6f26873acd8112e8e89($fileIdentifier, $file)
+function composerRequire37d197e6a6d1af2cdb74387302a269b9($fileIdentifier, $file)
 {
     if (empty($GLOBALS['__composer_autoload_files'][$fileIdentifier])) {
         require $file;
diff --git a/vendor/composer/autoload_static.php b/vendor/composer/autoload_static.php
@@ -4,7 +4,7 @@
 
 namespace Composer\Autoload;
 
-class ComposerStaticInitbcfd498a3e73e6f26873acd8112e8e89
+class ComposerStaticInit37d197e6a6d1af2cdb74387302a269b9
 {
     public static $files = array (
         '7f55c0c8faca7d96e425512293db1ad1' => __DIR__ . '/../..' . '/includes/wp/wp-includes/formatting.php',
@@ -32,9 +32,9 @@ class ComposerStaticInitbcfd498a3e73e6f26873acd8112e8e89
     public static function getInitializer(ClassLoader $loader)
     {
         return \Closure::bind(function () use ($loader) {
-            $loader->prefixLengthsPsr4 = ComposerStaticInitbcfd498a3e73e6f26873acd8112e8e89::$prefixLengthsPsr4;
-            $loader->prefixDirsPsr4 = ComposerStaticInitbcfd498a3e73e6f26873acd8112e8e89::$prefixDirsPsr4;
-            $loader->classMap = ComposerStaticInitbcfd498a3e73e6f26873acd8112e8e89::$classMap;
+            $loader->prefixLengthsPsr4 = ComposerStaticInit37d197e6a6d1af2cdb74387302a269b9::$prefixLengthsPsr4;
+            $loader->prefixDirsPsr4 = ComposerStaticInit37d197e6a6d1af2cdb74387302a269b9::$prefixDirsPsr4;
+            $loader->classMap = ComposerStaticInit37d197e6a6d1af2cdb74387302a269b9::$classMap;
 
         }, null, ClassLoader::class);
     }

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-version 7.4.7`
	`1`	`+version 7.4.8`
`2`	`2`	`[fix] - minor security issue`
`3`	`3`	`-----------------------------------------------------------------------------------------------------------------`
`4`	`4`	`version 7.4.6`