Release version 3.0.2

= 3.0.2 - 2022/11/01 =
* This maintenance release has a security vulnerability patch, plus compatibility with WordPress major version 6.1.0
* Tweak - Test for compatibility with WordPress 6.1
* Security – This release has a patch for a security vulnerability

a3-portfolio.php

@@ -2,11 +2,11 @@
 /*
 Plugin Name: a3 Portfolio
 Description: Creates a beautiful fully mobile responsive, fully customizable, Google images style portfolio to showcase your work.
-Version: 3.0.1
+Version: 3.0.2
 Author: a3rev Software
 Author URI: https://a3rev.com/
 Requires at least: 5.6
-Tested up to: 6.0
+Tested up to: 6.1
 Text Domain: a3-portfolio
 Domain Path: /languages
 License: GPLv2 or later
@@ -34,7 +34,7 @@
 
 define( 'A3_PORTFOLIO_KEY', 'a3_portfolios' );
 define( 'A3_PORTFOLIO_PREFIX', 'a3_portfolio_' );
-define( 'A3_PORTFOLIO_VERSION', '3.0.1' );
+define( 'A3_PORTFOLIO_VERSION', '3.0.2' );
 define( 'A3_PORTFOLIO_G_FONTS', true );
 
 if ( version_compare( PHP_VERSION, '5.6.0', '>=' ) ) {

admin/admin-init.php

@@ -217,7 +217,7 @@ public function admin_settings_page( $page_data = array() ) {
 					$activated_first_tab = false;
 					$tab_data = false;
 					foreach ( $tabs as $tab ) {
-						echo '<a href="' . add_query_arg( array( 'page' => $current_page, 'tab' => $tab['name'] ), admin_url( $page_data['admin_url'] ) ) . '" class="nav-tab ';
+						echo '<a href="' . esc_url( add_query_arg( array( 'page' => $current_page, 'tab' => $tab['name'] ), admin_url( $page_data['admin_url'] ) ) ) . '" class="nav-tab ';
 						if ( $current_tab == '' && $activated_first_tab === false ) {
 							echo 'nav-tab-active';
 							$activated_first_tab = true;

admin/admin-interface.php

@@ -618,6 +618,10 @@ public function save_settings( $options, $option_name = '' ) {
 		foreach ( $options as $value ) {
 			if ( ! isset( $value['type'] ) ) continue;
 			if ( in_array( $value['type'], array( 'row', 'column', 'heading', 'ajax_submit', 'ajax_multi_submit' ) ) ) continue;
+			if ( stristr( $value['type'], 'custom_' ) !== false ) {
+				do_action( $this->plugin_name . '_save_setting_' . $value['type'], $value );
+				continue;
+			}
 
 			// Save for global settings of plugin framework
 			switch ( $value['type'] ) {
@@ -1030,6 +1034,14 @@ public function save_settings( $options, $option_name = '' ) {
 	/*-----------------------------------------------------------------------------------*/
 
 	public function reset_settings( $options, $option_name = '', $reset = false, $free_version = false ) {
+
+		if ( $reset ) {
+			check_admin_referer( 'save_settings_' . $this->plugin_name );
+
+			if ( ! current_user_can( 'manage_options' ) ) {
+				return false;
+			}
+		}
 
 		if ( !is_array( $options ) || count( $options ) < 1 ) return;
 
@@ -1089,6 +1101,11 @@ public function reset_settings( $options, $option_name = '', $reset = false, $fr
 			if ( ! isset( $value['id'] ) || trim( $value['id'] ) == '' ) continue;
 			if ( ! isset( $value['default'] ) ) $value['default'] = '';
 			if ( ! isset( $value['free_version'] ) ) $value['free_version'] = false;
+
+			if ( stristr( $value['type'], 'custom_' ) !== false ) {
+				do_action( $this->plugin_name . '_reset_setting_' . $value['type'], $value );
+				continue;
+			}
 
