WP Manifestindependent plugin directory
manifest / forms / wp-raisenow-community-plugin

RaiseNow donation forms WP Registry grade C-. High-severity findings · 1 findingWP RegistryHigh-severity findings · 1 findingOpen the reportC-

WordPress Plugin: Add RaiseNow donation forms with a few clicks

★ 8stars
1.7.1latest · 3 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/grueneschweiz/wp-raisenow-community-plugin/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Add configurable RaiseNow donation forms using shortcode. IMPORTANT: You need to have a contract with RaiseNow.

Description

Integrating the LEMA or TAMARO widget from RaiseNow could not be easier:

  1. Install this plugin
  2. Enter the API-key provided from RaiseNow in WordPress under Settings > Online donations
  3. Edit the page where you want the donation form to appear, click the Insert donation form button and enter the amounts of your desire. That's it!

You may leave amount fields blank to reduce the number of choices.

Do you want to configure the widgets style or inject some custom javascript? Just head over to the settings panel, the options page is waiting for you.

IMPORTANT: You'll need to get a contract with RaiseNow, before you can use this plugin. Once you've got the contract signed, RaiseNow will provide you your API-Key.

Installation

Same as any other standard WordPress plugin.

Changelog

1.7.2

  • Fix warning about deprecated string notation

1.7.1

  • Fix PHP notice if shortcode misses amounts.
  • Shortcode generator not fully visible on small screens.

1.7.0

  • Support for italian donation forms.

1.6.0

  • Define default amounts on settings page.
  • Display shortcode on settings page.

1.5.0

  • Allow variable number of amount fields.

1.4.2

  • Fix form language for tamaro widget. Props to @vdrouotmecom for reporting the bug.

1.4.1

  • French translations. Many thanks to @vdrouotmecom for contributing them.

1.4.0

  • Support to customize amounts with TAMARO widget
  • Minor improvements

1.3.0

  • Added support for the TAMARO widget
  • Tested up to WordPress 5.6.0

1.2.1

  • Fix: legacy forms showing amount 0

1.2

  • Provide convenient interface to customize amounts

1.1

  • Replace per form api-key with a global api-key
  • Hide detailed error messages from non privileged users
  • Cleanup translations
  • Cleanup js dependencies

1.0

  • Initial release

Contribute

Thank you for contributing! Every pull request is highly appreciated.

Setting up dockerized development environment

  1. Clone or fork https://github.com/grueneschweiz/wp-raisenow-community-plugin

  2. Start environment using Docker

docker-compose up -d

The first time you run this, it will take a few minutes to pull in the required images. On subsequent runs, it should take less than 30 seconds before you can connect to WordPress in your browser. (Most of this time is waiting for MariaDB to be ready to accept connections.)

The -d flag backgrounds the process and log output. To view logs for a specific container, use docker-compose logs [container], e.g.:

docker-compose logs wordpress

Please refer to the [Docker Compose documentation][docker-compose] for more information about starting, stopping, and interacting with your environment.

Log in to /wp-admin/ with Username wordpress and Password wordpress.

Releases

11 releases.

Tag
Published
1.7.1 latest
Nov 25, 2022 3 years ago
Jan 4, 2022 4 years ago
Oct 28, 2021 4 years ago
Oct 18, 2021 5 years ago
Jul 13, 2021 5 years ago
Mar 27, 2021 5 years ago
Mar 19, 2021 5 years ago
Feb 22, 2021 5 years ago
Nov 19, 2020 5 years ago
Nov 19, 2020 5 years ago
Jun 17, 2019 7 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

C- grade

Security

RaiseNow donation forms 1.7.1 · audited by WP Registry

High-severity findings.

1 high
Audited release
1.7.1
Findings
1
Worst severity
high
Content hash
3dca3aea835679c19215b04d…

Findings

  • high Tamaro amount shortcode values interpolated into JS without numeric cast

    xss_stored

    get_amounts() copies shortcode amount attributes verbatim; js_tamaro() implode()s them into a JS array literal and interpolates defaultAmount/language without (int)/json_encode. A crafted one_time_1 value can break out of the array and execute script in the donation widget bootstrap.

    includes/class-raisenow-community-frontend.php:148-200

    Recommendation

    Cast all amounts with (int)/(float) and emit via wp_json_encode; escape language with esc_js.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.