InfiniteWP Client - Version 1.3.8

Version Description

  • Fix: Fixed a security bug that would allow someone to put WP site into maintenance mode if they know the admin username.
Download this release

Release Info

Developer infinitewp
Plugin Icon 128x128 InfiniteWP Client
Version 1.3.8
Comparing to
See all releases

Code changes from version 1.3.7 to 1.3.8

Files changed (2) hide show
  1. init.php +7 -7
  2. readme.txt +3 -0
init.php CHANGED
@@ -4,7 +4,7 @@ Plugin Name: InfiniteWP - Client
4
  Plugin URI: http://infinitewp.com/
5
  Description: This is the client plugin of InfiniteWP that communicates with the InfiniteWP Admin panel.
6
  Author: Revmakx
7
- Version: 1.3.7
8
  Author URI: http://www.revmakx.com
9
  */
10
  /************************************************************
@@ -26,7 +26,7 @@ Author URI: http://www.revmakx.com
26
  **************************************************************/
27
 
28
  if(!defined('IWP_MMB_CLIENT_VERSION'))
29
- define('IWP_MMB_CLIENT_VERSION', '1.3.7');
30
 
31
 
32
 
@@ -138,13 +138,13 @@ if( !function_exists ('iwp_mmb_parse_request')) {
138
  iwp_mmb_readd_site($params);
139
  iwp_mmb_response(array('error' => 'You should never see this.', 'error_code' => 'you_should_never_see_this'), false);
140
  }
141
- if ($action == 'maintain_site') {
142
- iwp_mmb_maintain_site($params);
143
- iwp_mmb_response(array('error' => 'You should never see this.', 'error_code' => 'you_should_never_see_this'), false);
144
- }
145
-
146
  $auth = $iwp_mmb_core->authenticate_message($action . $id, $signature, $id);
147
  if ($auth === true) {
 
 
 
 
148
  @ignore_user_abort(true);
149
  $GLOBALS['IWP_CLIENT_HISTORY_ID'] = $id;
150
 
4
  Plugin URI: http://infinitewp.com/
5
  Description: This is the client plugin of InfiniteWP that communicates with the InfiniteWP Admin panel.
6
  Author: Revmakx
7
+ Version: 1.3.8
8
  Author URI: http://www.revmakx.com
9
  */
10
  /************************************************************
26
  **************************************************************/
27
 
28
  if(!defined('IWP_MMB_CLIENT_VERSION'))
29
+ define('IWP_MMB_CLIENT_VERSION', '1.3.8');
30
 
31
 
32
 
138
  iwp_mmb_readd_site($params);
139
  iwp_mmb_response(array('error' => 'You should never see this.', 'error_code' => 'you_should_never_see_this'), false);
140
  }
141
+
 
 
 
 
142
  $auth = $iwp_mmb_core->authenticate_message($action . $id, $signature, $id);
143
  if ($auth === true) {
144
+ if ($action == 'maintain_site') {
145
+ iwp_mmb_maintain_site($params);
146
+ iwp_mmb_response(array('error' => 'You should never see this.', 'error_code' => 'you_should_never_see_this'), false);
147
+ }
148
  @ignore_user_abort(true);
149
  $GLOBALS['IWP_CLIENT_HISTORY_ID'] = $id;
150
 
readme.txt CHANGED
@@ -48,6 +48,9 @@ Credits: [Vladimir Prelovac](http://prelovac.com/vladimir) for his worker plugin
48
 
49
  == Changelog ==
50
 
 
 
 
51
  = 1.3.7 =
52
  * Fix: Dropbox SSL3 verification issue.
53
 
48
 
49
  == Changelog ==
50
 
51
+ = 1.3.8 =
52
+ * Fix: Fixed a security bug that would allow someone to put WP site into maintenance mode if they know the admin username.
53
+
54
  = 1.3.7 =
55
  * Fix: Dropbox SSL3 verification issue.
56