 			// For way it has an option name
 			if ( ! isset( $value['separate_option'] ) ) $value['separate_option'] = false;

admin/admin-ui.php

@@ -33,7 +33,7 @@ class Admin_UI
 	 * You must change to correct plugin name that you are working
 	 */
 
-	public $framework_version      = '2.6.0';
+	public $framework_version      = '2.6.2';
 	public $plugin_name            = A3_PORTFOLIO_KEY;
 	public $plugin_path            = A3_PORTFOLIO_NAME;
 	public $google_api_key_option  = '';

admin/includes/fonts_face.php

@@ -623,9 +623,9 @@ public function generate_font_css( $option, $em = '1.2' ) {
         $font_css = '';
 
 		if ( !@$option['style'] && !@$option['size'] && !@$option['color'] )
-			$font_css = 'font-family: '.stripslashes($option["face"]).' !important;';
+			$font_css = 'font-family: '.stripslashes( str_replace( array( '"', "'" ), '', $option["face"] ) ).' !important;';
 		else
-			$font_css = 'font:'.$option['style'].' '.$option['size'].'/' . $line_height . ' ' .stripslashes($option['face']).' !important; color:'.$option['color'].' !important;';
+			$font_css = 'font:'.$option['style'].' '.$option['size'].'/' . $line_height . ' ' .stripslashes( str_replace( array( '"', "'" ), '', $option['face'] ) ).' !important; color:'.$option['color'].' !important;';
 
 		return apply_filters( $this->plugin_name . '_generate_font_css', $font_css, $option, $em );
 	}

admin/includes/uploader/class-uploader.php

@@ -85,7 +85,7 @@ public function uploader_style () {
 	/*-----------------------------------------------------------------------------------*/
 	/* Get Upload Input Field */
 	/*-----------------------------------------------------------------------------------*/
-	public function upload_input ( $name_attribute, $id_attribute = '', $value = '', $attachment_id = 0, $default_value = '', $field_name = '', $class = '', $css = '', $description = '', $strip_methods = true ) {
+	public function upload_input ( $name_attribute, $id_attribute = '', $value = '', $attachment_id = 0, $default_value = '', $field_name = '', $class = '', $css = '', $description = '', $strip_methods = true, $size = 'original' ) {
 		$output = '';
 
 		if ( trim( $value ) == '' ) $value = trim( $default_value );

readme.txt

@@ -3,8 +3,8 @@
 Contributors: a3rev, nguyencongtuan
 Tags: a3 Portfolio, Portfolio, Post Portfolio, Showcase, Image Showcase, Image Portfolio, Gallery, Photo Gallery, Image Gallery
 Requires at least: 5.6
-Tested up to: 6.0
-Stable tag: 3.0.1
+Tested up to: 6.1
+Stable tag: 3.0.2
 License: GPLv3
 License URI: http://www.gnu.org/licenses/gpl-3.0.html
 
@@ -167,6 +167,11 @@ Automatic installation is the easiest option as WordPress handles the file trans
 
 == Changelog ==
 
+= 3.0.2 - 2022/11/01 =
+* This maintenance release has a security vulnerability patch, plus compatibility with WordPress major version 6.1.0
+* Tweak - Test for compatibility with WordPress 6.1
+* Security – This release has a patch for a security vulnerability
+
 = 3.0.1 - 2022/09/19 =
 * This maintenance release fixes a missing content filter on portfolio item pages
 * Fix - apply filters the_content into content-single-portfolio so all shortcode, embed media that can show on portfolio single detail page
@@ -751,6 +756,9 @@ Automatic installation is the easiest option as WordPress handles the file trans
 
 == Upgrade Notice ==
 
+= 3.0.2 =
+This maintenance release has a security vulnerability patch, plus compatibility with WordPress major version 6.1.0
+
 = 3.0.1 =
 This maintenance release fixes a missing content filter on portfolio item pages