WordPress.org
Get WordPress

Plugin Directory

Changeset 2684456


Ignore:
Timestamp:
02/24/2022 02:50:18 PM (4 years ago)
Author:
cleverplugins
Message:

5.135

  • Core Scanner - Now with "Delete all" button.
  • Security fix.
Location:
security-ninja
Files:
398 added
33 edited

Legend:

Unmodified
Added
Removed

  • security-ninja/trunk/freemius/includes/class-freemius.php

    r2520164 r2684456  
    35513551         */
    35523552        static function _toggle_debug_mode() {
     3553            check_admin_referer( 'fs_toggle_debug_mode' );
     3554
    35533555            if ( ! is_super_admin() ) {
    35543556                return;
    … …  
    35723574         */
    35733575        static function _get_debug_log() {
     3576            check_admin_referer( 'fs_get_debug_log' );
     3577
     3578            if ( ! is_super_admin() ) {
     3579                return;
     3580            }
     3581
     3582            $limit  = min( ! empty( $_POST['limit'] ) ? absint( $_POST['limit'] ) : 200, 200 );
     3583            $offset = min( ! empty( $_POST['offset'] ) ? absint( $_POST['offset'] ) : 200, 200 );
     3584
    35743585            $logs = FS_Logger::load_db_logs(
    35753586                fs_request_get( 'filters', false, 'post' ),
    3576                 ! empty( $_POST['limit'] ) && is_numeric( $_POST['limit'] ) ? $_POST['limit'] : 200,
    3577                 ! empty( $_POST['offset'] ) && is_numeric( $_POST['offset'] ) ? $_POST['offset'] : 0
     3587                $limit,
     3588                $offset
    35783589            );
    35793590
    … …  
    44484459         */
    44494460        function _email_about_firewall_issue() {
     4461            check_admin_referer( 'fs_resolve_firewall_issues' );
     4462
     4463            if ( ! current_user_can( is_multisite() ? 'manage_options' : 'activate_plugins' ) ) {
     4464                return;
     4465            }
     4466
    44504467            $this->_admin_notices->remove_sticky( 'failed_connect_api' );
    44514468
    … …  
    45224539         */
    45234540        function _retry_connectivity_test() {
     4541            check_admin_referer( 'fs_retry_connectivity_test' );
     4542
     4543            if ( ! current_user_can( is_multisite() ? 'manage_options' : 'activate_plugins' ) ) {
     4544                return;
     4545            }
     4546
    45244547            $this->_admin_notices->remove_sticky( 'failed_connect_api_first' );
    45254548

  • security-ninja/trunk/freemius/includes/managers/class-fs-admin-notice-manager.php

    r2144450 r2684456  
    176176         */
    177177        function dismiss_notice_ajax_callback() {
    178             $this->_sticky_storage->remove( $_POST['message_id'] );
     178            check_admin_referer( 'fs_dismiss_notice_action' );
     179
     180            if ( ! is_numeric( $_POST['message_id'] ) ) {
     181                $this->_sticky_storage->remove( $_POST['message_id'] );
     182            }
     183
    179184            wp_die();
    180185        }

  • security-ninja/trunk/freemius/includes/sdk/Exceptions/ArgumentNotExistException.php

    r2144450 r2684456  
    11<?php
     2    if ( ! defined( 'ABSPATH' ) ) {
     3        exit;
     4    }
     5
    26    if ( ! class_exists( 'Freemius_InvalidArgumentException' ) ) {
    37        exit;

  • security-ninja/trunk/freemius/includes/sdk/Exceptions/EmptyArgumentException.php

    r2144450 r2684456  
    11<?php
     2    if ( ! defined( 'ABSPATH' ) ) {
     3        exit;
     4    }
     5
    26    if ( ! class_exists( 'Freemius_InvalidArgumentException' ) ) {
    37        exit;

  • security-ninja/trunk/freemius/includes/sdk/Exceptions/Exception.php

    r2144450 r2684456  
    11<?php
     2        if ( ! defined( 'ABSPATH' ) ) {
     3            exit;
     4        }
     5
    26    if ( ! class_exists( 'Freemius_Exception' ) ) {
    37        /**

  • security-ninja/trunk/freemius/includes/sdk/Exceptions/InvalidArgumentException.php

    r2144450 r2684456  
    11<?php
     2    if ( ! defined( 'ABSPATH' ) ) {
     3        exit;
     4    }
     5
    26    if ( ! class_exists( 'Freemius_Exception' ) ) {
    37        exit;

  • security-ninja/trunk/freemius/includes/sdk/Exceptions/OAuthException.php

    r2144450 r2684456  
    11<?php
     2    if ( ! defined( 'ABSPATH' ) ) {
     3        exit;
     4    }
     5
    26    if ( ! class_exists( 'Freemius_Exception' ) ) {
    37        exit;

