BackWPup – WordPress Backup Plugin - Version 3.2.5

Version Description

= After an upgrade from version 2 =

Please check all settings after the update:

  • Dropbox authentication must be done again
  • SugarSync authentication must be done again
  • S3 Settings
  • Google Storage is now in S3
  • Check all your passwords
Download this release

Release Info

Developer danielhuesken
Plugin Icon 128x128 BackWPup – WordPress Backup Plugin
Version 3.2.5
Comparing to
See all releases

Code changes from version 3.2.4 to 3.2.5

Files changed (6) hide show
  1. assets/images/progressbarhg.jpg +0 -0
  2. backwpup.php +1 -1
  3. inc/class-destination-email.php +8 -4
  4. inc/class-page-editjob.php +3 -3
  5. inc/class-page-settings.php +2 -2
  6. readme.txt +5 -2
assets/images/progressbarhg.jpg ADDED
Binary file
backwpup.php CHANGED
@@ -5,7 +5,7 @@
5
  * Description: WordPress Backup Plugin
6
  * Author: Inpsyde GmbH
7
  * Author URI: http://inpsyde.com
8
- * Version: 3.2.4
9
  * Text Domain: backwpup
10
  * Domain Path: /languages/
11
  * Network: true
5
  * Description: WordPress Backup Plugin
6
  * Author: Inpsyde GmbH
7
  * Author URI: http://inpsyde.com
8
+ * Version: 3.2.5
9
  * Text Domain: backwpup
10
  * Domain Path: /languages/
11
  * Network: true
inc/class-destination-email.php CHANGED
@@ -271,8 +271,10 @@ class BackWPup_Destination_Email extends BackWPup_Destinations {
271
  // Create the Transport
272
  if ( $emailmethod == 'smtp' ) {
273
  $transport = Swift_SmtpTransport::newInstance( $emailhost, $emailhostport );
274
- $transport->setUsername( $emailuser );
275
- $transport->setPassword( $emailpass );
 
 
276
  if ( $emailsecure == 'ssl' )
277
  $transport->setEncryption( 'ssl' );
278
  if ( $emailsecure == 'tls' )
@@ -395,8 +397,10 @@ class BackWPup_Destination_Email extends BackWPup_Destinations {
395
  // Create the Transport
396
  if ( $emailmethod == 'smtp' ) {
397
  $transport = Swift_SmtpTransport::newInstance( $emailhost, $emailhostport );
398
- $transport->setUsername( $emailuser );
399
- $transport->setPassword( $emailpass );
 
