WordPress Download Manager - Version 3.2.51

Version Description

  • 2022.07.27 =
  • Revalidated attached file to avoid any blocked file type attachment
Download this release

Release Info

Developer codename065
Plugin Icon 128x128 WordPress Download Manager
Version 3.2.51
Comparing to
See all releases

Code changes from version 3.2.50 to 3.2.51

download-manager.php CHANGED
@@ -5,7 +5,7 @@ Plugin URI: https://www.wpdownloadmanager.com/purchases/
5
  Description: Manage, Protect and Track file downloads, and sell digital products from your WordPress site. A complete digital asset management solution.
6
  Author: W3 Eden, Inc.
7
  Author URI: https://www.wpdownloadmanager.com/
8
- Version: 3.2.50
9
  Text Domain: download-manager
10
  Domain Path: /languages
11
  */
@@ -39,7 +39,7 @@ use WPDM\Widgets\WidgetController;
39
 
40
  global $WPDM;
41
 
42
- define('WPDM_VERSION','3.2.50');
43
 
44
  define('WPDM_TEXT_DOMAIN','download-manager');
45
 
5
  Description: Manage, Protect and Track file downloads, and sell digital products from your WordPress site. A complete digital asset management solution.
6
  Author: W3 Eden, Inc.
7
  Author URI: https://www.wpdownloadmanager.com/
8
+ Version: 3.2.51
9
  Text Domain: download-manager
10
  Domain Path: /languages
11
  */
39
 
40
  global $WPDM;
41
 
42
+ define('WPDM_VERSION','3.2.51');
43
 
44
  define('WPDM_TEXT_DOMAIN','download-manager');
45
 
readme.txt CHANGED
@@ -5,7 +5,7 @@ Tags: download manager, document management, file manager, digital store, ecomme
5
  Requires at least: 5.3
6
  Tested up to: 6.0
7
  License: GPLv2 or later
8
- Stable tag: 3.2.50
9
 
10
 
11
  This File Management & Digital Store plugin will help you to control file downloads & sell digital products from your WP site.
@@ -181,6 +181,9 @@ Check download stats and get a push notification when someone downloads, install
181
 
182
  == Changelog ==
183
 
 
 
 
184
  = 3.2.50 - 2022.07.26 =
185
  * Added option to allow/disallow proxy IP, disallowed by default
186
 
5
  Requires at least: 5.3
6
  Tested up to: 6.0
7
  License: GPLv2 or later
8
+ Stable tag: 3.2.51
9
 
10
 
11
  This File Management & Digital Store plugin will help you to control file downloads & sell digital products from your WP site.
181
 
182
  == Changelog ==
183
 
184
+ = 3.2.51 - 2022.07.27 =
185
+ * Revalidated attached file to avoid any blocked file type attachment
186
+
187
  = 3.2.50 - 2022.07.26 =
188
  * Added option to allow/disallow proxy IP, disallowed by default
189
 
src/Admin/Menu/Packages.php CHANGED
@@ -29,7 +29,6 @@ class Packages
29
 
30
  add_action('wp_ajax_wpdm_admin_upload_file', array($this, 'uploadFile'));
31
  add_action('save_post', array($this, 'savePackage'));
32
- add_action('before_delete_post', array($this, 'deleteFiles'), 10, 2);
33
 
34
  add_action('manage_wpdmpro_posts_columns', array($this, 'columnsTH'));
35
  add_action('manage_wpdmpro_posts_custom_column', array($this, 'columnsTD'), 10, 2);
@@ -70,6 +69,7 @@ class Packages
70
  $meta_value = array_unique($meta_value);
71
  foreach ($meta_value as &$value){
72
  $value = wpdm_escs($value);
 
73
  }
74
  } else if($meta_key == 'terms_conditions'){
75
  $meta_value = __::sanitize_var($meta_value, 'kses');
@@ -89,15 +89,6 @@ class Packages
89
  do_action('wpdm_admin_update_package',$post, $_POST['file']);
90
  }
91
 
92
- function deleteFiles($post_id, $post)
93
- {
94
- $files = WPDM()->package->getFiles($post_id, false);
95
- foreach ($files as $file) {
96
- $file = WPDM()->fileSystem->locateFile($file);
97
- @unlink($file);
98
- }
99
- }
100
-
101
  function duplicate()
102
  {
103
  if(wpdm_query_var('wpdm_duplicate', 'int') > 0 && get_post_type(wpdm_query_var('wpdm_duplicate')) === 'wpdmpro') {
29
 
30
  add_action('wp_ajax_wpdm_admin_upload_file', array($this, 'uploadFile'));
31
  add_action('save_post', array($this, 'savePackage'));
 
32
 
33
  add_action('manage_wpdmpro_posts_columns', array($this, 'columnsTH'));
34
  add_action('manage_wpdmpro_posts_custom_column', array($this, 'columnsTD'), 10, 2);
69
  $meta_value = array_unique($meta_value);
70
  foreach ($meta_value as &$value){
71
  $value = wpdm_escs($value);
72
+ if(WPDM()->fileSystem->isBlocked($value)) $value = '';
73
  }
74
  } else if($meta_key == 'terms_conditions'){
75
  $meta_value = __::sanitize_var($meta_value, 'kses');
89
  do_action('wpdm_admin_update_package',$post, $_POST['file']);
90
  }
91
 
 
 
 
 
 
 
 
 
 
92
  function duplicate()
93
  {
94
  if(wpdm_query_var('wpdm_duplicate', 'int') > 0 && get_post_type(wpdm_query_var('wpdm_duplicate')) === 'wpdmpro') {
src/AssetManager/AssetManager.php CHANGED
@@ -331,7 +331,7 @@ class AssetManager
331
  function deleteItem()
332
  {
333
 
334
- __::isAuthentic('__wpdm_unlink', WPDMAM_NONCE_KEY, WPDM_ADMIN_CAP, true);
335
 
336
  $relpath = Crypt::decrypt(wpdm_query_var('delete'));
337
  $path = AssetManager::root($relpath);
331
  function deleteItem()
332
  {
333
 
334
+ __::isAuthentic('__wpdm_unlink', WPDMAM_NONCE_KEY, 'manage_options', true);
335
 
336
  $relpath = Crypt::decrypt(wpdm_query_var('delete'));
337
  $path = AssetManager::root($relpath);