Count per Day - Version 3.4.1

Version Description

  • Bugfix: Security fix backup download
Download this release

Release Info

Developer Tom Braider
Plugin Icon 128x128 Count per Day
Version 3.4.1
Comparing to
See all releases

Code changes from version 3.4 to 3.4.1

Files changed (4) hide show
  1. counter-options.php +1 -1
  2. counter.php +2 -2
  3. download.php +6 -6
  4. readme.txt +5 -2
counter-options.php CHANGED
@@ -166,7 +166,7 @@ if(!empty($_POST['do']))
166
  delete_option('count_per_day_posts');
167
  }
168
 
169
- $keep = (isset($_POST['cpd_keep_month'])) ? $_POST['cpd_keep_month'] : 6;
170
 
171
  $d = array(); // month data
172
  $t = array(); // temp country data
166
  delete_option('count_per_day_posts');
167
  }
168
 
169
+ $keep = (isset($_POST['cpd_keep_month'])) ? intval($_POST['cpd_keep_month']) : 6;
170
 
171
  $d = array(); // month data
172
  $t = array(); // temp country data
counter.php CHANGED
@@ -3,14 +3,14 @@
3
  Plugin Name: Count Per Day
4
  Plugin URI: http://www.tomsdimension.de/wp-plugins/count-per-day
5
  Description: Counter, shows reads and visitors per page; today, yesterday, last week, last months ... on dashboard, per shortcode or in widget.
6
- Version: 3.4
7
  License: Postcardware
8
  Author: Tom Braider
9
  Author URI: http://www.tomsdimension.de
10
  */
11
 
12
  $cpd_dir_name = 'count-per-day';
13
- $cpd_version = '3.4';
14
 
15
  if (strpos($_SERVER['SERVER_NAME'], '.test'))
16
  $cpd_path = str_replace('/', DIRECTORY_SEPARATOR, ABSPATH.PLUGINDIR.'/'.$cpd_dir_name.'/');
3
  Plugin Name: Count Per Day
4
  Plugin URI: http://www.tomsdimension.de/wp-plugins/count-per-day
5
  Description: Counter, shows reads and visitors per page; today, yesterday, last week, last months ... on dashboard, per shortcode or in widget.
6
+ Version: 3.4.1
7
  License: Postcardware
8
  Author: Tom Braider
9
  Author URI: http://www.tomsdimension.de
10
  */
11
 
12
  $cpd_dir_name = 'count-per-day';
13
+ $cpd_version = '3.4.1';
14
 
15
  if (strpos($_SERVER['SERVER_NAME'], '.test'))
16
  $cpd_path = str_replace('/', DIRECTORY_SEPARATOR, ABSPATH.PLUGINDIR.'/'.$cpd_dir_name.'/');
download.php CHANGED
@@ -5,15 +5,15 @@
5
  */
6
  if ( empty($_GET['f']) || empty($_GET['n']) )
7
  die('no way');
8
- $file = sys_get_temp_dir().'/'.$_GET['f'];
9
- if (strpos($file, '..') !== false
10
- && strpos($file, 'cpdexport') !== 0
11
- && strpos($file, 'cpdbackup') !== 0
12
- )
13
  die('no way');
14
  if (!file_exists($file))
15
  die('file not found');
16
- $name = stripslashes($_GET['n']);
17
  if (substr($name, -2) == 'gz')
18
  header('Content-Type: application/x-gzip');
19
  else if (substr($name, -3) == 'csv')
5
  */
6
  if ( empty($_GET['f']) || empty($_GET['n']) )
7
  die('no way');
8
+ $file = sys_get_temp_dir().'/'.strip_tags($_GET['f']);
9
+ if ( strpos($file, '..') !== false )
10
+ die('no way');
11
+ if ( strpos(basename($file), 'cpdexport') !== 0
12
+ && strpos(basename($file), 'cpdbackup') !== 0 )
13
  die('no way');
14
  if (!file_exists($file))
15
  die('file not found');
16
+ $name = stripslashes(strip_tags($_GET['n']));
17
  if (substr($name, -2) == 'gz')
18
  header('Content-Type: application/x-gzip');
19
  else if (substr($name, -3) == 'csv')
readme.txt CHANGED
@@ -2,8 +2,8 @@
2
  Contributors: Tom Braider
3
  Tags: counter, count, posts, visits, reads, dashboard, widget, shortcode
4
  Requires at least: 3.0
5
- Tested up to: 4.2
6
- Stable tag: 3.4
7
  License: Postcardware :)
8
  Donate link: http://www.tomsdimension.de/postcards
9
 
@@ -310,6 +310,9 @@ show( $before, $after, $show, $count, $page )'
310
 
311
  == Changelog ==
312
 
 
 
 
313
  = 3.4 =
314
  + New: limit the length of client and referer to reduce database size and eliminate MySql strict mode errors
315
  + New: exclude countries you not want to count
2
  Contributors: Tom Braider
3
  Tags: counter, count, posts, visits, reads, dashboard, widget, shortcode
4
  Requires at least: 3.0
5
+ Tested up to: 4.3
6
+ Stable tag: 3.4.1
7
  License: Postcardware :)
8
  Donate link: http://www.tomsdimension.de/postcards
9
 
310
 
311
  == Changelog ==
312
 
313
+ = 3.4.1 =
314
+ + Bugfix: Security fix backup download
315
+
316
  = 3.4 =
317
  + New: limit the length of client and referer to reduce database size and eliminate MySql strict mode errors
318
  + New: exclude countries you not want to count