WordPress.org
Get WordPress

Plugin Directory

Changeset 1460479


Ignore:
Timestamp:
07/25/2016 10:53:20 PM (10 years ago)
Author:
fdoromo
Message:

tags/3.4.1 (fix vulnerability)

Location:
total-security
Files:
73 added
1 deleted
5 edited

Legend:

Unmodified
Added
Removed

  • total-security/trunk/modules/class-p4.php

    r903302 r1460479  
    253253            foreach ( $data as $item => $attr ) {
    254254
    255                 $rows[$count]['timestamp'] = $attr['timestamp'];
    256                 $rows[$count]['id'] = $attr['id'];
    257                 $rows[$count]['host'] = $attr['host'];
    258                 $rows[$count]['uri'] = $attr['url'];
    259                 $rows[$count]['referrer'] = $attr['referrer'];
     255                $rows[$count]['timestamp'] = sanitize_text_field($attr['timestamp']);
     256                $rows[$count]['id'] = sanitize_text_field($attr['id']);
     257                $rows[$count]['host'] = sanitize_text_field($attr['host']);
     258                $rows[$count]['uri'] = sanitize_text_field($attr['url']);
     259                $rows[$count]['referrer'] = sanitize_text_field($attr['referrer']);
    260260                $count++;
    261261

  • total-security/trunk/modules/class-process.php

    r903302 r1460479  
    44function __construct() {
    55              if (isset( $_POST['fdx_page']) ) {
    6               add_filter('init', array( $this, 'fdx_update_post_settings') );
     6              add_filter('init', array( $this, 'fdx_update_post_settings') );
    77              }
    88
    … …  
    4343 */
    4444function fdx_update_post_settings() {
    45            switch ( $_POST['fdx_page'] ) {
    46                     case 'fdx_form_all':
     45                   check_admin_referer( 'fdx_nonce' );
     46                   switch ( $_POST['fdx_page'] ) {
     47                    case 'fdx_form_all':
    4748                    $this->fdx_process_all();
    4849                    # first donation hidding time 'now'
    … …  
    6667                    break;
    6768    }
     69
    6870}
    6971

  • total-security/trunk/modules/inc-p6.php

    r903302 r1460479  
    3131//form
    3232echo '<form method="post" action="">';
    33       wp_nonce_field();
     33      wp_nonce_field( 'fdx_nonce' );
    3434echo '<input type="hidden" name="fdx_page" value="fdx_form_all" />';
    3535
    … …  
    145145echo '<div class="button_reset">';
    146146echo '<form method="post" action="">';
     147wp_nonce_field( 'fdx_nonce' );
    147148echo '<input type="hidden" name="fdx_page" value="fdx_reset" />';
    148149echo submit_button( __('Restore Defaults', $this->hook ), 'secondary', 'Submit' , false, array( 'id' => 'space', 'onclick' => 'return confirm(\'' . esc_js( __( 'Restore Default Settings?',  $this->hook ) ) . '\');' ) );

  • total-security/trunk/readme.txt

    r1457847 r1460479  
    44Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=8DHY4NXW35T4Y
    55Tags: security, scan ,scanner, hack, exploit, secure, malware, phishing, vulnerability, scours, unsafe, total, 404 log, error 404, stealth login, hidden login, Bookmarklet,Log Viewer, debug.log
    6 Requires at least: 4.5.2
    7 Tested up to: 4.5.2
    8 Stable tag: 3.4
     6Requires at least: 4.5.3
     7Tested up to: 4.5.3
     8Stable tag: 3.4.1
    99License: GPLv2 or later
    1010
    … …  
    124124
    125125== Changelog ==
     126* 3.4.1
     127    * IMPROVED - Compatibility with WordPress 4.5.3
     128    * FIX -  Persistent cross-site scripting (XSS) vulnerability
     129    * FIX -  Settings change vulnerability
     130
    126131* 3.4
    127132    * NEW - New Test: SSL Logins and SSL Admin Access

  • total-security/trunk/total-security.php

    r1457847 r1460479  
    44 * Plugin URI: http://fabrix.net/total-security/
    55 * Description: Checks your WordPress installation and provides detailed reporting on discovered vulnerabilities, anything suspicious and how to fix them.
    6  * Version: 3.4
     6 * Version: 3.4.1
    77 * Author: Fabrix DoRoMo
    88 * Author URI: http://fabrix.net
    … …  
    1414
    1515class Total_Security {
    16         public $min_wp_ver          = '4.5.2'; //
    17         public $pluginversion       = '3.4';
     16        public $min_wp_ver          = '4.5.3'; //
     17        public $pluginversion       = '3.4.1';
    1818        public $pluginname          = 'Total Security';
    1919        public $hook                = 'total-security';
Note: See TracChangeset for help on using the changeset viewer.