CVE-2014-125097: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CWE-79)
value: A vulnerability, which was classified as problematic, was found in BestWebSoft Facebook Like Button up to 2.33. Affected is the function fcbkbttn_settings_page of the file facebook-button-plugin.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.34 is able to address this issue. The patch is identified as b766da8fa100779409a953f0e46c2a2448cbe99c. It is recommended to upgrade the affected component. VDB-225354 is the identifier assigned to this vulnerability.
CWE description: The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVSS v3 base score: 6.1
Published: 2023-04-10T04:15Z
Repository: https://github.com/wp-plugins/facebook-button-plugin
Language: PHP
Files changed: bws_menu/bws_menu.php, facebook-button-plugin.php, readme.txt
Commit date: 2014-08-13 12:20:42 +0000
Commit message: V2.34 - Security Exploit was fixed.

git-svn-id: https://plugins.svn.wordpress.org/facebook-button-plugin/trunk@965089 b8457f37-d9ea-0310-8a92-e5e31aec5664

Diff: diff --git a/bws_menu/bws_menu.php b/bws_menu/bws_menu.php
index 922c3e0..826ee44 100755
--- a/bws_menu/bws_menu.php
+++ b/bws_menu/bws_menu.php
@@ -1,9 +1,9 @@
 <?php
 /*
 * Function for displaying BestWebSoft menu
-* Version: 1.3.6
+* Version: 1.3.7
 */
 
 if ( ! function_exists( 'bws_add_menu_render' ) ) {
 	function bws_add_menu_render() {
 		global $wpdb, $wpmu, $wp_version, $bws_plugin_info;
@@ -513,12 +513,12 @@ if ( ! function_exists( 'bws_add_menu_render' ) ) {
 		}
 
 		if ( ( isset( $_REQUEST['bwsmn_form_submit'] ) && check_admin_referer( plugin_basename(__FILE__), 'bwsmn_nonce_submit' ) ) ||
 			 ( isset( $_REQUEST['bwsmn_form_submit_custom_email'] ) && check_admin_referer( plugin_basename(__FILE__), 'bwsmn_nonce_submit_custom_email' ) ) ) {
 			if ( isset( $_REQUEST['bwsmn_form_email'] ) ) {
-				$bwsmn_form_email = trim( $_REQUEST['bwsmn_form_email'] );
-				if ( $bwsmn_form_email == "" || !preg_match( "/^((?:[a-z0-9']+(?:[a-z0-9\-_\.']+)?@[a-z0-9]+(?:[a-z0-9\-\.]+)?\.[a-z]{2,5})[, ]*)+$/i", $bwsmn_form_email ) ) {
+				$bwsmn_form_email = esc_html( trim( $_REQUEST['bwsmn_form_email'] ) );
+				if ( $bwsmn_form_email == "" || ! is_email( $bwsmn_form_email ) ) {
 					$error = __( "Please enter a valid email address.", 'bestwebsoft' );
 				} else {
 					$email = $bwsmn_form_email;
 					$bwsmn_form_email = '';
 					$message = __( 'Email with system info is sent to ', 'bestwebsoft' ) . $email;			
@@ -536,23 +536,28 @@ if ( ! function_exists( 'bws_add_menu_render' ) ) {
 				<h4>Environment</h4>
 				<table>';
 				foreach ( $system_info['system_info'] as $key => $value ) {
 					$message_text .= '<tr><td>'. $key .'</td><td>'. $value .'</td></tr>';	
 				}
-				$message_text .= '</table>
-				<h4>Active Plugins</h4>
-				<table>';
-				foreach ( $system_info['active_plugins'] as $key => $value ) {	
-					$message_text .= '<tr><td scope="row">'. $key .'</td><td scope="row">'. $value .'</td></tr>';	
+				$message_text .= '</table>';
+				if ( ! empty( $system_info['active_plugins'] ) ) {
+					$message_text .= '<h4>Active Plugins</h4>
+					<table>';
+					foreach ( $system_info['active_plugins'] as $key => $value ) {	
+						$message_text .= '<tr><td scope="row">'. $key .'</td><td scope="row">'. $value .'</td></tr>';	
+					}
+					$message_text .= '</table>';
 				}
-				$message_text .= '</table>
-				<h4>Inactive Plugins</h4>
-				<table>';
-				foreach ( $system_info['inactive_plugins'] as $key => $value ) {
-					$message_text .= '<tr><td scope="row">'. $key .'</td><td scope="row">'. $value .'</td></tr>';
+				if ( ! empty( $system_info['inactive_plugins'] ) ) {
+					$message_text .= '<h4>Inactive Plugins</h4>
+					<table>';
+					foreach ( $system_info['inactive_plugins'] as $key => $value ) {
+						$message_text .= '<tr><td scope="row">'. $key .'</td><td scope="row">'. $value .'</td></tr>';
+					}
+					$message_text .= '</table>';
 				}
-				$message_text .= '</table></body></html>';
+				$message_text .= '</body></html>';
 				$result = wp_mail( $email, 'System Info From ' . $home_url, $message_text, $headers );
 				if ( $result != true )
 					$error = __( "Sorry, email message could not be delivered.", 'bestwebsoft' );
 			}
 		} ?>
@@ -896,16 +901,18 @@ if ( ! function_exists( 'bws_add_menu_render' ) ) {
 						</tbody>
 					</table>
 					<table class="bws_system_info">
 						<thead><tr><th><?php _e( 'Active Plugins', 'bestwebsoft' ); ?></th><th></th></tr></thead>
 						<tbody>
-						<?php foreach ( $system_info['active_plugins'] as $key => $value ) { ?>	
-							<tr>
-								<td scope="row"><?php echo $key; ?></td>
-								<td scope="row"><?php echo $value; ?></td>
-							</tr>	
-						<?php } ?>
+						<?php if ( ! empty( $system_info['active_plugins'] ) ) {
+							foreach ( $system_info['active_plugins'] as $key => $value ) { ?>	
+								<tr>
+									<td scope="row"><?php echo $key; ?></td>
+									<td scope="row"><?php echo $value; ?></td>
+								</tr>	
+							<?php }
+						} ?>
 						</tbody>
 					</table>
 					<table class="bws_system_info">
 						<thead><tr><th><?php _e( 'Inactive Plugins', 'bestwebsoft' ); ?></th><th></th></tr></thead>
 						<tbody>
diff --git a/facebook-button-plugin.php b/facebook-button-plugin.php
index e4d66d5..c7d9523 100644
--- a/facebook-button-plugin.php
+++ b/facebook-button-plugin.php
@@ -2,11 +2,11 @@
 /*
 Plugin Name: Facebook Button
 Plugin URI: http://bestwebsoft.com/plugin/
 Description: Put Facebook Button in to your post.
 Author: BestWebSoft
-Version: 2.33
+Version: 2.34
 Author URI: http://bestwebsoft.com/
 License: GPLv2 or later
 */
 
