Showing with 18 additions and 7 deletions.

+4 −0 CHANGELOG.md

+3 −3 inc/files.php

+1 −1 package.json

+8 −1 readme.txt

+2 −2 woocommerce-product-addon.php
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,7 @@
+##### [Version 32.0.19](https://github.com/Codeinwp/woocommerce-product-addon/compare/v32.0.18...v32.0.19) (2024-04-23)
+
+- Enhanced security
+
 ##### [Version 32.0.18](https://github.com/Codeinwp/woocommerce-product-addon/compare/v32.0.17...v32.0.18) (2024-04-17)
 
 ### Improvements

diff --git a/inc/files.php b/inc/files.php
@@ -94,7 +94,7 @@ function ppom_create_thumb_for_meta( $file_name, $product_id, $cropped = false,
 		$edited_thumb_path = ppom_get_dir_path() . 'edits/thumbs/' . $file_name;
 		if ( file_exists( $edited_thumb_path ) ) {
 			$file_thumb_url = ppom_get_dir_url() . 'edits/thumbs/' . $file_name;
-		}   
+		}
 	} elseif ( file_exists( $file_dir_path ) && $post_type == 'shop_order' ) {
 		$file_link = $file_thumb_url;
 	} else {
@@ -177,7 +177,7 @@ function ppom_upload_file() {
 	$restricted_type    = ppom_get_option( 'ppom_restricted_file_type', $default_restricted );
 	$restricted_type    = explode( ',', $restricted_type );
 
-	if ( in_array( strtolower( $extension ), $restricted_type ) ) {
+	if ( empty( $extension ) || in_array( strtolower( $extension ), $restricted_type ) ) {
 		$response ['status']  = 'error';
 		$response ['message'] = __( 'File type not valid - ' . $extension, 'woocommerce-product-addon' );
 		wp_send_json( $response );
@@ -372,7 +372,7 @@ function ppom_delete_file() {
 			_e( 'File removed', 'woocommerce-product-addon' );
 		} else {
 			printf( __( 'Error while deleting file %s', 'woocommerce-product-addon' ), $file_path );
-		}   
+		}
 	} else {
 		printf( __( 'Error while deleting file %s', 'woocommerce-product-addon' ), $file_path );
 	}

diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "woocommerce-product-addon",
-  "version": "32.0.18",
+  "version": "32.0.19",
   "description": "PPOM for WooCommerce",
   "main": "index.js",
   "repository": "https://github.com/Codeinwp/woocommerce-product-addon",

diff --git a/readme.txt b/readme.txt
@@ -3,7 +3,7 @@ Contributors: themeisle
 Tags: woocommerce product addons, woocommerce product options, woocommerce product fields, woocommerce product, woocommerce product addon
 Requires at least: 3.5
 Tested up to: 6.5
-Stable tag: 32.0.18
+Stable tag: 32.0.19
 License: GPLv2
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
 Requires PHP: 7.2
@@ -122,6 +122,13 @@ If you feels that PPOM Free or PPOM PRO versions are not enough for your needs,
 
 == Changelog ==
 
+##### [Version 32.0.19](https://github.com/Codeinwp/woocommerce-product-addon/compare/v32.0.18...v32.0.19) (2024-04-23)
+
+- Enhanced security
+
+
+
+
 ##### [Version 32.0.18](https://github.com/Codeinwp/woocommerce-product-addon/compare/v32.0.17...v32.0.18) (2024-04-17)
 
 ### Improvements

diff --git a/woocommerce-product-addon.php b/woocommerce-product-addon.php
@@ -3,7 +3,7 @@
  * Plugin Name: PPOM for WooCommerce
  * Plugin URI: https://themeisle.com/plugins/ppom-pro/
  * Description: PPOM (Personalized Product Meta Manager) plugin allow WooCommerce Store Admin to create unlimited input fields and files to attach with Product Pages.
- * Version: 32.0.18
+ * Version: 32.0.19
  * Author: Themeisle
  * Text Domain: woocommerce-product-addon
  * Domain Path: /languages
@@ -26,7 +26,7 @@
 define( 'PPOM_URL', untrailingslashit( plugin_dir_url( __FILE__ ) ) );
 define( 'PPOM_WP_PLUGIN_DIR', untrailingslashit( plugin_dir_path( __DIR__ ) ) );
 define( 'PPOM_BASENAME', basename( PPOM_WP_PLUGIN_DIR ) );
-define( 'PPOM_VERSION', '32.0.18' );
+define( 'PPOM_VERSION', '32.0.19' );
 define( 'PPOM_DB_VERSION', '30.1.0' );
 define( 'PPOM_PRODUCT_META_KEY', '_product_meta_id' );
 define( 'PPOM_TABLE_META', 'nm_personalized' );