Email Log - Version 1.9.1

Version Description

  • Fixed a minor security issue that allowed unprevilleged users to view content of logged emails
Download this release

Release Info

Developer sudar
Plugin Icon 128x128 Email Log
Version 1.9.1
Comparing to
See all releases

Code changes from version 1.9 to 1.9.1

Files changed (3) hide show
  1. email-log.php +9 -7
  2. languages/email-log.pot +7 -7
  3. readme.txt +9 -3
email-log.php CHANGED
@@ -5,7 +5,7 @@
5
  * Description: Logs every email sent through WordPress
6
  * Donate Link: http://sudarmuthu.com/if-you-wanna-thank-me
7
  * Author: Sudar
8
- * Version: 1.9
9
  * Author URI: http://sudarmuthu.com/
10
  * Text Domain: email-log
11
  * Domain Path: languages/
@@ -76,7 +76,7 @@ class EmailLog {
76
  * @since Genesis
77
  * @var const VERSION
78
  */
79
- const VERSION = '1.9';
80
 
81
  /**
82
  * Filter name.
@@ -297,13 +297,15 @@ class EmailLog {
297
  public function display_content_callback() {
298
  global $wpdb;
299
 
300
- $table_name = $wpdb->prefix . self::TABLE_NAME;
301
- $email_id = absint( $_GET['email_id'] );
 
302
 
303
- $query = $wpdb->prepare( 'SELECT * FROM ' . $table_name . ' WHERE id = %d', $email_id );
304
- $content = $wpdb->get_results( $query );
305
 
306
- echo wpautop( $content[0]->message );
 
307
 
308
  die(); // this is required to return a proper result
309
  }
5
  * Description: Logs every email sent through WordPress
6
  * Donate Link: http://sudarmuthu.com/if-you-wanna-thank-me
7
  * Author: Sudar
8
+ * Version: 1.9.1
9
  * Author URI: http://sudarmuthu.com/
10
  * Text Domain: email-log
11
  * Domain Path: languages/
76
  * @since Genesis
77
  * @var const VERSION
78
  */
79
+ const VERSION = '1.9.1';
80
 
81
  /**
82
  * Filter name.
297
  public function display_content_callback() {
298
  global $wpdb;
299
 
300
+ if ( current_user_can( 'manage_options' ) ) {
301
+ $table_name = $wpdb->prefix . self::TABLE_NAME;
302
+ $email_id = absint( $_GET['email_id'] );
303
 
304
+ $query = $wpdb->prepare( 'SELECT * FROM ' . $table_name . ' WHERE id = %d', $email_id );
305
+ $content = $wpdb->get_results( $query );
306
 
307
+ echo wpautop( $content[0]->message );
308
+ }
309
 
310
  die(); // this is required to return a proper result
311
  }
languages/email-log.pot CHANGED
@@ -2,9 +2,9 @@
2
  # This file is distributed under the same license as the Email Log package.
3
  msgid ""
4
  msgstr ""
5
- "Project-Id-Version: Email Log 1.9\n"
6
  "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/email-log\n"
7
- "POT-Creation-Date: 2016-06-19 07:00:18+00:00\n"
8
  "MIME-Version: 1.0\n"
9
  "Content-Type: text/plain; charset=UTF-8\n"
10
  "Content-Transfer-Encoding: 8bit\n"
@@ -16,7 +16,7 @@ msgstr ""
16
  msgid "Buy Addons"
17
  msgstr ""
18
 
19
- #. #-#-#-#-# email-log.pot (Email Log 1.9) #-#-#-#-#
20
  #. Plugin Name of the plugin/theme
21
  #: dist/email-log.php:181 email-log.php:181
22
  msgid "Email Log"
@@ -76,19 +76,19 @@ msgstr ""
76
  msgid "Entries per page"
77
  msgstr ""
78
 
79
- #: dist/email-log.php:359 email-log.php:359
80
  msgid "Log"
81
  msgstr ""
82
 
83
- #: dist/email-log.php:374 email-log.php:374
84
  msgid "plugin"
85
  msgstr ""
86
 
87
- #: dist/email-log.php:374 email-log.php:374
88
  msgid "Version"
89
  msgstr ""
90
 
91
- #: dist/email-log.php:374 email-log.php:374
92
  msgid "by"
93
  msgstr ""
94
 