 /*  Copyright 2014  BestWebSoft  ( http://support.bestwebsoft.com )
@@ -121,14 +121,14 @@ if ( ! function_exists( 'fcbkbttn_settings' ) ) {
 			'link'					=>	'',
 			'my_page'				=>	1,
 			'like'					=>	1,
 			'share'					=>	0,
 			'where'					=>	'',
-			'display_option'		=>	'',
+			'display_option'		=>	'standard',
 			'count_icon'			=>	1,
 			'extention'				=>	'png',
-			'fb_img_link'			=>	plugins_url( "images/standart-facebook-ico.png", __FILE__ ),
+			'fb_img_link'			=>	plugins_url( "images/standard-facebook-ico.png", __FILE__ ),
 			'locale' 				=>	'en_US',
 			'html5'					=>	0
 		);
 		/* Install the option defaults */
 		if ( 1 == $wpmu ) {
@@ -157,18 +157,18 @@ if ( ! function_exists( 'fcbkbttn_settings' ) ) {
 				}
 				add_option( 'fcbk_bttn_plgn_options', $fcbkbttn_options_default, '', 'yes' );
 			}
 		}
 		/* Get options from the database */
-		if ( 1 == $wpmu )
-			$fcbkbttn_options = get_site_option( 'fcbk_bttn_plgn_options' );
-		else
-			$fcbkbttn_options = get_option( 'fcbk_bttn_plgn_options' );
+		$fcbkbttn_options = ( 1 == $wpmu ) ? get_site_option( 'fcbk_bttn_plgn_options' ) : get_option( 'fcbk_bttn_plgn_options' );
 
