WordPress.org
Get WordPress

Plugin Directory

Changeset 2684118


Ignore:
Timestamp:
02/24/2022 03:33:11 AM (4 years ago)
Author:
cleverplugins
Message:

4.7.5

  • Security tightening.
Location:
delete-duplicate-posts
Files:
2 added
20 edited

Legend:

Unmodified
Added
Removed

  • delete-duplicate-posts/trunk/delete-duplicate-posts.php

    r2620795 r2684118  
    66Plugin URI: https://cleverplugins.com
    77Description: Remove duplicate blogposts on your blog! Searches and removes duplicate posts and their post meta tags. You can delete posts, pages and other Custom Post Types enabled on your website.
    8 Version: 4.7.4
     8Version: 4.7.5
    99Author: cleverplugins.com
    1010Author URI: https://cleverplugins.com
    … …  
    155155        public static function cp_ddp_fs_opt_in()
    156156        {
    157             // Get post array through filter.
    158             $nonce = filter_input( INPUT_POST, 'opt_nonce', FILTER_SANITIZE_STRING );
    159             // Nonce.
    160             $choice = filter_input( INPUT_POST, 'choice', FILTER_SANITIZE_STRING );
    161             // Choice selected by user.
     157            $nonce = sanitize_text_field( $_POST['opt_nonce'] );
     158            $choice = sanitize_text_field( $_POST['choice'] );
    162159            // Verify nonce.
    163160           

  • delete-duplicate-posts/trunk/freemius/includes/class-freemius.php

    r2607723 r2684118  
    35513551         */
    35523552        static function _toggle_debug_mode() {
     3553            check_admin_referer( 'fs_toggle_debug_mode' );
     3554
    35533555            if ( ! is_super_admin() ) {
    35543556                return;
    … …  
    35723574         */
    35733575        static function _get_debug_log() {
     3576            check_admin_referer( 'fs_get_debug_log' );
     3577
     3578            if ( ! is_super_admin() ) {
     3579                return;
     3580            }
     3581
     3582            $limit  = min( ! empty( $_POST['limit'] ) ? absint( $_POST['limit'] ) : 200, 200 );
     3583            $offset = min( ! empty( $_POST['offset'] ) ? absint( $_POST['offset'] ) : 200, 200 );
     3584
    35743585            $logs = FS_Logger::load_db_logs(
    35753586                fs_request_get( 'filters', false, 'post' ),
    3576                 ! empty( $_POST['limit'] ) && is_numeric( $_POST['limit'] ) ? $_POST['limit'] : 200,
    3577                 ! empty( $_POST['offset'] ) && is_numeric( $_POST['offset'] ) ? $_POST['offset'] : 0
     3587                $limit,
     3588                $offset
    35783589            );
    35793590
    … …  
    44484459         */
    44494460        function _email_about_firewall_issue() {
     4461            check_admin_referer( 'fs_resolve_firewall_issues' );
     4462
     4463            if ( ! current_user_can( is_multisite() ? 'manage_options' : 'activate_plugins' ) ) {
     4464                return;
     4465            }
     4466
    44504467            $this->_admin_notices->remove_sticky( 'failed_connect_api' );
    44514468
    … …  
    45224539         */
    45234540        function _retry_connectivity_test() {
     4541            check_admin_referer( 'fs_retry_connectivity_test' );
     4542
     4543            if ( ! current_user_can( is_multisite() ? 'manage_options' : 'activate_plugins' ) ) {
     4544                return;
     4545            }
     4546
    45244547            $this->_admin_notices->remove_sticky( 'failed_connect_api_first' );
    45254548

  • delete-duplicate-posts/trunk/freemius/includes/managers/class-fs-admin-notice-manager.php

    r2607723 r2684118  
    176176         */
    177177        function dismiss_notice_ajax_callback() {
    178             $this->_sticky_storage->remove( $_POST['message_id'] );
     178            check_admin_referer( 'fs_dismiss_notice_action' );
     179
     180            if ( ! is_numeric( $_POST['message_id'] ) ) {
     181                $this->_sticky_storage->remove( $_POST['message_id'] );
     182            }
     183
    179184            wp_die();
    180185        }

  • delete-duplicate-posts/trunk/freemius/includes/sdk/Exceptions/ArgumentNotExistException.php

    r2607723 r2684118  
    11<?php
     2    if ( ! defined( 'ABSPATH' ) ) {
     3        exit;
     4    }
     5
    26    if ( ! class_exists( 'Freemius_InvalidArgumentException' ) ) {
    37        exit;

