Version Description
- Bugfix: Security fix backup download
Download this release
Release Info
Developer | Tom Braider |
Plugin | Count per Day |
Version | 3.4.1 |
Comparing to | |
See all releases |
Code changes from version 3.4 to 3.4.1
- counter-options.php +1 -1
- counter.php +2 -2
- download.php +6 -6
- readme.txt +5 -2
counter-options.php
CHANGED
@@ -166,7 +166,7 @@ if(!empty($_POST['do']))
|
|
166 |
delete_option('count_per_day_posts');
|
167 |
}
|
168 |
|
169 |
-
$keep = (isset($_POST['cpd_keep_month'])) ? $_POST['cpd_keep_month'] : 6;
|
170 |
|
171 |
$d = array(); // month data
|
172 |
$t = array(); // temp country data
|
166 |
delete_option('count_per_day_posts');
|
167 |
}
|
168 |
|
169 |
+
$keep = (isset($_POST['cpd_keep_month'])) ? intval($_POST['cpd_keep_month']) : 6;
|
170 |
|
171 |
$d = array(); // month data
|
172 |
$t = array(); // temp country data
|
counter.php
CHANGED
@@ -3,14 +3,14 @@
|
|
3 |
Plugin Name: Count Per Day
|
4 |
Plugin URI: http://www.tomsdimension.de/wp-plugins/count-per-day
|
5 |
Description: Counter, shows reads and visitors per page; today, yesterday, last week, last months ... on dashboard, per shortcode or in widget.
|
6 |
-
Version: 3.4
|
7 |
License: Postcardware
|
8 |
Author: Tom Braider
|
9 |
Author URI: http://www.tomsdimension.de
|
10 |
*/
|
11 |
|
12 |
$cpd_dir_name = 'count-per-day';
|
13 |
-
$cpd_version = '3.4';
|
14 |
|
15 |
if (strpos($_SERVER['SERVER_NAME'], '.test'))
|
16 |
$cpd_path = str_replace('/', DIRECTORY_SEPARATOR, ABSPATH.PLUGINDIR.'/'.$cpd_dir_name.'/');
|
3 |
Plugin Name: Count Per Day
|
4 |
Plugin URI: http://www.tomsdimension.de/wp-plugins/count-per-day
|
5 |
Description: Counter, shows reads and visitors per page; today, yesterday, last week, last months ... on dashboard, per shortcode or in widget.
|
6 |
+
Version: 3.4.1
|
7 |
License: Postcardware
|
8 |
Author: Tom Braider
|
9 |
Author URI: http://www.tomsdimension.de
|
10 |
*/
|
11 |
|
12 |
$cpd_dir_name = 'count-per-day';
|
13 |
+
$cpd_version = '3.4.1';
|
14 |
|
15 |
if (strpos($_SERVER['SERVER_NAME'], '.test'))
|
16 |
$cpd_path = str_replace('/', DIRECTORY_SEPARATOR, ABSPATH.PLUGINDIR.'/'.$cpd_dir_name.'/');
|
download.php
CHANGED
@@ -5,15 +5,15 @@
|
|
5 |
*/
|
6 |
if ( empty($_GET['f']) || empty($_GET['n']) )
|
7 |
die('no way');
|
8 |
-
$file = sys_get_temp_dir().'/'
|
9 |
-
if (strpos($file, '..') !== false
|
10 |
-
|
11 |
-
|
12 |
-
)
|
13 |
die('no way');
|
14 |
if (!file_exists($file))
|
15 |
die('file not found');
|
16 |
-
$name = stripslashes($_GET['n']);
|
17 |
if (substr($name, -2) == 'gz')
|
18 |
header('Content-Type: application/x-gzip');
|
19 |
else if (substr($name, -3) == 'csv')
|
5 |
*/
|
6 |
if ( empty($_GET['f']) || empty($_GET['n']) )
|
7 |
die('no way');
|
8 |
+
$file = sys_get_temp_dir().'/'.strip_tags($_GET['f']);
|
9 |
+
if ( strpos($file, '..') !== false )
|
10 |
+
die('no way');
|
11 |
+
if ( strpos(basename($file), 'cpdexport') !== 0
|
12 |
+
&& strpos(basename($file), 'cpdbackup') !== 0 )
|
13 |
die('no way');
|
14 |
if (!file_exists($file))
|
15 |
die('file not found');
|
16 |
+
$name = stripslashes(strip_tags($_GET['n']));
|
17 |
if (substr($name, -2) == 'gz')
|
18 |
header('Content-Type: application/x-gzip');
|
19 |
else if (substr($name, -3) == 'csv')
|
readme.txt
CHANGED
@@ -2,8 +2,8 @@
|
|
2 |
Contributors: Tom Braider
|
3 |
Tags: counter, count, posts, visits, reads, dashboard, widget, shortcode
|
4 |
Requires at least: 3.0
|
5 |
-
Tested up to: 4.
|
6 |
-
Stable tag: 3.4
|
7 |
License: Postcardware :)
|
8 |
Donate link: http://www.tomsdimension.de/postcards
|
9 |
|
@@ -310,6 +310,9 @@ show( $before, $after, $show, $count, $page )'
|
|
310 |
|
311 |
== Changelog ==
|
312 |
|
|
|
|
|
|
|
313 |
= 3.4 =
|
314 |
+ New: limit the length of client and referer to reduce database size and eliminate MySql strict mode errors
|
315 |
+ New: exclude countries you not want to count
|
2 |
Contributors: Tom Braider
|
3 |
Tags: counter, count, posts, visits, reads, dashboard, widget, shortcode
|
4 |
Requires at least: 3.0
|
5 |
+
Tested up to: 4.3
|
6 |
+
Stable tag: 3.4.1
|
7 |
License: Postcardware :)
|
8 |
Donate link: http://www.tomsdimension.de/postcards
|
9 |
|
310 |
|
311 |
== Changelog ==
|
312 |
|
313 |
+
= 3.4.1 =
|
314 |
+
+ Bugfix: Security fix backup download
|
315 |
+
|
316 |
= 3.4 =
|
317 |
+ New: limit the length of client and referer to reduce database size and eliminate MySql strict mode errors
|
318 |
+ New: exclude countries you not want to count
|