 
400
  if ( $emailsecure == 'ssl' )
401
  $transport->setEncryption( 'ssl' );
402
  if ( $emailsecure == 'tls' )
271
  // Create the Transport
272
  if ( $emailmethod == 'smtp' ) {
273
  $transport = Swift_SmtpTransport::newInstance( $emailhost, $emailhostport );
274
+ if ( $emailuser ) {
275
+ $transport->setUsername( $emailuser );
276
+ $transport->setPassword( $emailpass );
277
+ }
278
  if ( $emailsecure == 'ssl' )
279
  $transport->setEncryption( 'ssl' );
280
  if ( $emailsecure == 'tls' )
397
  // Create the Transport
398
  if ( $emailmethod == 'smtp' ) {
399
  $transport = Swift_SmtpTransport::newInstance( $emailhost, $emailhostport );
400
+ if ( $emailuser ) {
401
+ $transport->setUsername( $emailuser );
402
+ $transport->setPassword( $emailpass );
403
+ }
404
  if ( $emailsecure == 'ssl' )
405
  $transport->setEncryption( 'ssl' );
406
  if ( $emailsecure == 'tls' )
inc/class-page-editjob.php CHANGED
@@ -443,7 +443,7 @@ class BackWPup_Page_Editjob {
443
  <th scope="row"><label for="name"><?php _e( 'Please name this job.', 'backwpup' ) ?></label></th>
444
  <td>
445
  <input name="name" type="text" id="name" data-empty="<?php _e( 'New Job', 'backwpup' ); ?>"
446
- value="<?php echo BackWPup_Option::get( $jobid, 'name' ); ?>" class="regular-text" />
447
  </td>
448
  </tr>
449
  </table>
@@ -585,7 +585,7 @@ class BackWPup_Page_Editjob {
585
  <th scope="row"><label for="mailaddresslog"><?php _e( 'Send log to email address', 'backwpup' ) ?></label></th>
586
  <td>
587
  <input name="mailaddresslog" type="text" id="mailaddresslog"
588
- value="<?php echo BackWPup_Option::get( $jobid, 'mailaddresslog' );?>"
589
  class="regular-text help-tip" title="<?php esc_attr_e( 'Leave empty to not have log sent. Or separate with , for more than one receiver.', 'backwpup' ); ?>" />
590
  </td>
591
  </tr>
@@ -593,7 +593,7 @@ class BackWPup_Page_Editjob {
593
  <th scope="row"><label for="mailaddresssenderlog"><?php _e( 'Email FROM field', 'backwpup' ) ?></label></th>
594
  <td>
595
  <input name="mailaddresssenderlog" type="text" id="mailaddresssenderlog"
596
- value="<?php echo BackWPup_Option::get( $jobid, 'mailaddresssenderlog' );?>"
597
  class="regular-text help-tip" title="<?php esc_attr_e( 'Email "From" field (Name &lt;&#160;you@your-email-address.tld&#160;&gt;)', 'backwpup' ); ?>" />
598
  </td>
599
  </tr>
443
  <th scope="row"><label for="name"><?php _e( 'Please name this job.', 'backwpup' ) ?></label></th>
444
  <td>
445
  <input name="name" type="text" id="name" data-empty="<?php _e( 'New Job', 'backwpup' ); ?>"
446
+ value="<?php echo esc_html( BackWPup_Option::get( $jobid, 'name' ) ); ?>" class="regular-text" />
447
  </td>
448
  </tr>
449
  </table>
585
  <th scope="row"><label for="mailaddresslog"><?php _e( 'Send log to email address', 'backwpup' ) ?></label></th>
586
  <td>
587
  <input name="mailaddresslog" type="text" id="mailaddresslog"
588
+ value="<?php echo esc_html( BackWPup_Option::get( $jobid, 'mailaddresslog' ) );?>"
589
  class="regular-text help-tip" title="<?php esc_attr_e( 'Leave empty to not have log sent. Or separate with , for more than one receiver.', 'backwpup' ); ?>" />
590
  </td>
591
  </tr>
593
  <th scope="row"><label for="mailaddresssenderlog"><?php _e( 'Email FROM field', 'backwpup' ) ?></label></th>
594
  <td>
595
  <input name="mailaddresssenderlog" type="text" id="mailaddresssenderlog"
596
+ value="<?php echo esc_html( BackWPup_Option::get( $jobid, 'mailaddresssenderlog' ) );?>"
597
  class="regular-text help-tip" title="<?php esc_attr_e( 'Email "From" field (Name &lt;&#160;you@your-email-address.tld&#160;&gt;)', 'backwpup' ); ?>" />