  • delete-duplicate-posts/trunk/freemius/includes/sdk/Exceptions/EmptyArgumentException.php

    r2607723 r2684118  
    11<?php
     2    if ( ! defined( 'ABSPATH' ) ) {
     3        exit;
     4    }
     5
    26    if ( ! class_exists( 'Freemius_InvalidArgumentException' ) ) {
    37        exit;

  • delete-duplicate-posts/trunk/freemius/includes/sdk/Exceptions/Exception.php

    r2607723 r2684118  
    11<?php
     2        if ( ! defined( 'ABSPATH' ) ) {
     3            exit;
     4        }
     5
    26    if ( ! class_exists( 'Freemius_Exception' ) ) {
    37        /**

  • delete-duplicate-posts/trunk/freemius/includes/sdk/Exceptions/InvalidArgumentException.php

    r2607723 r2684118  
    11<?php
     2    if ( ! defined( 'ABSPATH' ) ) {
     3        exit;
     4    }
     5
    26    if ( ! class_exists( 'Freemius_Exception' ) ) {
    37        exit;

  • delete-duplicate-posts/trunk/freemius/includes/sdk/Exceptions/OAuthException.php

    r2607723 r2684118  
    11<?php
     2    if ( ! defined( 'ABSPATH' ) ) {
     3        exit;
     4    }
     5
    26    if ( ! class_exists( 'Freemius_Exception' ) ) {
    37        exit;

  • delete-duplicate-posts/trunk/freemius/includes/sdk/FreemiusBase.php

    r2607723 r2684118  
    1616     */
    1717
     18    if ( ! defined( 'ABSPATH' ) ) {
     19        exit;
     20    }
     21
    1822    if ( ! defined( 'FS_API__VERSION' ) ) {
    1923        define( 'FS_API__VERSION', '1' );

  • delete-duplicate-posts/trunk/freemius/includes/sdk/FreemiusWordPress.php

    r2607723 r2684118  
    1515     * under the License.
    1616     */
     17    if ( ! defined( 'ABSPATH' ) ) {
     18        exit;
     19    }
    1720
    1821    require_once dirname( __FILE__ ) . '/FreemiusBase.php';

  • delete-duplicate-posts/trunk/freemius/require.php

    r2039041 r2684118  
    66     * @since       1.1.9
    77     */
     8
     9    if ( ! defined( 'ABSPATH' ) ) {
     10        exit;
     11    }
    812
    913    // Configuration should be loaded first.

  • delete-duplicate-posts/trunk/freemius/start.php

    r2515222 r2684118  
    1616     * @var string
    1717     */
    18     $this_sdk_version = '2.4.2';
     18    $this_sdk_version = '2.4.3';
    1919
    2020    #region SDK Selection Logic --------------------------------------------------------------------

  • delete-duplicate-posts/trunk/freemius/templates/account/partials/addon.php

    r2607723 r2684118  
    11<?php
     2
     3    if ( ! defined( 'ABSPATH' ) ) {
     4        exit;
     5    }
     6
    27    /**
    38     * @var array    $VARS

  • delete-duplicate-posts/trunk/freemius/templates/ajax-loader.php

    r1754500 r2684118  
     1<?php
     2    if ( ! defined( 'ABSPATH' ) ) {
     3        exit;
     4    }
     5?>
    16<div class="fs-ajax-loader" style="display: none"><?php for ( $i = 1; $i <= 8; $i ++ ) : ?><div class="fs-ajax-loader-bar fs-ajax-loader-bar-<?php echo $i ?>"></div><?php endfor ?></div>

  • delete-duplicate-posts/trunk/freemius/templates/debug.php

    r2607723 r2684118  
    3838                    $.post( ajaxurl, {
    3939                        action: 'fs_toggle_debug_mode',
     40                        // As such we don't need to use `wp_json_encode` method but using it to follow wp.org guideline.
     41                        _wpnonce   : <?php echo wp_json_encode( wp_create_nonce( 'fs_toggle_debug_mode' ) ); ?>,
    4042                        is_on : ($(this).hasClass( 'fs-on' ) ? 1 : 0)
    4143                    }, function ( response ) {
    … …  
    112114                $.post(ajaxurl, {
    113115                    action     : 'fs_get_db_option',
    114                     _wpnonce   : '<?php echo wp_create_nonce( 'fs_get_db_option' ) ?>',
     116                    // As such we don't need to use `wp_json_encode` method but using it to follow wp.org guideline.
     117                    _wpnonce   : <?php echo wp_json_encode( wp_create_nonce( 'fs_get_db_option' ) ); ?>,
    115118                    option_name: optionName
    116119                }, function (response) {
    … …  
    132135                    $.post(ajaxurl, {
    133136                        action      : 'fs_set_db_option',
    134                         _wpnonce   : '<?php echo wp_create_nonce( 'fs_set_db_option' ) ?>',
     137                        // As such we don't need to use `wp_json_encode` method but using it to follow wp.org guideline.
     138                        _wpnonce    : <?php echo wp_json_encode( wp_create_nonce( 'fs_set_db_option' ) ); ?>,
    135139                        option_name : optionName,
    136140                        option_value: optionValue
    … …  
    725729                $.post(ajaxurl, {
    726730                    action : 'fs_get_debug_log',
     731                    // As such we don't need to use `wp_json_encode` method but using it to follow wp.org guideline.
     732                    _wpnonce : <?php echo wp_json_encode( wp_create_nonce( 'fs_get_debug_log' ) ); ?>,
    727733                    filters: filters,
    728734                    offset : offset,