  • security-ninja/trunk/freemius/includes/sdk/FreemiusBase.php

    r2357871 r2684456  
    1616     */
    1717
     18    if ( ! defined( 'ABSPATH' ) ) {
     19        exit;
     20    }
     21
    1822    if ( ! defined( 'FS_API__VERSION' ) ) {
    1923        define( 'FS_API__VERSION', '1' );

  • security-ninja/trunk/freemius/includes/sdk/FreemiusWordPress.php

    r2415533 r2684456  
    1515     * under the License.
    1616     */
     17    if ( ! defined( 'ABSPATH' ) ) {
     18        exit;
     19    }
    1720
    1821    require_once dirname( __FILE__ ) . '/FreemiusBase.php';

  • security-ninja/trunk/freemius/require.php

    r2144450 r2684456  
    66     * @since       1.1.9
    77     */
     8
     9    if ( ! defined( 'ABSPATH' ) ) {
     10        exit;
     11    }
    812
    913    // Configuration should be loaded first.

  • security-ninja/trunk/freemius/start.php

    r2520164 r2684456  
    1616     * @var string
    1717     */
    18     $this_sdk_version = '2.4.2';
     18    $this_sdk_version = '2.4.3';
    1919
    2020    #region SDK Selection Logic --------------------------------------------------------------------

  • security-ninja/trunk/freemius/templates/account/partials/addon.php

    r2357871 r2684456  
    11<?php
     2
     3    if ( ! defined( 'ABSPATH' ) ) {
     4        exit;
     5    }
     6
    27    /**
    38     * @var array    $VARS

  • security-ninja/trunk/freemius/templates/ajax-loader.php

    r2144450 r2684456  
     1<?php
     2    if ( ! defined( 'ABSPATH' ) ) {
     3        exit;
     4    }
     5?>
    16<div class="fs-ajax-loader" style="display: none"><?php for ( $i = 1; $i <= 8; $i ++ ) : ?><div class="fs-ajax-loader-bar fs-ajax-loader-bar-<?php echo $i ?>"></div><?php endfor ?></div>

  • security-ninja/trunk/freemius/templates/debug.php

    r2221350 r2684456  
    3838                    $.post( ajaxurl, {
    3939                        action: 'fs_toggle_debug_mode',
     40                        // As such we don't need to use `wp_json_encode` method but using it to follow wp.org guideline.
     41                        _wpnonce   : <?php echo wp_json_encode( wp_create_nonce( 'fs_toggle_debug_mode' ) ); ?>,
    4042                        is_on : ($(this).hasClass( 'fs-on' ) ? 1 : 0)
    4143                    }, function ( response ) {
    … …  
    112114                $.post(ajaxurl, {
    113115                    action     : 'fs_get_db_option',
    114                     _wpnonce   : '<?php echo wp_create_nonce( 'fs_get_db_option' ) ?>',
     116                    // As such we don't need to use `wp_json_encode` method but using it to follow wp.org guideline.
     117                    _wpnonce   : <?php echo wp_json_encode( wp_create_nonce( 'fs_get_db_option' ) ); ?>,
    115118                    option_name: optionName
    116119                }, function (response) {
    … …  
    132135                    $.post(ajaxurl, {
    133136                        action      : 'fs_set_db_option',
    134                         _wpnonce   : '<?php echo wp_create_nonce( 'fs_set_db_option' ) ?>',
     137                        // As such we don't need to use `wp_json_encode` method but using it to follow wp.org guideline.
     138                        _wpnonce    : <?php echo wp_json_encode( wp_create_nonce( 'fs_set_db_option' ) ); ?>,
    135139                        option_name : optionName,
    136140                        option_value: optionValue
    … …  
    725729                $.post(ajaxurl, {
    726730                    action : 'fs_get_debug_log',
     731                    // As such we don't need to use `wp_json_encode` method but using it to follow wp.org guideline.
     732                    _wpnonce : <?php echo wp_json_encode( wp_create_nonce( 'fs_get_debug_log' ) ); ?>,
    727733                    filters: filters,
    728734                    offset : offset,