598
  </td>
599
  </tr>
inc/class-page-settings.php CHANGED
@@ -84,7 +84,7 @@ class BackWPup_Page_Settings {
84
  update_site_option( 'backwpup_cfg_protectfolders', isset( $_POST[ 'protectfolders' ] ) ? 1 : 0 );
85
  $_POST[ 'jobrunauthkey' ] = preg_replace( '/[^a-zA-Z0-9]/', '', trim( $_POST[ 'jobrunauthkey' ] ) );
86
  update_site_option( 'backwpup_cfg_jobrunauthkey', $_POST[ 'jobrunauthkey' ] );
87
- $_POST[ 'logfolder' ] = trailingslashit( str_replace( '\\', '/', trim( stripslashes( $_POST[ 'logfolder' ] ) ) ) );
88
  //set def. folders
89
  if ( empty( $_POST[ 'logfolder' ] ) || $_POST[ 'logfolder' ] === '/' ) {
90
  delete_site_option( 'backwpup_cfg_logfolder' );
@@ -196,7 +196,7 @@ class BackWPup_Page_Settings {
196
  <th scope="row"><label for="logfolder"><?php _e( 'Log file folder', 'backwpup' ); ?></label></th>
197
  <td>
198
  <input name="logfolder" type="text" id="logfolder" title="<?php esc_attr_e( 'You can use absolute or relative path! Relative path is relative to WP_CONTENT_DIR.', 'backwpup' ); ?>"
199
- value="<?php echo get_site_option( 'backwpup_cfg_logfolder' );?>"
200
  class="regular-text code help-tip"/>
201
  </td>
202
  </tr>
84
  update_site_option( 'backwpup_cfg_protectfolders', isset( $_POST[ 'protectfolders' ] ) ? 1 : 0 );
85
  $_POST[ 'jobrunauthkey' ] = preg_replace( '/[^a-zA-Z0-9]/', '', trim( $_POST[ 'jobrunauthkey' ] ) );
86
  update_site_option( 'backwpup_cfg_jobrunauthkey', $_POST[ 'jobrunauthkey' ] );
87
+ $_POST[ 'logfolder' ] = trailingslashit( str_replace( '\\', '/', trim( stripslashes( esc_attr( $_POST[ 'logfolder' ] ) ) ) ) );
88
  //set def. folders
89
  if ( empty( $_POST[ 'logfolder' ] ) || $_POST[ 'logfolder' ] === '/' ) {
90
  delete_site_option( 'backwpup_cfg_logfolder' );
196
  <th scope="row"><label for="logfolder"><?php _e( 'Log file folder', 'backwpup' ); ?></label></th>
197
  <td>
198
  <input name="logfolder" type="text" id="logfolder" title="<?php esc_attr_e( 'You can use absolute or relative path! Relative path is relative to WP_CONTENT_DIR.', 'backwpup' ); ?>"
199
+ value="<?php echo esc_attr( get_site_option( 'backwpup_cfg_logfolder' ) );?>"
200
  class="regular-text code help-tip"/>
201
  </td>
202
  </tr>
readme.txt CHANGED
@@ -2,8 +2,8 @@
2
  Contributors: inpsyde, danielhuesken, Bueltge, nullbyte
3
  Tags: Amazon, Amazon S3, back up, backup, chinese, cloud, cloud files, database, db backup, dropbox, dump, file, french, ftp, ftps, german, migrate, multisite, russian, schedule, sftp, storage, S3, time, upload, xml
4
  Requires at least: 3.8
5
- Tested up to: 4.4.1
6
- Stable tag: 3.2.4
7
  License: GPLv3
8
  License URI: http://www.gnu.org/licenses/gpl-3.0.html
9
 
@@ -170,6 +170,9 @@ Please check all settings after the update:
170
 
171
 
172
  == Changelog ==
 
 
 
173
  = Version 3.2.4 =
174
  * Added: Backup database triggers
175
  * Fixed: Charset issues on file names in archives
2
  Contributors: inpsyde, danielhuesken, Bueltge, nullbyte
3
  Tags: Amazon, Amazon S3, back up, backup, chinese, cloud, cloud files, database, db backup, dropbox, dump, file, french, ftp, ftps, german, migrate, multisite, russian, schedule, sftp, storage, S3, time, upload, xml
4
  Requires at least: 3.8
5
+ Tested up to: 4.4.2
6
+ Stable tag: 3.2.5
7
  License: GPLv3
8
  License URI: http://www.gnu.org/licenses/gpl-3.0.html
9
 
170
 
171
 
172
  == Changelog ==
173
+ = Version 3.2.5 =
174
+ * Fixed: two stored XSS issues
175
+
176
  = Version 3.2.4 =
177
  * Added: Backup database triggers
178
  * Fixed: Charset issues on file names in archives