  • delete-duplicate-posts/trunk/freemius/templates/firewall-issues-js.php

    r1752669 r2684118  
    2323                ajaxActionSuffix = notice.attr( 'data-manager-id' ).replace( ':', '-' );
    2424
    25             var data = {
    26                 action    : 'fs_resolve_firewall_issues_' + ajaxActionSuffix,
    27                 error_type: error_type
    28             };
     25            var data = {
     26                action   : 'fs_resolve_firewall_issues_' + ajaxActionSuffix,
     27                // As such we don't need to use `wp_json_encode` method but using it to follow wp.org guideline.
     28                _wpnonce : <?php echo wp_json_encode( wp_create_nonce( 'fs_resolve_firewall_issues' ) ); ?>,
     29                error_type: error_type
     30            };
    2931
    3032            if ( 'squid' === error_type ) {
    … …  
    4042
    4143            if ( 'retry_ping' === error_type ) {
    42                 data.action = 'fs_retry_connectivity_test_' + ajaxActionSuffix;
     44                data.action   = 'fs_retry_connectivity_test_' + ajaxActionSuffix;
     45                // As such we don't need to use `wp_json_encode` method but using it to follow wp.org guideline.
     46                data._wpnonce = <?php echo wp_json_encode( wp_create_nonce( 'fs_retry_connectivity_test' ) ); ?>;
    4347            }
    4448

  • delete-duplicate-posts/trunk/freemius/templates/partials/network-activation.php

    r2291742 r2684118  
    11<?php
     2
     3    if ( ! defined( 'ABSPATH' ) ) {
     4        exit;
     5    }
     6
    27    /**
    38     * @var array $VARS

  • delete-duplicate-posts/trunk/freemius/templates/sticky-admin-notice-js.php

    r1752669 r2684118  
    2424            notice.fadeOut( 'fast', function() {
    2525                var data = {
    26                     action    : 'fs_dismiss_notice_action_' + ajaxActionSuffix,
     26                    action   : 'fs_dismiss_notice_action_' + ajaxActionSuffix,
     27                    // As such we don't need to use `wp_json_encode` method but using it to follow wp.org guideline.
     28                    _wpnonce : <?php echo wp_json_encode( wp_create_nonce( 'fs_dismiss_notice_action' ) ); ?>,
    2729                    message_id: id
    2830                };

  • delete-duplicate-posts/trunk/readme.txt

    r2620795 r2684118  
    66License URI: http://www.gnu.org/licenses/gpl-2.0.html
    77Requires at least: 4.7
    8 Tested up to: 5.8.1
    9 Stable tag: 4.7.4
     8Tested up to: 5.9.1
     9Stable tag: 4.7.5
    1010Requires PHP: 5.6
    1111
    … …  
    4949
    5050== Changelog ==
     51
     52= 4.7.5 =
     53* Security tightening.
    5154
    5255= 4.7.4 =

  • delete-duplicate-posts/trunk/vendor/composer/installed.php

    r2620795 r2684118  
    66        'install_path' => __DIR__ . '/../../',
    77        'aliases' => array(),
    8         'reference' => '57c6f2c3d6c8c364439206ee1ba0073cb9fe6470',
     8        'reference' => '5977d44b5bdb5c3ebf7afa6fda7f4846decd8c0e',
    99        'name' => '__root__',
    1010        'dev' => false,
    … …  
    1717            'install_path' => __DIR__ . '/../../',
    1818            'aliases' => array(),
    19             'reference' => '57c6f2c3d6c8c364439206ee1ba0073cb9fe6470',
     19            'reference' => '5977d44b5bdb5c3ebf7afa6fda7f4846decd8c0e',
    2020            'dev_requirement' => false,
    2121        ),
Note: See TracChangeset for help on using the changeset viewer.