Changeset 2046580

Timestamp:

03/08/2019 11:51:36 AM (7 years ago)

Author:

aueda

Message:

media-file-manager 1.4.4

Location:

media-file-manager

Files:

• tags/1.4.4 (added)
• tags/1.4.4/images (added)
• tags/1.4.4/images/MRL_Icons.svg (added)
• tags/1.4.4/images/audio.png (added)
• tags/1.4.4/images/dir.png (added)
• tags/1.4.4/images/dir_new.png (added)
• tags/1.4.4/images/dir_up.png (added)
• tags/1.4.4/images/file.png (added)
• tags/1.4.4/images/left.png (added)
• tags/1.4.4/images/media_folder.png (added)
• tags/1.4.4/images/no_thumb.png (added)
• tags/1.4.4/images/right.png (added)
• tags/1.4.4/images/video.png (added)
• tags/1.4.4/jquery.appear-1.1.1.min.js (added)
• tags/1.4.4/jquery.appear.js (added)
• tags/1.4.4/media-relocator.js (added)
• tags/1.4.4/media-relocator.php (added)
• tags/1.4.4/media-selector.js (added)
• tags/1.4.4/media-selector.php (added)
• tags/1.4.4/readme.txt (added)
• tags/1.4.4/screenshot-1.jpg (added)
• tags/1.4.4/set_document_root.php (added)
• tags/1.4.4/style.css (added)
• trunk/media-relocator.php (modified) (2 diffs)
• trunk/readme.txt (modified) (2 diffs)

media-file-manager/trunk/media-relocator.php

@@ -4 +4 @@
 Plugin URI: http://tempspace.net/plugins/?page_id=111
 Description: You can make sub-directories in the upload directory, and move files into them. At the same time, this plugin modifies the URLs/path names in the database. Also an alternative file-selector is added in the editing post/page screen, so you can pick up media files from the subfolders easily.
-Version: 1.4.3
+Version: 1.4.4
 Author: Atsushi Ueda
 Author URI: http://tempspace.net/plugins/
@@ -134 +134 @@
 function mrelocator_getdir($dir, &$ret_arr)
 {
+    global $mrelocator_uploaddir;
+    if (strpos(realpath($dir), $mrelocator_uploaddir)!=0) {
+        return "";
+    }
+
     $dh = @opendir ( $dir );
 

media-file-manager/trunk/readme.txt

@@ -5 +5 @@
 Requires at least: 5.0.0
 Tested up to: 4.8.0
-Stable tag: 1.4.3
+Stable tag: 1.4.4
 
 You can make sub-directories in the upload directory, and move files into them.
@@ -55 +55 @@
 
 == Changelog ==
+
+= 1.4.4 =
+* Fixed security bugs.
 
 = 1.4.3 =