WordPress.org
Get WordPress

Plugin Directory

Changeset 1648105


Ignore:
Timestamp:
04/29/2017 04:45:32 PM (9 years ago)
Author:
DWUser.com
Message:

Commit update to version 1.0.14 - security update

Location:
easyrotator-for-wordpress
Files:
3 edited

Legend:

Unmodified
Added
Removed

  • easyrotator-for-wordpress/tags/1.0.2/engine/main.php

    r623095 r1648105  
    22
    33/*
    4 Copyright 2011-2012 DWUser.com.
     4Copyright 2011-2017 DWUser.com.
    55Email contact: support {at] dwuser.com
    66
    … …  
    6464        if (@$_GET['action'] == 'renderFrame')
    6565        {
     66            if (!preg_match('|engine/main\.php$|i', $_SERVER['PHP_SELF']))
     67                die('Invalid request.');
     68               
    6669            $path = @$_GET['path'];
    6770            ?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    … …  
    11701173    public function renderRotator($fullPath)
    11711174    {
     1175        // Initial input validation
     1176        if (!preg_match('|^[A-Za-z0-9/_]+$|', $fullPath))
     1177        {
     1178            return ('<div style="background:#000; padding: 10px; color: #FFF;">Invalid rotator ID specified.  Unable to display rotator.</div>');
     1179        }
     1180   
    11721181        $path = $this->getContentDir() . $fullPath;
    11731182        $path = preg_replace('|/$|', '', $path); // remove any trailing slash

  • easyrotator-for-wordpress/trunk/easyrotator.php

    r1600780 r1648105  
    44Plugin URI: http://www.dwuser.com/easyrotator/wordpress/
    55Description: Add professional, customizable photo sliders to your site in seconds.  Powered by the EasyRotator application from DWUser.com.
    6 Version: 1.0.13
     6Version: 1.0.14
    77Author: DWUser.com
    88Author URI: http://www.dwuser.com/
    … …  
    1212
    1313/*
    14 Copyright 2011-2015 DWUser.com.
     14Copyright 2011-2017 DWUser.com.
    1515Email contact: support {at] dwuser.com
    1616

  • easyrotator-for-wordpress/trunk/readme.txt

    r1581849 r1648105  
    55Requires at least: 2.8
    66Tested up to: 4.7.1
    7 Stable tag: 1.0.13
     7Stable tag: 1.0.14
    88License: GPLv2 or later
    99License URI: http://www.gnu.org/licenses/gpl-2.0.html
    … …  
    166166
    167167== Changelog ==
     168= 1.0.14 =
     169* Security Update: Important update to ensure malicious plugins cannot compromise security when using the WordPress admin with EasyRotator installed.
     170
    168171= 1.0.13 =
    169172* Compatibility Enhancement: Update widget constructor for WordPress 4.3
Note: See TracChangeset for help on using the changeset viewer.