int 1.4.5

### Stable - Security Release - Enhanced security measures. - It is crucial to update Educare to version 1.4.5 immediately. - Please see the changelog v1.4.4 for list of previous updates. **Note:** Sometimes users may need to clear browsing data to load the updated script (After update).
FixBD · Aug 2, 2023 · 95dbb97 · 95dbb97
1 parent 3326dcb
commit 95dbb97
Show file tree

Hide file tree

Showing 7 changed files with 190 additions and 57 deletions.
diff --git a/Educare.php b/Educare.php
@@ -1,7 +1,7 @@
 <?php
 /**
  * @package		Educare
- * @version 	1.4.4
+ * @version 	1.4.5
  * @author	  	FixBD <fixbd.org@gmail.com>
  * @copyright  	GPL-2.0+
  * @link		http://github.com/fixbd/educare
@@ -10,7 +10,7 @@
  * Plugin Name:  Educare
  * Plugin URI:	 http://github.com/fixbd/educare
  * Description:	 Educare is a powerful online School/College students & results management system dev by FixBD. This plugin allows you to manage and publish students results. You can easily Add/Edit/Delete Students, Results, Class, Exam, Year Custom field and much more... Also you can import & export unlimited students and results just a click!
- * Version:      1.4.4
+ * Version:      1.4.5
  * Author:       FixBD
  * Author URI:   http://github.com/fixbd
  * License:		 GPL-2.0+
@@ -44,7 +44,7 @@
 
     // Make it simple! (Define Educare Name-Space)
     // Plugin Version
-	define('EDUCARE_VERSION', '1.4.4');
+	define('EDUCARE_VERSION', '1.4.5');
     // Settings Version
     define('EDUCARE_SETTINGS_VERSION', '1.0');
     define('EDUCARE_RESULTS_VERSION', '1.0');

diff --git a/assets/js/educare.js b/assets/js/educare.js
@@ -22,7 +22,6 @@ jQuery(document).ready(function($) {
                 type: 'POST',
                 data: {
                 action: 'educare_process_content',
-                nonce: educareAjax.nonce,
                 form_data: form_data,
                 active_menu: active_menu,
                 action_for
@@ -65,7 +64,7 @@ jQuery(document).ready(function($) {
                 type: 'POST',
                 data: {
                 action: 'educare_proccess_grade_system',
-                nonce: educareAjax.nonce,
+                nonce: educareNonce.edit_grade_system,
                 class: class_name
                 },
                 beforeSend:function(event) {
@@ -96,7 +95,6 @@ jQuery(document).ready(function($) {
                 type: 'POST',
                 data: {
                 action: 'educare_save_grade_system',
-                nonce: educareAjax.nonce,
                 form_data: form_data,
                 update_grade_rules: true
                 },
@@ -165,7 +163,6 @@ jQuery(document).ready(function($) {
                 type: 'POST',
                 data: {
                 action: 'educare_proccess_promote_students',
-                nonce: educareAjax.nonce,
                 form_data: form_data
                 },
                 beforeSend: function(data) {
@@ -302,7 +299,6 @@ jQuery(document).ready(function($) {
                 type: 'POST',
                 data: {
                     action: 'educare_process_marks',
-                    nonce: educareAjax.nonce,
                     form_data: form_data,
                     action_for: action_for
                 },
@@ -338,7 +334,6 @@ jQuery(document).ready(function($) {
                 type: 'POST',
                 data: {
                     action: 'educare_process_marks',
-                    nonce: educareAjax.nonce,
                     form_data: form_data,
                     action_for
                 },
@@ -466,7 +461,6 @@ jQuery(document).ready(function($) {
                 type: 'POST',
                 data: {
                     action: 'educare_class',
-                    nonce: educareAjax.nonce,
                     class: class_name,
                     id: id_no,
                     form_data: form_data,
@@ -609,7 +603,6 @@ jQuery(document).ready(function($) {
                     type: 'POST',
                     data: {
                     action: 'educare_class',
-                    nonce: educareAjax.nonce,
                     class: class_name,
                     id: id_no,
                     form_data: form_data,
@@ -662,7 +655,6 @@ jQuery(document).ready(function($) {
                 type: 'POST',
                 data: {
                     action: 'educare_get_data_from_students',
-                    nonce: educareAjax.nonce,
                     form_data: form_data
                 },
                 beforeSend: function(data) {
@@ -767,7 +759,6 @@ jQuery(document).ready(function($) {
                 type: 'POST',
                 data: {
                     action: 'educare_process_content',
-                    nonce: educareAjax.nonce,
                     form_data: form_data,
                     action_for
                 },
@@ -852,7 +843,6 @@ jQuery(document).ready(function($) {
                 type: 'POST',
                 data: {
                     action: 'educare_process_content',
-                    nonce: educareAjax.nonce,
                     form_data: form_data,
                     action_for
                 },
@@ -888,7 +878,6 @@ jQuery(document).ready(function($) {
                 type: 'POST',
                 data: {
                     action: 'educare_process_content',
-                    nonce: educareAjax.nonce,
                     form_data: form_data,
                     action_for
                 },
@@ -917,7 +906,6 @@ jQuery(document).ready(function($) {
                 type: 'POST',
                 data: {
                     action: 'educare_process_content',
-                    nonce: educareAjax.nonce,
                     form_data: form_data,
                     action_for
                 },
@@ -949,7 +937,6 @@ jQuery(document).ready(function($) {
                 type: 'POST',
                 data: {
                     action: 'educare_process_content',
-                    nonce: educareAjax.nonce,
                     form_data: form_data,
                     action_for
                 },
@@ -993,7 +980,7 @@ jQuery(document).ready(function($) {
                 type: 'POST',
                 data: {
                     action: 'educare_demo',
-                    nonce: educareAjax.nonce,
+                    nonce: educareNonce.demo_nonce,
                     Class: class_name,
                     total_demo: total_demo,
                     data_for: students,

diff --git a/changelog.md b/changelog.md
@@ -1,3 +1,12 @@
+## [1.4.5]
+
+### Stable - Security Release
+- Enhanced security measures.
+- It is crucial to update Educare to version 1.4.5 immediately.
+- Please see the changelog v1.4.4 for list of previous updates.
+
+**Note:** Sometimes users may need to clear browsing data to load the updated script (After update).
+
 ## [1.4.4]
 
 ### Stable - Security Release

diff --git a/includes/admin/menu.php b/includes/admin/menu.php
@@ -146,6 +146,11 @@ function educare_enqueue_styles( $hook) {
 		'photos' => educare_check_status('photos'),
 		'group_subject' => educare_check_status('group_subject'),
 	) );
+
+	wp_localize_script( 'educare-admin', 'educareNonce', array(
+		'demo_nonce' => wp_create_nonce( 'educare_demo_nonce' ),
+		'edit_grade_system' => wp_create_nonce( 'edit_grade_system' ),
+	) );
 
 }