Changeset 3139899

Timestamp:

08/22/2024 05:14:51 PM (19 months ago)

Author:

levantoan

Message:

update 1.2.6

Location:

devvn-image-hotspot

Files:

• tags/1.2.6 (added)
• tags/1.2.6/admin (added)
• tags/1.2.6/admin/css (added)
• tags/1.2.6/admin/css/bootstrap.css (added)
• tags/1.2.6/admin/css/maps_points_style.css (added)
• tags/1.2.6/admin/inc (added)
• tags/1.2.6/admin/inc/add_shortcode_devvn_ihotspot.php (added)
• tags/1.2.6/admin/inc/cpt-ihotspot.php (added)
• tags/1.2.6/admin/inc/metabox-donate.php (added)
• tags/1.2.6/admin/inc/settings.php (added)
• tags/1.2.6/admin/js (added)
• tags/1.2.6/admin/js/bootstrap.min.js (added)
• tags/1.2.6/admin/js/maps_points.js (added)
• tags/1.2.6/devvn-image-hotspot.php (added)
• tags/1.2.6/frontend (added)
• tags/1.2.6/frontend/css (added)
• tags/1.2.6/frontend/css/ihotspot.min.css (added)
• tags/1.2.6/frontend/css/jquery.powertip.min.css (added)
• tags/1.2.6/frontend/css/maps_points.css (added)
• tags/1.2.6/frontend/js (added)
• tags/1.2.6/frontend/js/jquery.ihotspot.min.js (added)
• tags/1.2.6/frontend/js/jquery.powertip.min.js (added)
• tags/1.2.6/frontend/js/maps_points.js (added)
• tags/1.2.6/i18n (added)
• tags/1.2.6/i18n/languages (added)
• tags/1.2.6/i18n/languages/devvn-image-hotspot.pot (added)
• tags/1.2.6/languages (added)
• tags/1.2.6/languages/devvn-image-hotspot.pot (added)
• tags/1.2.6/license.txt (added)
• tags/1.2.6/readme.txt (added)
• tags/1.2.6/screenshot-1.png (added)
• tags/1.2.6/screenshot-2.png (added)
• trunk/admin/inc/add_shortcode_devvn_ihotspot.php (modified) (1 diff)
• trunk/devvn-image-hotspot.php (modified) (3 diffs)
• trunk/readme.txt (modified) (2 diffs)

devvn-image-hotspot/trunk/admin/inc/add_shortcode_devvn_ihotspot.php

@@ -17 +17 @@
 
     if(!$data_post){
-        $data_post = maybe_unserialize(get_post_field('post_content', $idPost));
+        $post_content = get_post_field('post_content', $idPost);
+        if ( is_serialized( $post_content ) ) {
+            $data_post = @unserialize( trim( $post_content ), array('allowed_classes' => false));
+        }else {
+            $data_post = $post_content;
+        }
     }
         

devvn-image-hotspot/trunk/devvn-image-hotspot.php

@@ -5 +5 @@
 Description: Image Hotspot help you add hotspot to your images.
 Author: Le Van Toan
-Version: 1.2.5
+Version: 1.2.6
 Author URI: https://levantoan.com/
 Text Domain: devvn-image-hotspot
@@ -30 +30 @@
 defined( 'ABSPATH' ) or die( 'No script kiddies please!' );
 
-define('DEVVN_IHOTSPOT_VER', '1.2.5');
+define('DEVVN_IHOTSPOT_VER', '1.2.6');
 define('DEVVN_IHOTSPOT_DEV_MOD', true);
 
@@ -105 +105 @@
 
     if(!$data_post){
-        $data_post = maybe_unserialize( $post->post_content );
+        $post_content = $post->post_content;
+        if ( is_serialized( $post_content ) ) {
+            $data_post = @unserialize( trim( $post_content ), array('allowed_classes' => false));
+        }else {
+            $data_post = $post_content;
+        }
     }
 

devvn-image-hotspot/trunk/readme.txt

@@ -5 +5 @@
 Requires at least: 4.3
 Tested up to: 6.6.1
-Stable tag: 1.2.5
+Stable tag: 1.2.6
 License: GPLv3
 License URI: http://www.gnu.org/licenses/gpl-3.0
@@ -50 +50 @@
 
 For more information, see [Releases](https://levantoan.com/devvn-image-hotspot).
+
+= 1.2.6 - 23/08/2024 =
+
+* Add allowed_classes => false to unserialize. As suggested by "Michelle Porter - Wordfence Web Application Vulnerability Analyst". Many thanks to Michelle Porter
 
 = 1.2.5 - 16/08/2024 =