2
  # This file is distributed under the same license as the Email Log package.
3
  msgid ""
4
  msgstr ""
5
+ "Project-Id-Version: Email Log 1.9.1\n"
6
  "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/email-log\n"
7
+ "POT-Creation-Date: 2016-07-02 02:04:52+00:00\n"
8
  "MIME-Version: 1.0\n"
9
  "Content-Type: text/plain; charset=UTF-8\n"
10
  "Content-Transfer-Encoding: 8bit\n"
16
  msgid "Buy Addons"
17
  msgstr ""
18
 
19
+ #. #-#-#-#-# email-log.pot (Email Log 1.9.1) #-#-#-#-#
20
  #. Plugin Name of the plugin/theme
21
  #: dist/email-log.php:181 email-log.php:181
22
  msgid "Email Log"
76
  msgid "Entries per page"
77
  msgstr ""
78
 
79
+ #: dist/email-log.php:359 email-log.php:361
80
  msgid "Log"
81
  msgstr ""
82
 
83
+ #: dist/email-log.php:374 email-log.php:376
84
  msgid "plugin"
85
  msgstr ""
86
 
87
+ #: dist/email-log.php:374 email-log.php:376
88
  msgid "Version"
89
  msgstr ""
90
 
91
+ #: dist/email-log.php:374 email-log.php:376
92
  msgid "by"
93
  msgstr ""
94
 
readme.txt CHANGED
@@ -3,7 +3,7 @@ Contributors: sudar
3
  Tags: email, log, multisite
4
  Requires at least: 3.3
5
  Tested up to: 4.5.2
6
- Stable tag: 1.9
7
 
8
  Logs every email sent through WordPress. Works with WordPress Multisite as well
9
 
@@ -122,7 +122,10 @@ wpmandrill plugin has a bug that prevents this plugin from logging the content o
122
  This Readme file was generated using <a href = 'http://sudarmuthu.com/wordpress/wp-readme'>wp-readme</a>, which generates readme files for WordPress Plugins.
123
  == Changelog ==
124
 
125
- = v1.9 - (2016-06-19) - (Dev time: 6 hour) =
 
 
 
126
  - Fix: Improve the performance of count query (issue #33)
127
  - Docs: Added access modifiers to class methods
128
  - Docs: Removed unused array_get() method
@@ -136,7 +139,7 @@ This Readme file was generated using <a href = 'http://sudarmuthu.com/wordpress/
136
  = v1.8.1 (2015-12-27) - (Dev time: 0.5 hour) =
137
  - Fix: Fixed the "Delete All Logs" issue that was introduced in v1.8
138
 
139
- = v1.8 (2015-12-26) - (Dev time: 5 hour) =
140
  - New: Added filters and actions for addons
141
  - New: Added Resend Email Addon
142
  - Tweak: Optimize for large number of logs
@@ -252,6 +255,9 @@ This Readme file was generated using <a href = 'http://sudarmuthu.com/wordpress/
252
 
253
  == Upgrade Notice ==
254
 
 
 
 
255
  = 1.9 =
256
  - Fixed issues with pagination.
257
 
3
  Tags: email, log, multisite
4
  Requires at least: 3.3
5
  Tested up to: 4.5.2
6
+ Stable tag: 1.9.1
7
 
8
  Logs every email sent through WordPress. Works with WordPress Multisite as well
9
 
122
  This Readme file was generated using <a href = 'http://sudarmuthu.com/wordpress/wp-readme'>wp-readme</a>, which generates readme files for WordPress Plugins.
123
  == Changelog ==
124
 
125
+ = v1.9.1 - (2016-07-02) - (Dev time: 0.5 hour) =
126
+ - Fix: Only allow users with `manage_option` capability to view email content.
127
+
128
+ = v1.9 - (2016-06-19) - (Dev time: 6 hours) =
129
  - Fix: Improve the performance of count query (issue #33)
130
  - Docs: Added access modifiers to class methods
131
  - Docs: Removed unused array_get() method
139
  = v1.8.1 (2015-12-27) - (Dev time: 0.5 hour) =
140
  - Fix: Fixed the "Delete All Logs" issue that was introduced in v1.8
141
 
142
+ = v1.8 (2015-12-26) - (Dev time: 5 hours) =
143
  - New: Added filters and actions for addons
144
  - New: Added Resend Email Addon
145
  - Tweak: Optimize for large number of logs
255
 
256
  == Upgrade Notice ==
257
 
258
+ = 1.9.1 =
259
+ - Fixed a minor security issue that allowed unprevilleged users to view content of logged emails
260
+
261
  = 1.9 =
262
  - Fixed issues with pagination.
263