petermolnar/keyring-reactions-importer
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

adding input sanitizers for safety

Browse source
This commit is contained in:
Peter Molnar 2015-03-20 10:34:21 +00:00
parent b207c17a97
commit e0d8a2a052
1 changed files with 12 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
keyring-reactions-importer.php
View file

@ -233,7 +233,7 @@ abstract class Keyring_Reactions_Base {
$this->set_option( array( $this->set_option( array(
'auto_import' => (bool) $_POST['auto_import'], 'auto_import' => (bool) $_POST['auto_import'],
'auto_approve' => (bool) $_POST['auto_approve'], 'auto_approve' => (bool) $_POST['auto_approve'],
'limit_posts' => $_POST['limit_posts'], 'limit_posts' => sanitize_text_field($_POST['limit_posts']),
) ); ) );
$this->step = 'import'; $this->step = 'import';
@ -884,7 +884,7 @@ abstract class Keyring_Reactions_Base {
$result = $this->make_all_requests( $method, $todo ); $result = $this->make_all_requests( $method, $todo );
if ( Keyring_Util::is_error( $result ) ) if ( Keyring_Util::is_error( $result ) )
print $result; print_r ($result);
} }
echo "</p>"; echo "</p>";
@ -1048,6 +1048,12 @@ abstract class Keyring_Reactions_Base {
$comment_id = false; $comment_id = false;
// safety first
$comment['comment_author_email'] = filter_var ( $comment['comment_author_email'], FILTER_SANITIZE_EMAIL );
$comment['comment_author_url'] = filter_var ( $comment['comment_author_url'], FILTER_SANITIZE_URL );
$comment['comment_author'] = filter_var ( $comment['comment_author'], FILTER_SANITIZE_STRING);
$comment['comment_content'] = filter_var ( $comment['comment_content'], FILTER_SANITIZE_SPECIAL_CHARS );
//test if we already have this imported //test if we already have this imported
$args = array( $args = array(
'author_email' => $comment['comment_author_email'], 'author_email' => $comment['comment_author_email'],
@ -1066,6 +1072,7 @@ abstract class Keyring_Reactions_Base {
if ( isset( $comment['comment_date']) && !empty($comment['comment_date']) ) { if ( isset( $comment['comment_date']) && !empty($comment['comment_date']) ) {
// in case you're aware of a nicer way of doing this, please tell me // in case you're aware of a nicer way of doing this, please tell me
// or commit a change... // or commit a change...
/*
$tmp = explode ( " ", $comment['comment_date'] ); $tmp = explode ( " ", $comment['comment_date'] );
$d = explode( "-", $tmp[0]); $d = explode( "-", $tmp[0]);
$t = explode (':',$tmp[1]); $t = explode (':',$tmp[1]);
@ -1079,6 +1086,9 @@ abstract class Keyring_Reactions_Base {
'second' => $t[2], 'second' => $t[2],
); );
*/
$args['date_query'] = $comment['comment_date'];
//test if we already have this imported //test if we already have this imported
Keyring_Util::debug(sprintf(__('checking comment existence for %s (with date) for post #%s','keyring'), $comment['comment_author_email'], $post_id)); Keyring_Util::debug(sprintf(__('checking comment existence for %s (with date) for post #%s','keyring'), $comment['comment_author_email'], $post_id));
} }