 		if ( ! isset( $fcbkbttn_options['plugin_option_version'] ) || $fcbkbttn_options['plugin_option_version'] != $fcbkbttn_plugin_info["Version"] ) {
-			if ( stristr( $fcbkbttn_options['fb_img_link'], 'standart-facebook-ico.jpg' ) )
-				$fcbkbttn_options['fb_img_link'] = plugins_url( "images/standart-facebook-ico.png", __FILE__ );	
+			if ( stristr( $fcbkbttn_options['fb_img_link'], 'standart-facebook-ico.jpg' ) || stristr( $fcbkbttn_options['fb_img_link'], 'standart-facebook-ico.png' ) )
+				$fcbkbttn_options['fb_img_link'] = plugins_url( "images/standard-facebook-ico.png", __FILE__ );	
+
+			if ( 'standart' == $fcbkbttn_options['display_option'] )
+				$fcbkbttn_options['display_option'] = 'standard';
 
 			if ( stristr( $fcbkbttn_options['fb_img_link'], 'img/' ) )
 				$fcbkbttn_options['fb_img_link'] = plugins_url( str_replace( 'img/', 'images/', $fcbkbttn_options['fb_img_link'] ), __FILE__ );	
 
 			$fcbkbttn_options = array_merge( $fcbkbttn_options_default, $fcbkbttn_options );
@@ -202,15 +202,15 @@ if ( ! function_exists( 'fcbkbttn_settings_page' ) ) {
 		$upload_dir = wp_upload_dir();
 
 		if ( isset( $_REQUEST['fcbkbttn_form_submit'] ) && check_admin_referer( plugin_basename( __FILE__ ), 'fcbkbttn_nonce_name' ) ) {
 			/* Takes all the changed settings on the plugin's admin page and saves them in array 'fcbk_bttn_plgn_options'. */
 			if ( isset( $_REQUEST['fcbkbttn_where'] ) && isset( $_REQUEST['fcbkbttn_link'] ) && isset( $_REQUEST['fcbkbttn_display_option'] ) ) {
-				$fcbkbttn_options['link']			=	$_REQUEST['fcbkbttn_link'];
+				$fcbkbttn_options['link']			=	stripslashes( esc_html( $_REQUEST['fcbkbttn_link'] ) );
 				$fcbkbttn_options['where']			=	$_REQUEST['fcbkbttn_where'];
 				$fcbkbttn_options['display_option']	=	$_REQUEST['fcbkbttn_display_option'];
-				if ( 'standart' == $fcbkbttn_options['display_option'] ) {
-					$fcbkbttn_options['fb_img_link'] = plugins_url( 'images/standart-facebook-ico.png', __FILE__ );
+				if ( 'standard' == $fcbkbttn_options['display_option'] ) {
+					$fcbkbttn_options['fb_img_link'] = plugins_url( 'images/standard-facebook-ico.png', __FILE__ );
 				}				
 				$fcbkbttn_options['my_page']		=	isset( $_REQUEST['fcbkbttn_my_page'] ) ? 1 : 0 ;
 				$fcbkbttn_options['like']			=	isset( $_REQUEST['fcbkbttn_like'] ) ? 1 : 0 ;
 				$fcbkbttn_options['share']			=	isset( $_REQUEST['fcbkbttn_share'] ) ? 1 : 0 ;
 				$fcbkbttn_options['locale']			=	$_REQUEST['fcbkbttn_locale'];
@@ -278,11 +278,11 @@ if ( ! function_exists( 'fcbkbttn_settings_page' ) ) {
 		}
 		/* GO PRO */
 		if ( isset( $_GET['action'] ) && 'go_pro' == $_GET['action'] ) {
 			global $wpmu;
 
