Changeset 2671709

Timestamp:

02/02/2022 09:59:51 PM (3 years ago)

Author:

StatCounter

Message:

tagging version 2.0.9

Location:

official-statcounter-plugin-for-wordpress

Files:

• tags/2.0.9 (copied) (copied from official-statcounter-plugin-for-wordpress/trunk)
• tags/2.0.9/StatCounter-Wordpress-Plugin.php (copied) (copied from official-statcounter-plugin-for-wordpress/trunk/StatCounter-Wordpress-Plugin.php) (4 diffs)
• tags/2.0.9/readme.txt (copied) (copied from official-statcounter-plugin-for-wordpress/trunk/readme.txt) (3 diffs)
• trunk/StatCounter-Wordpress-Plugin.php (modified) (4 diffs)
• trunk/readme.txt (modified) (3 diffs)

official-statcounter-plugin-for-wordpress/tags/2.0.9/StatCounter-Wordpress-Plugin.php

@@ -2 +2 @@
 /*
  * Plugin Name: Official StatCounter Plugin
- * Version: 2.0.8
+ * Version: 2.0.9
  * Plugin URI: http://statcounter.com/
  * Description: Adds the StatCounter tracking code to your blog. <br>To get setup: 1) Activate this plugin  2) Enter your StatCounter Project ID and Security Code in the <a href="options-general.php?page=StatCounter-Wordpress-Plugin.php"><strong>options page</strong></a>.
@@ -71 +71 @@
 function statcounter_options_page() {
     // If we are a postback, store the options
-    if ( isset( $_POST[esc_html('info_update')] ) && check_admin_referer( 'update_sc_project_nonce', 'sc_project_nonce' ) ) {
+    if ( isset( $_POST['info_update'] ) && check_admin_referer( 'update_sc_project_nonce', 'sc_project_nonce' ) ) {
 
         // Update the Project ID
@@ -106 +106 @@
 
         // Update the position
-        $sc_position = $_POST[esc_html(key_sc_position)];
+        $sc_position = sanitize_text_field($_POST[key_sc_position]);
         if (($sc_position != 'header') && ($sc_position != 'footer')) {
             $sc_position = sc_position_default;
@@ -114 +114 @@
 
         // Force invisibility
-        $sc_invisible = $_POST[esc_html('sc_invisible')];
+        $sc_invisible = sanitize_text_field(isset($_POST['sc_invisible'])) ? sanitize_text_field($_POST['sc_invisible']) : '';
         if ($sc_invisible == 1) {
             update_option('sc_invisible', "1");

official-statcounter-plugin-for-wordpress/tags/2.0.9/readme.txt

@@ -5 +5 @@
 Requires at least: 2.0.2
 Tested up to: 5.9
-Stable tag: 2.0.8
+Stable tag: 2.0.9
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -70 +70 @@
 
 == Changelog ==
+
+= 2.0.9 =
+Updated security checks
+
+= 2.0.8 =
+Added additional security checks
+
 = 2.0.7 =
 Added additional sanitation to prevent XSS attacks
@@ -171 +178 @@
 = 1.6.2 =
 Upgrade to allow for fully functioning PayPal upgrade options.
+  

official-statcounter-plugin-for-wordpress/trunk/StatCounter-Wordpress-Plugin.php

@@ -2 +2 @@
 /*
  * Plugin Name: Official StatCounter Plugin
- * Version: 2.0.8
+ * Version: 2.0.9
  * Plugin URI: http://statcounter.com/
  * Description: Adds the StatCounter tracking code to your blog. <br>To get setup: 1) Activate this plugin  2) Enter your StatCounter Project ID and Security Code in the <a href="options-general.php?page=StatCounter-Wordpress-Plugin.php"><strong>options page</strong></a>.
@@ -71 +71 @@
 function statcounter_options_page() {
     // If we are a postback, store the options
-    if ( isset( $_POST[esc_html('info_update')] ) && check_admin_referer( 'update_sc_project_nonce', 'sc_project_nonce' ) ) {
+    if ( isset( $_POST['info_update'] ) && check_admin_referer( 'update_sc_project_nonce', 'sc_project_nonce' ) ) {
 
         // Update the Project ID
@@ -106 +106 @@
 
         // Update the position
-        $sc_position = $_POST[esc_html(key_sc_position)];
+        $sc_position = sanitize_text_field($_POST[key_sc_position]);
         if (($sc_position != 'header') && ($sc_position != 'footer')) {
             $sc_position = sc_position_default;
@@ -114 +114 @@
 
         // Force invisibility
-        $sc_invisible = $_POST[esc_html('sc_invisible')];
+        $sc_invisible = sanitize_text_field(isset($_POST['sc_invisible'])) ? sanitize_text_field($_POST['sc_invisible']) : '';
         if ($sc_invisible == 1) {
             update_option('sc_invisible', "1");

official-statcounter-plugin-for-wordpress/trunk/readme.txt

@@ -5 +5 @@
 Requires at least: 2.0.2
 Tested up to: 5.9
-Stable tag: 2.0.8
+Stable tag: 2.0.9
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -70 +70 @@
 
 == Changelog ==
+
+= 2.0.9 =
+Updated security checks
+
+= 2.0.8 =
+Added additional security checks
+
 = 2.0.7 =
 Added additional sanitation to prevent XSS attacks
@@ -171 +178 @@
 = 1.6.2 =
 Upgrade to allow for fully functioning PayPal upgrade options.
+