Changeset 3151053

Timestamp:

09/12/2024 07:01:59 PM (15 months ago)

Author:

benjaminprojas

Message:

1.2.9.1

Location:

wp-editor/trunk

Files:

• classes/WPEditorAjax.php (modified) (1 diff)
• classes/WPEditorBrowser.php (modified) (2 diffs)
• readme.txt (modified) (2 diffs)
• wpeditor.php (modified) (1 diff)

wp-editor/trunk/classes/WPEditorAjax.php

@@ -114 +114 @@
                 }
 
+                $real_file = preg_replace('#^phar://#i', '', $real_file); 
                 if ( file_exists( $real_file ) ) {
 

wp-editor/trunk/classes/WPEditorBrowser.php

@@ -263 +263 @@
         //$result .= "Temp file: " . $_FILES["file-0"]["tmp_name"] . "<br />";
 
+        $complete_directory = preg_replace('#^phar://#i', '', $complete_directory);
         if ( file_exists( $complete_directory . $_FILES["file-0"]["name"] ) ) {
           $error = -1;
@@ -400 +401 @@
         $slash = '\\';
       }
+
+      $file_path = preg_replace('#^phar://#i', '', $file_path);
       if ( file_exists( $file_path ) ) {
         $content = file_get_contents( $file_path );

wp-editor/trunk/readme.txt

@@ -5 +5 @@
 Requires at least: 3.9
 Tested up to: 6.4.3
-Stable tag: 1.2.9
+Stable tag: 1.2.9.1
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -70 +70 @@
 == Changelog ==
 
+= 1.2.9.1 =
+* Sanitize inputs
+
 = 1.2.9 =
 * Sanitize outputs

wp-editor/trunk/wpeditor.php

@@ -4 +4 @@
 Plugin URI: http://wpeditor.net
 Description: This plugin modifies the default behavior of the WordPress plugin and theme editors.
-Version: 1.2.9
+Version: 1.2.9.1
 Requires at least: 3.9
 Author: Benjamin Rojas