-			$bws_license_key = ( isset( $_POST['bws_license_key'] ) ) ? trim( $_POST['bws_license_key'] ) : "";
+			$bws_license_key = ( isset( $_POST['bws_license_key'] ) ) ? stripslashes( esc_html( trim( $_POST['bws_license_key'] ) ) ) : "";
 			$bstwbsftwppdtplgns_options_defaults = array();
 			if ( 1 == $wpmu ) {
 				if ( !get_site_option( 'bstwbsftwppdtplgns_options' ) )
 					add_site_option( 'bstwbsftwppdtplgns_options', $bstwbsftwppdtplgns_options_defaults, '', 'yes' );
 				$bstwbsftwppdtplgns_options = get_site_option( 'bstwbsftwppdtplgns_options' );
@@ -295,11 +295,11 @@ if ( ! function_exists( 'fcbkbttn_settings_page' ) ) {
 			if ( isset( $_POST['bws_license_submit'] ) && check_admin_referer( plugin_basename( __FILE__ ), 'bws_license_nonce_name' ) ) {
 				if ( '' != $bws_license_key ) { 
 					if ( strlen( $bws_license_key ) != 18 ) {
 						$error = __( "Wrong license key", 'facebook' );
 					} else {
-						$bws_license_plugin = trim( $_POST['bws_license_plugin'] );	
+						$bws_license_plugin = stripslashes( esc_html( $_POST['bws_license_plugin'] ) );	
 						if ( isset( $bstwbsftwppdtplgns_options['go_pro'][ $bws_license_plugin ]['count'] ) && $bstwbsftwppdtplgns_options['go_pro'][ $bws_license_plugin ]['time'] < ( time() + (24 * 60 * 60) ) ) {
 							$bstwbsftwppdtplgns_options['go_pro'][ $bws_license_plugin ]['count'] = $bstwbsftwppdtplgns_options['go_pro'][ $bws_license_plugin ]['count'] + 1;
 						} else {
 							$bstwbsftwppdtplgns_options['go_pro'][ $bws_license_plugin ]['count'] = 1;
 							$bstwbsftwppdtplgns_options['go_pro'][ $bws_license_plugin ]['time'] = time();
@@ -436,11 +436,11 @@ if ( ! function_exists( 'fcbkbttn_settings_page' ) ) {
 								<?php _e( "Choose display settings:", 'facebook' ); ?>
 							</th>
 							<td>
 								<?php if ( scandir( $upload_dir['basedir'] ) && is_writable( $upload_dir['basedir'] ) ) { ?>
 									<select name="fcbkbttn_display_option" onchange="if ( this . value == 'custom' ) { getElementById ( 'fcbkbttn_display_option_custom' ) . style.display = 'table-row'; } else { getElementById ( 'fcbkbttn_display_option_custom' ) . style.display = 'none'; }">
-										<option <?php if ( 'standart' == $fcbkbttn_options['display_option'] ) echo 'selected="selected"'; ?> value="standart"><?php _e( "Standard Facebook image", 'facebook' ); ?></option>
+										<option <?php if ( 'standard' == $fcbkbttn_options['display_option'] ) echo 'selected="selected"'; ?> value="standard"><?php _e( "Standard Facebook image", 'facebook' ); ?></option>
 										<option <?php if ( 'custom' == $fcbkbttn_options['display_option'] ) echo 'selected="selected"'; ?> value="custom"><?php _e( "Custom Facebook image", 'facebook' ); ?></option>
 									</select>
 								<?php } else {
 									echo __( "To use custom image you need to setup permissions to upload directory of your site", 'facebook' ) . " - " .$upload_dir['basedir'];
 								} ?>
@@ -618,12 +618,12 @@ if ( ! function_exists( 'fcbkbttn_settings_page' ) ) {
 
 /* Function reacts to changes type of picture (Standard or Custom) and generates link to image, link transferred to array 'fcbk_bttn_plgn_options' */
 if ( ! function_exists( 'fcbkbttn_update_option' ) ) {
 	function fcbkbttn_update_option() {
 		global $fcbkbttn_options;
-		if ( 'standart' == $fcbkbttn_options['display_option'] ) {
-			$fb_img_link = plugins_url( 'images/standart-facebook-ico.png', __FILE__ );
+		if ( 'standard' == $fcbkbttn_options['display_option'] ) {
+			$fb_img_link = plugins_url( 'images/standard-facebook-ico.png', __FILE__ );
 		} else if ( 'custom' == $fcbkbttn_options['display_option'] ) {
 			$upload_dir = wp_upload_dir();
 			$fb_img_link = $upload_dir['baseurl'] . '/facebook-image/facebook-ico' . $fcbkbttn_options['count_icon'] . '.' . $fcbkbttn_options['extention'];
 		}
 		$fcbkbttn_options['fb_img_link'] = $fb_img_link ;
diff --git a/images/facebook-ico3.jpg b/images/facebook-ico3.jpg
deleted file mode 100755
index 4e2ab9b..0000000
Binary files a/images/facebook-ico3.jpg and /dev/null differ
diff --git a/images/facebook-ico3.png b/images/standard-facebook-ico.png
similarity index 100%
rename from images/facebook-ico3.png
rename to images/standard-facebook-ico.png
diff --git a/images/standart-facebook-ico.png b/images/standart-facebook-ico.png
deleted file mode 100755
index 1585001..0000000
Binary files a/images/standart-facebook-ico.png and /dev/null differ
diff --git a/readme.txt b/readme.txt
index 82dc785..3f086c2 100644
--- a/readme.txt
+++ b/readme.txt
@@ -1,12 +1,12 @@
 ﻿=== Facebook Like Button ===
 Contributors: bestwebsoft
 Donate link: https://www.2checkout.com/checkout/purchase?sid=1430388&quantity=1&product_id=94
 Tags: button, buton, batton, button image, button position, Button like, Facebook, Facebook account button, facebook button, facebook button language, Facebook button icon, Facebook button like, Facebook button share, Facebook ID, Facebook page, facebook like, facebook like button, facebook share, facebook share button, follow, Follow button, icon, Like, like button, My Page button, Share, share button, social, social button, social account
 Requires at least: 3.0
-Tested up to: 4.0-beta2
-Stable tag: 2.33
+Tested up to: 4.0-beta3
+Stable tag: 2.34
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
 
