Changeset 3004985

Timestamp:

12/04/2023 08:41:13 AM (2 years ago)

Author:

soft8soft

Message:

New version 4.5.1

Location:

verge3d/trunk

Files:

• app.php (modified) (2 diffs)
• order.php (modified) (2 diffs)
• readme.txt (modified) (2 diffs)
• verge3d.php (modified) (2 diffs)

verge3d/trunk/app.php

@@ -616 +616 @@
     $upload_app_dir = $upload_dir.$app_id;
 
-    //if (is_dir($upload_app_dir))
-    //    v3d_rmdir($upload_app_dir);
-
     if (!is_dir($upload_app_dir))
         mkdir($upload_app_dir, 0777, true);
@@ -631 +628 @@
             $fullpath = implode("/", $fullpath);
 
+            // prevent harmful file types to be uploaded to the server
+            $ext = strtolower(pathinfo($fullpath, PATHINFO_EXTENSION));
+            $denied = ['php', 'phps', 'phar', 'exe', 'js'];
+            if (in_array($ext, $denied)) {
+                wp_die('error');
+            }
+
             $path = dirname($fullpath);
 

verge3d/trunk/order.php

@@ -356 +356 @@
     $output = '';
 
+    $command = escapeshellcmd($command);
+
     if (function_exists('system')) {
         ob_start();
@@ -450 +452 @@
 
             $success = file_put_contents($pdf_html, $pdf_html_text);
-            //copy($pdf_html, '/var/www/wordpress/pdf.html');
 
             if ($success) {

verge3d/trunk/readme.txt

@@ -3 +3 @@
 Tags: verge3d,3d,webgl,3dweb,ecommerce
 Requires at least: 5.0
-Tested up to: 6.0.1
+Tested up to: 6.4.1
 Requires PHP: 7.0
-Stable tag: 4.5.0
+Stable tag: 4.5.1
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -68 +68 @@
 
 == Changelog ==
+
+= 4.5.1 =
+* Fix order page layout in latest WordPress versions.
+* Security fixes.
 
 = 4.4 =

verge3d/trunk/verge3d.php

@@ -4 +4 @@
 Plugin URI: https://www.soft8soft.com/verge3d
 Description: Verge3D is the most artist-friendly toolkit for creating interactive web-based experiences. It can be used to create product configurators, 3D presentations, online stores, e-learning apps, 3D portfolios, browser games and more.
-Version: 4.5.0
+Version: 4.5.1
 Author: Soft8Soft LLC
 Author URI: https://www.soft8soft.com
@@ -1329 +1329 @@
 
 function v3d_init_custom_styles() {
-    wp_enqueue_style('v3d_main', plugin_dir_url( __FILE__ ) . 'css/main.css');
+    wp_enqueue_style('v3d_main_style', plugin_dir_url( __FILE__ ) . 'css/main.css');
 }
 add_action('wp_enqueue_scripts', 'v3d_init_custom_styles');
 
 function v3d_init_custom_styles_admin() {
-    wp_enqueue_style('v3d_admin', plugin_dir_url( __FILE__ ) . 'css/admin.css');
+    wp_enqueue_style('v3d_admin_style', plugin_dir_url( __FILE__ ) . 'css/admin.css');
 }
 add_action('admin_enqueue_scripts', 'v3d_init_custom_styles_admin');
 
 function v3d_init_custom_scripts_admin($page) {
-    wp_enqueue_script('v3d_admin', plugin_dir_url( __FILE__ ) . 'js/admin.js');
+    wp_enqueue_script('v3d_admin_script', plugin_dir_url( __FILE__ ) . 'js/admin.js');
 }
 add_action('admin_enqueue_scripts', 'v3d_init_custom_scripts_admin');