  • security-ninja/trunk/freemius/templates/firewall-issues-js.php

    r2144450 r2684456  
    2323                ajaxActionSuffix = notice.attr( 'data-manager-id' ).replace( ':', '-' );
    2424
    25             var data = {
    26                 action    : 'fs_resolve_firewall_issues_' + ajaxActionSuffix,
    27                 error_type: error_type
    28             };
     25            var data = {
     26                action   : 'fs_resolve_firewall_issues_' + ajaxActionSuffix,
     27                // As such we don't need to use `wp_json_encode` method but using it to follow wp.org guideline.
     28                _wpnonce : <?php echo wp_json_encode( wp_create_nonce( 'fs_resolve_firewall_issues' ) ); ?>,
     29                error_type: error_type
     30            };
    2931
    3032            if ( 'squid' === error_type ) {
    … …  
    4042
    4143            if ( 'retry_ping' === error_type ) {
    42                 data.action = 'fs_retry_connectivity_test_' + ajaxActionSuffix;
     44                data.action   = 'fs_retry_connectivity_test_' + ajaxActionSuffix;
     45                // As such we don't need to use `wp_json_encode` method but using it to follow wp.org guideline.
     46                data._wpnonce = <?php echo wp_json_encode( wp_create_nonce( 'fs_retry_connectivity_test' ) ); ?>;
    4347            }
    4448

  • security-ninja/trunk/freemius/templates/partials/network-activation.php

    r2144450 r2684456  
    11<?php
     2
     3    if ( ! defined( 'ABSPATH' ) ) {
     4        exit;
     5    }
     6
    27    /**
    38     * @var array $VARS

  • security-ninja/trunk/freemius/templates/sticky-admin-notice-js.php

    r2144450 r2684456  
    2424            notice.fadeOut( 'fast', function() {
    2525                var data = {
    26                     action    : 'fs_dismiss_notice_action_' + ajaxActionSuffix,
     26                    action   : 'fs_dismiss_notice_action_' + ajaxActionSuffix,
     27                    // As such we don't need to use `wp_json_encode` method but using it to follow wp.org guideline.
     28                    _wpnonce : <?php echo wp_json_encode( wp_create_nonce( 'fs_dismiss_notice_action' ) ); ?>,
    2729                    message_id: id
    2830                };

  • security-ninja/trunk/misc/sidebar-help.php

    r2337733 r2684456  
    2323            <p><a href="<?php
    2424    echo  esc_url( secnin_fs()->get_reconnect_url() ) ;
    25     ?>" class="button button-primary button-hero" rel="noopener"><?php
     25    ?>" class="button button-primary button-hero"><?php
    2626    _e( 'Click here to opt in.', 'security-ninja' );
    2727    ?></a></p>

  • security-ninja/trunk/readme.txt

    r2683421 r2684456  
    66Requires at least: 4.7
    77Tested up to: 5.9.1
    8 Stable tag: 5.134
     8Stable tag: 5.135
    99Requires PHP: 5.6
    1010
    … …  
    188188== Changelog ==
    189189
     190= 5.135 =
     191* Core Scanner - Now with "Delete all" button.
     192* Security fix.
     193
    190194= 5.134 =
    191195* Rename login - when activated shows same message as set in the settings for blocked pages.

  • security-ninja/trunk/security-ninja.php

    r2683421 r2684456  
    66Description: Check your site for <strong>security vulnerabilities</strong> and get precise suggestions for corrective actions on passwords, user accounts, file permissions, database security, version hiding, plugins, themes, security headers and other security aspects.
    77Author: WP Security Ninja
    8 Version: 5.134
     8Version: 5.135
    99Author URI: https://wpsecurityninja.com/
    1010Text Domain: security-ninja
    … …  
    672672                ?>
    673673                <div data-dismissible="wfs-newsletter-30" class="updated notice notice-info is-dismissible">
    674                     <h3>Join the wpsecurityninja.com newsletter!</h3>
     674                    <h3>Join the wpsecurityninja.com newsletter</h3>
    675675                    <img src="<?php
    676676                echo  esc_url( WF_SN_PLUGIN_URL . 'images/sn-logo.svg' ) ;
    677677                ?>" height="58" alt="Visit wpsecurityninja.com" class="logoleft">
    678 
    679678                    <h4>Interesting articles and news about WordPress and internet security</h4>
    680679                    <form class="ml-block-form" action="https://static.mailerlite.com/webforms/submit/j1s4a5" data-code="j1s4a5" method="post" target="_blank">
    … …  
    702701                    </form>
    703702                    <p>You can unsubscribe anytime. For more details, review our <a href="https://wpsecurityninja.com/privacy-policy/" target="_blank" rel="noopener">Privacy Policy</a>.</p>
    704                     <p><small>Signup form is shown every 30 days until dismissed</small> - <a href="javascript:;" class="dismiss-this">Click here to dismiss</a></p>
     703                    <p><small>Signup form is shown every 30 days.</small> - <a href="javascript:;" class="dismiss-this">Click here to dismiss</a></p>
    705704                </div>
    706705            <?php
Note: See TracChangeset for help on using the changeset viewer.