Merge pull request #490 from mainwp/mainwp-child-6-prepared

Mainwp child 6 prepared

Author: thanghv

class/class-mainwp-backup.php

@@ -9,6 +9,12 @@
 
 namespace MainWP\Child;
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    exit;
+}
+
+
 //phpcs:disable WordPress.WP.AlternativeFunctions, Generic.Metrics.CyclomaticComplexity -- Current complexity is the only way to achieve desired results, pull request solutions appreciated.
 
 /**
@@ -546,9 +552,9 @@ public function backup_full( $fileName ) { //phpcs:ignore -- complex method.
 
         $file = false;
         if ( isset( $_POST['f'] ) ) {
-            $file = ! empty( $_POST['f'] ) ? sanitize_text_field( wp_unslash( $_POST['f'] ) ) : false;
+            $file = ! empty( $_POST['f'] ) ? MainWP_Helper::sanitize_filename( wp_unslash( $_POST['f'] ) ) : false;
         } elseif ( isset( $_POST['file'] ) ) {
-            $file = ! empty( $_POST['file'] ) ? sanitize_text_field( wp_unslash( $_POST['file'] ) ) : false;
+            $file = ! empty( $_POST['file'] ) ? MainWP_Helper::sanitize_filename( wp_unslash( $_POST['file'] ) ) : false;
         }
 
         $ext = isset( $_POST['ext'] ) ? sanitize_text_field( wp_unslash( $_POST['ext'] ) ) : 'zip';

class/class-mainwp-child-aam.php

@@ -23,6 +23,11 @@
 
 use AAM_Service_SecurityAudit;
 
+// Exit if accessed directly.
+if ( ! defined( 'ABSPATH' ) ) {
+    exit;
+}
+
 // phpcs:disable PSR1.Classes.ClassDeclaration, WordPress.WP.AlternativeFunctions -- Required to achieve desired results. Pull requests appreciated.
 
 /**