Changeset 1095315

Timestamp:

02/20/2015 05:06:07 PM (11 years ago)

Author:

iluminatus

Message:

Replacing mysql_real_escape_string with htmlspecialchars for compatibility with some PHP configurations. Tested compatibility with WP 4.1.1

Location:

network-latest-posts/trunk

Files:

• js/nlposts_shortcode_form.php (modified) (1 diff)
• network-latest-posts-widget.php (modified) (3 diffs)
• network-latest-posts.php (modified) (2 diffs)
• readme.txt (modified) (2 diffs)

network-latest-posts/trunk/js/nlposts_shortcode_form.php

@@ -27 +27 @@
     $path = false;
     // Check multiple levels, until find the config file
-    if (@file_exists(dirname(dirname($base))."/wp-config.php")){
+    if (@file_exists(dirname(dirname($base))."/wp-load.php")){
         $path = dirname(dirname($base));
-    } elseif (@file_exists(dirname(dirname(dirname($base)))."/wp-config.php")) {
+    } elseif (@file_exists(dirname(dirname(dirname($base)))."/wp-load.php")) {
         $path = dirname(dirname(dirname($base)));
-    } elseif (@file_exists(dirname(dirname(dirname(dirname($base))))."/wp-config.php")) {
+    } elseif (@file_exists(dirname(dirname(dirname(dirname($base))))."/wp-load.php")) {
         $path = dirname(dirname(dirname(dirname($base))));
-    } elseif (@file_exists(dirname(dirname(dirname(dirname(dirname($base)))))."/wp-config.php")) {
+    } elseif (@file_exists(dirname(dirname(dirname(dirname(dirname($base)))))."/wp-load.php")) {
         $path = dirname(dirname(dirname(dirname(dirname($base)))));
     } else {

network-latest-posts/trunk/network-latest-posts-widget.php

@@ -2 +2 @@
 /*
     Network Latest Posts Widget
-    Version 3.5.6
+    Version 3.6.1
     Author L'Elite
     Author URI http://laelite.info/
@@ -104 +104 @@
                 } else {
                     // Scape the string (trying to minimize injection risks
-                    $instance['blog_id'] = implode(',', array_map('mysql_real_escape_string', $instance['blog_id']));
+                    $instance['blog_id'] = implode(',', array_map('htmlspecialchars', $instance['blog_id']));
                 }
              // If it isn't an array
@@ -126 +126 @@
                 } else {
                     // Scape the string (trying to minimize injection risks
-                    $instance['ignore_blog'] = implode(',', array_map('mysql_real_escape_string', $instance['ignore_blog']));
+                    $instance['ignore_blog'] = implode(',', array_map('htmlspecialchars', $instance['ignore_blog']));
                 }
              // If it isn't an array

network-latest-posts/trunk/network-latest-posts.php

@@ -4 +4 @@
 Plugin URI: http://en.8elite.com/network-latest-posts
 Description: Display the latest posts from the blogs in your network using it as a function, shortcode or widget.
-Version: 3.6
+Version: 3.6.1
 Author: Jose Luis SAYAGO
 Author URI: http://laelite.info/
@@ -193 +193 @@
     global $wpdb;
     //global $nlp_time_frame;
+    // Variables
+    $total  = 0;
+    $ignore = '';
     // Default values
     $defaults = array(

network-latest-posts/trunk/readme.txt

@@ -4 +4 @@
 Tags: recent posts, shortcode, widget, network, latest posts
 Requires at least: 3.0
-Tested up to: 4.0
-Stable tag: 3.6
+Tested up to: 4.1.1
+Stable tag: 3.6.1
 
 This plugin allows you to pull all the recent posts from the blogs in your WordPress network and display them in your main site (or internal sites)
@@ -149 +149 @@
 == Changelog ==
 
+= 3.6.1 =
+* Improved widget class security for compatibility with certain PHP configurations.
+* Tested compatibility with WordPress 4.1.1
+
 = 3.6 =
 * Added filters for custom HTML tags.