Google Analytics for WordPress by MonsterInsights - Version 4.1.3

Version Description

  • Security fix: badly crafted comments could lead to insertion of "weird" links into comments. They'd have to pass your moderation, but still... Immediate update advised. Props to David Whitehouse and James Slater for finding it.
Download this release

Release Info

Developer joostdevalk
Plugin Icon 128x128 Google Analytics for WordPress by MonsterInsights
Version 4.1.3
Comparing to
See all releases

Code changes from version 4.1.2 to 4.1.3

Files changed (2) hide show
  1. googleanalytics.php +4 -4
  2. readme.txt +7 -3
googleanalytics.php CHANGED
@@ -4,7 +4,7 @@ Plugin Name: Google Analytics for WordPress
4
  Plugin URI: http://yoast.com/wordpress/google-analytics/#utm_source=wordpress&utm_medium=plugin&utm_campaign=google-analytics-for-wordpress&utm_content=v411
5
  Description: This plugin makes it simple to add Google Analytics to your WordPress blog, adding lots of features, eg. custom variables and automatic clickout and download tracking.
6
  Author: Joost de Valk
7
- Version: 4.1.2
8
  Requires at least: 2.8
9
  Author URI: http://yoast.com/
10
  License: GPL
@@ -12,7 +12,7 @@ License: GPL
12
 
13
  // This plugin was originally based on Rich Boakes' Analytics plugin: http://boakes.org/analytics
14
 
15
- define('GAWP_VERSION', '4.1.1');
16
 
17
  /*
18
  * Admin User Interface
@@ -1038,9 +1038,9 @@ if ( $options['gajslocalhosting'] && !empty($options['gajsurl']) ) {
1038
  ( $prefix == 'download' && $options['downloadspageview'] ) )
1039
  {
1040
  $prefix = GA_Filter::ga_get_tracking_prefix().$prefix;
1041
- $pushstr = "['_trackPageview','".$prefix."/".$target."']";
1042
  } else {
1043
- $pushstr = "['_trackEvent','".$prefix."','".$target."']";
1044
  }
1045
  return $jsprefix."_gaq.push(".$pushstr.");";
1046
  }
4
  Plugin URI: http://yoast.com/wordpress/google-analytics/#utm_source=wordpress&utm_medium=plugin&utm_campaign=google-analytics-for-wordpress&utm_content=v411
5
  Description: This plugin makes it simple to add Google Analytics to your WordPress blog, adding lots of features, eg. custom variables and automatic clickout and download tracking.
6
  Author: Joost de Valk
7
+ Version: 4.1.3
8
  Requires at least: 2.8
9
  Author URI: http://yoast.com/
10
  License: GPL
12
 
13
  // This plugin was originally based on Rich Boakes' Analytics plugin: http://boakes.org/analytics
14
 
15
+ define('GAWP_VERSION', '4.1.3');
16
 
17
  /*
18
  * Admin User Interface
1038
  ( $prefix == 'download' && $options['downloadspageview'] ) )
1039
  {
1040
  $prefix = GA_Filter::ga_get_tracking_prefix().$prefix;
1041
+ $pushstr = "['_trackPageview','".$prefix."/". esc_js( esc_url( $target ) )."']";
1042
  } else {
1043
+ $pushstr = "['_trackEvent','".$prefix."','".esc_js( esc_url( $target ) )."']";
1044
  }
1045
  return $jsprefix."_gaq.push(".$pushstr.");";
1046
  }
readme.txt CHANGED
@@ -4,7 +4,7 @@ Donate link: http://yoast.com/donate/
4
  Tags: analytics, google analytics, statistics, tracking, stats, google
5
  Requires at least: 2.8
6
  Tested up to: 3.2
7
- Stable tag: 4.1.2
8
 
9
  Track your WordPress site easily and with lots of metadata: views per author & category, automatic tracking of outbound clicks and pageviews.
10
 
@@ -59,6 +59,10 @@ This section describes how to install the plugin and get it working.
59
 
60
  == Changelog ==
61
 
 
 
 
 
62
  = 4.1.2 =
63
 
64
  * Fixed bug with custom SE tracking introduced in 4.1.1.
@@ -320,6 +324,6 @@ Because that's where it belongs. It makes the page load faster (yes, faster, due
320
 
321
  == Upgrade Notice ==
322
 
323
- = 4.0.11 =
324
 
325
- You can now properly disable the comment form tracking, and the charset attribute on script tags is gone so you can validate as HTML5 too.
4
  Tags: analytics, google analytics, statistics, tracking, stats, google
5
  Requires at least: 2.8
6
  Tested up to: 3.2
7
+ Stable tag: 4.1.3
8
 
9
  Track your WordPress site easily and with lots of metadata: views per author & category, automatic tracking of outbound clicks and pageviews.
10
 
59
 
60
  == Changelog ==
61
 
62
+ = 4.1.3 =
63
+
64
+ * Security fix: badly crafted comments could lead to insertion of "weird" links into comments. They'd have to pass your moderation, but still... Immediate update advised. Props to [David Whitehouse](http://www.david-whitehouse.org/) and [James Slater](http://james.slaterspage.com/) for finding it.
65
+
66
  = 4.1.2 =
67
 
68
  * Fixed bug with custom SE tracking introduced in 4.1.1.
324
 
325
  == Upgrade Notice ==
326
 
327
+ = 4.1.3 =
328
 
329
+ Security fix, please update ASAP. Old version is susceptible to link insertion.