 Add Facebook button to your WordPress website.
 
@@ -105,10 +105,13 @@ Please make sure that the problem hasn't been discussed yet on our forum (<a hre
 3. Displaying Facebook Button ater your post.
 4. Displaying Facebook Button in your post via the shortcode.
 
 == Changelog ==
 
+= V2.34 - 13.08.2014 =
+* Budfix : Security Exploit was fixed.
+
 = V2.33 - 06.08.2014 =
 * Update : We updated all functionality for wordpress 4.0-beta2.
 * Bugfix : Problem with custom images after updating plugin was fixed.
 
 = V2.32 - 19.06.2014 =
@@ -243,10 +246,13 @@ Please make sure that the problem hasn't been discussed yet on our forum (<a hre
 = V1 =
 * Ability to install Facebook Button icon with a link to the account page, including settings adjustment functionality via WordPress admin panel.
 
 == Upgrade Notice ==
 
+= V2.34 =
+Security Exploit was fixed.
+
 = V2.33 =
 We updated all functionality for wordpress 4.0-beta2. Problem with custom images after updating plugin was fixed.
 
 = V2.32 =
 Problem with showing Like button was fixed.

Vulnerable code: * Version: 1.3.6
				$bwsmn_form_email = trim( $_REQUEST['bwsmn_form_email'] );
				if ( $bwsmn_form_email == "" || !preg_match( "/^((?:[a-z0-9']+(?:[a-z0-9\-_\.']+)?@[a-z0-9]+(?:[a-z0-9\-\.]+)?\.[a-z]{2,5})[, ]*)+$/i", $bwsmn_form_email ) ) {
				$message_text .= '</table>
				<h4>Active Plugins</h4>
				<table>';
				foreach ( $system_info['active_plugins'] as $key => $value ) {	
					$message_text .= '<tr><td scope="row">'. $key .'</td><td scope="row">'. $value .'</td></tr>';	
				$message_text .= '</table>
				<h4>Inactive Plugins</h4>
				<table>';
				foreach ( $system_info['inactive_plugins'] as $key => $value ) {
					$message_text .= '<tr><td scope="row">'. $key .'</td><td scope="row">'. $value .'</td></tr>';
				$message_text .= '</table></body></html>';
						<?php foreach ( $system_info['active_plugins'] as $key => $value ) { ?>	
							<tr>
								<td scope="row"><?php echo $key; ?></td>
								<td scope="row"><?php echo $value; ?></td>
							</tr>	
						<?php } ?>
Version: 2.33
			'display_option'		=>	'',
			'fb_img_link'			=>	plugins_url( "images/standart-facebook-ico.png", __FILE__ ),
		if ( 1 == $wpmu )
			$fcbkbttn_options = get_site_option( 'fcbk_bttn_plgn_options' );
		else
			$fcbkbttn_options = get_option( 'fcbk_bttn_plgn_options' );
			if ( stristr( $fcbkbttn_options['fb_img_link'], 'standart-facebook-ico.jpg' ) )
				$fcbkbttn_options['fb_img_link'] = plugins_url( "images/standart-facebook-ico.png", __FILE__ );	
				$fcbkbttn_options['link']			=	$_REQUEST['fcbkbttn_link'];
				if ( 'standart' == $fcbkbttn_options['display_option'] ) {
					$fcbkbttn_options['fb_img_link'] = plugins_url( 'images/standart-facebook-ico.png', __FILE__ );
			$bws_license_key = ( isset( $_POST['bws_license_key'] ) ) ? trim( $_POST['bws_license_key'] ) : "";
						$bws_license_plugin = trim( $_POST['bws_license_plugin'] );	
										<option <?php if ( 'standart' == $fcbkbttn_options['display_option'] ) echo 'selected="selected"'; ?> value="standart"><?php _e( "Standard Facebook image", 'facebook' ); ?></option>
