EZP Coming Soon Page - Version 1.0.1

Version Description

  • Fixed cross site scripting vulnerability
Download this release

Release Info

Developer bobriley
Plugin Icon 128x128 EZP Coming Soon Page
Version 1.0.1
Comparing to
See all releases

Code changes from version 1.0.0 to 1.0.1

Files changed (5) hide show
  1. classes/class-ezp-cs-constants.php +1 -1
  2. easy-pie-coming-soon.php +1 -1
  3. pages/page-options.php +6 -0
  4. pages/page-subscribers.php +6 -0
  5. readme.txt +7 -1
classes/class-ezp-cs-constants.php CHANGED
@@ -32,7 +32,7 @@ if (!class_exists('EZP_CS_Constants')) {
32
  const COMPOUND_OPTION_NAME = 'easy-pie-cs-options';
33
  const MAIN_PAGE_KEY = 'easy-pie-cs-main-page';
34
  const PLUGIN_SLUG = 'easy-pie-coming-soon';
35
- const PLUGIN_VERSION = "1.0.0"; // RSR Version
36
 
37
 
38
 
32
  const COMPOUND_OPTION_NAME = 'easy-pie-cs-options';
33
  const MAIN_PAGE_KEY = 'easy-pie-cs-main-page';
34
  const PLUGIN_SLUG = 'easy-pie-coming-soon';
35
+ const PLUGIN_VERSION = "1.0.1"; // RSR Version
36
 
37
 
38
 
easy-pie-coming-soon.php CHANGED
@@ -3,7 +3,7 @@
3
  Plugin Name: Coming Soon Page
4
  Plugin URI: http://easypiewp.com/easy-pie-coming-soon-faq/
5
  Description: Let people know that your site is 'coming soon'. Visitors can submit their email addresses for future notification.
6
- Version: 1.0.0
7
  Author: Bob Riley
8
  Author URI: http://www.easypiewp.com
9
  Text Domain: easy-pie-coming-soon
3
  Plugin Name: Coming Soon Page
4
  Plugin URI: http://easypiewp.com/easy-pie-coming-soon-faq/
5
  Description: Let people know that your site is 'coming soon'. Visitors can submit their email addresses for future notification.
6
+ Version: 1.0.1
7
  Author: Bob Riley
8
  Author URI: http://www.easypiewp.com
9
  Text Domain: easy-pie-coming-soon
pages/page-options.php CHANGED
@@ -21,9 +21,15 @@
21
  */
22
  ?>
23
  <?php
 
24
  if (isset($_GET['tab'])) {
25
 
26
  $active_tab = $_GET['tab'];
 
 
 
 
 
27
  } else {
28
 
29
  $active_tab = 'display';
21
  */
22
  ?>
23
  <?php
24
+
25
  if (isset($_GET['tab'])) {
26
 
27
  $active_tab = $_GET['tab'];
28
+
29
+ if((trim($active_tab) != '') && ($active_tab != 'display') && ($active_tab != 'content') && ($active_tab != 'preview')) {
30
+ echo 'Invalid request';
31
+ die();
32
+ }
33
  } else {
34
 
35
  $active_tab = 'display';
pages/page-subscribers.php CHANGED
@@ -24,6 +24,12 @@
24
  if (isset($_GET['tab'])) {
25
 
26
  $active_tab = $_GET['tab'];
 
 
 
 
 
 
27
  } else {
28
 
29
  $active_tab = 'list';
24
  if (isset($_GET['tab'])) {
25
 
26
  $active_tab = $_GET['tab'];
27
+
28
+ if(($active_tab != '') && ($active_tab != 'list') && ($active_tab != 'newsletter'))
29
+ {
30
+ echo 'Invalid request';
31
+ die();
32
+ }
33
  } else {
34
 
35
  $active_tab = 'list';
readme.txt CHANGED
@@ -4,7 +4,7 @@ Donate link: http://easypiewp.com/donate/
4
  Tags: coming soon, coming soon page, construction, landing page, launch, launch page, maintenance, maintenance mode, offline, unavailable, under construction, underconstruction, wordpress coming soon, wordpress maintenance mode, wordpress under construction
5
  Requires at least: 3.5
6
  Tested up to: 4.1.1
7
- Stable tag: 1.0.0
8
  License: GPLv3
9
  License URI: http://www.gnu.org/licenses/gpl-3.0.html
10
 
@@ -89,6 +89,9 @@ For the FAQ on the Coming Soon Page please visit the [Easy Pie Website](http://e
89
 
90
  == Changelog ==
91
 
 
 
 
92
  = 1.0.0 =
93
  * Countdown timer now supports time in addition to date
94
  * UI tweaks
@@ -137,6 +140,9 @@ For the FAQ on the Coming Soon Page please visit the [Easy Pie Website](http://e
137
 
138
  == Upgrade Notice ==
139
 
 
 
 
140
  = 1.0.0 =
141
  * Countdown timer now supports time in addition to date
142
  * UI tweaks
4
  Tags: coming soon, coming soon page, construction, landing page, launch, launch page, maintenance, maintenance mode, offline, unavailable, under construction, underconstruction, wordpress coming soon, wordpress maintenance mode, wordpress under construction
5
  Requires at least: 3.5
6
  Tested up to: 4.1.1
7
+ Stable tag: 1.0.1
8
  License: GPLv3
9
  License URI: http://www.gnu.org/licenses/gpl-3.0.html
10
 
89
 
90
  == Changelog ==
91
 
92
+ = 1.0.1 =
93
+ * Fixed cross site scripting vulnerability
94
+
95
  = 1.0.0 =
96
  * Countdown timer now supports time in addition to date
97
  * UI tweaks
140
 
141
  == Upgrade Notice ==
142
 
143
+ = 1.0.1 =
144
+ * Fixed cross site scripting vulnerability
145
+
146
  = 1.0.0 =
147
  * Countdown timer now supports time in addition to date
148
  * UI tweaks