Changeset 3142694

Timestamp:

08/28/2024 07:13:00 AM (16 months ago)

Author:

mndpsingh287

Message:

v2.9

Location:

theme-editor/trunk

Files:

• ms_child_theme_editor.php (modified) (2 diffs)
• readme.txt (modified) (2 diffs)
• theme_editor.php (modified) (1 diff)

theme-editor/trunk/ms_child_theme_editor.php

@@ -354 +354 @@
                     if(strpos($value, '..') == false){
                         $child_file_dir = str_replace("/\\",'/',urldecode(htmlspecialchars_decode($value)));
+                        $child_file_dir = str_replace('phar://', '', $child_file_dir);
                         unlink($child_file_dir);
                     }
@@ -507 +508 @@
                 if(strpos($dvalue, '..') == false){
                     $dvalue= str_replace("/\\",'/',$dvalue);
+                    $dvalue = str_replace('phar://', '', $dvalue);
                     $success = unlink($dvalue);
                     if($success){

theme-editor/trunk/readme.txt

@@ -3 +3 @@
 Tags: file, editor, plugin, wp, wordpress, theme, theme editor, code editor, Preview Theme, create New Theme, Preview, Duplicate Theme
 Requires at least: 3.4
-Tested up to: 6.4.1
+Tested up to: 6.6.1
 Requires PHP: 5.2.4
-Stable tag: 2.8
+Stable tag: 2.9
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -91 +91 @@
 
 == Changelog ==
+= 2.9 (27th Aug, 2024)
+
+* Security Fixes
+
 = 2.8 (1st Dec, 2023)
 

theme-editor/trunk/theme_editor.php

@@ -5 +5 @@
 Description: create, edit, upload, download, delete Theme Files and folders
 Author: mndpsingh287
-Version: 2.8
+Version: 2.9
 Author URI: https://profiles.wordpress.org/mndpsingh287
 Text Domain: theme-editor