		if ( 'standart' == $fcbkbttn_options['display_option'] ) {
			$fb_img_link = plugins_url( 'images/standart-facebook-ico.png', __FILE__ );
Tested up to: 4.0-beta2
Stable tag: 2.33
Fixed code: * Version: 1.3.7
				$bwsmn_form_email = esc_html( trim( $_REQUEST['bwsmn_form_email'] ) );
				if ( $bwsmn_form_email == "" || ! is_email( $bwsmn_form_email ) ) {
				$message_text .= '</table>';
				if ( ! empty( $system_info['active_plugins'] ) ) {
					$message_text .= '<h4>Active Plugins</h4>
					<table>';
					foreach ( $system_info['active_plugins'] as $key => $value ) {	
						$message_text .= '<tr><td scope="row">'. $key .'</td><td scope="row">'. $value .'</td></tr>';	
					}
					$message_text .= '</table>';
				if ( ! empty( $system_info['inactive_plugins'] ) ) {
					$message_text .= '<h4>Inactive Plugins</h4>
					<table>';
					foreach ( $system_info['inactive_plugins'] as $key => $value ) {
						$message_text .= '<tr><td scope="row">'. $key .'</td><td scope="row">'. $value .'</td></tr>';
					}
					$message_text .= '</table>';
				$message_text .= '</body></html>';
						<?php if ( ! empty( $system_info['active_plugins'] ) ) {
							foreach ( $system_info['active_plugins'] as $key => $value ) { ?>	
								<tr>
									<td scope="row"><?php echo $key; ?></td>
									<td scope="row"><?php echo $value; ?></td>
								</tr>	
							<?php }
						} ?>
Version: 2.34
			'display_option'		=>	'standard',
			'fb_img_link'			=>	plugins_url( "images/standard-facebook-ico.png", __FILE__ ),
		$fcbkbttn_options = ( 1 == $wpmu ) ? get_site_option( 'fcbk_bttn_plgn_options' ) : get_option( 'fcbk_bttn_plgn_options' );
			if ( stristr( $fcbkbttn_options['fb_img_link'], 'standart-facebook-ico.jpg' ) || stristr( $fcbkbttn_options['fb_img_link'], 'standart-facebook-ico.png' ) )
				$fcbkbttn_options['fb_img_link'] = plugins_url( "images/standard-facebook-ico.png", __FILE__ );	

			if ( 'standart' == $fcbkbttn_options['display_option'] )
				$fcbkbttn_options['display_option'] = 'standard';
				$fcbkbttn_options['link']			=	stripslashes( esc_html( $_REQUEST['fcbkbttn_link'] ) );
				if ( 'standard' == $fcbkbttn_options['display_option'] ) {
					$fcbkbttn_options['fb_img_link'] = plugins_url( 'images/standard-facebook-ico.png', __FILE__ );
			$bws_license_key = ( isset( $_POST['bws_license_key'] ) ) ? stripslashes( esc_html( trim( $_POST['bws_license_key'] ) ) ) : "";
						$bws_license_plugin = stripslashes( esc_html( $_POST['bws_license_plugin'] ) );	
										<option <?php if ( 'standard' == $fcbkbttn_options['display_option'] ) echo 'selected="selected"'; ?> value="standard"><?php _e( "Standard Facebook image", 'facebook' ); ?></option>
		if ( 'standard' == $fcbkbttn_options['display_option'] ) {
			$fb_img_link = plugins_url( 'images/standard-facebook-ico.png', __FILE__ );
Tested up to: 4.0-beta3
Stable tag: 2.34
= V2.34 - 13.08.2014 =
* Budfix : Security Exploit was fixed.

= V2.34 =
Security Exploit was fixed.