InfiniteWP Client - Version 1.3.8

Version Description

  • Fix: Fixed a security bug that would allow someone to put WP site into maintenance mode if they know the admin username.
Download this release

Release Info

Developer infinitewp
Plugin Icon 128x128 InfiniteWP Client
Version 1.3.8
Comparing to
See all releases

Code changes from version 1.3.7 to 1.3.8

Files changed (2) hide show
  1. init.php +7 -7
  2. readme.txt +3 -0
init.php CHANGED
@@ -4,7 +4,7 @@ Plugin Name: InfiniteWP - Client
4
Plugin URI: http://infinitewp.com/
5
Description: This is the client plugin of InfiniteWP that communicates with the InfiniteWP Admin panel.
6
Author: Revmakx
7
- Version: 1.3.7
8
Author URI: http://www.revmakx.com
9
*/
10
/************************************************************
@@ -26,7 +26,7 @@ Author URI: http://www.revmakx.com
26
**************************************************************/
27
28
if(!defined('IWP_MMB_CLIENT_VERSION'))
29
- define('IWP_MMB_CLIENT_VERSION', '1.3.7');
30
31
32
@@ -138,13 +138,13 @@ if( !function_exists ('iwp_mmb_parse_request')) {
138
iwp_mmb_readd_site($params);
139
iwp_mmb_response(array('error' => 'You should never see this.', 'error_code' => 'you_should_never_see_this'), false);
140
}
141
- if ($action == 'maintain_site') {
142
- iwp_mmb_maintain_site($params);
143
- iwp_mmb_response(array('error' => 'You should never see this.', 'error_code' => 'you_should_never_see_this'), false);
144
- }
145
-
146
$auth = $iwp_mmb_core->authenticate_message($action . $id, $signature, $id);
147
if ($auth === true) {
148
@ignore_user_abort(true);
149
$GLOBALS['IWP_CLIENT_HISTORY_ID'] = $id;
150
4
Plugin URI: http://infinitewp.com/
5
Description: This is the client plugin of InfiniteWP that communicates with the InfiniteWP Admin panel.
6
Author: Revmakx
7
+ Version: 1.3.8
8
Author URI: http://www.revmakx.com
9
*/
10
/************************************************************
26
**************************************************************/
27
28
if(!defined('IWP_MMB_CLIENT_VERSION'))
29
+ define('IWP_MMB_CLIENT_VERSION', '1.3.8');
30
31
32
138
iwp_mmb_readd_site($params);
139
iwp_mmb_response(array('error' => 'You should never see this.', 'error_code' => 'you_should_never_see_this'), false);
140
}
141
+
142
$auth = $iwp_mmb_core->authenticate_message($action . $id, $signature, $id);
143
if ($auth === true) {
144
+ if ($action == 'maintain_site') {
145
+ iwp_mmb_maintain_site($params);
146
+ iwp_mmb_response(array('error' => 'You should never see this.', 'error_code' => 'you_should_never_see_this'), false);
147
+ }
148
@ignore_user_abort(true);
149
$GLOBALS['IWP_CLIENT_HISTORY_ID'] = $id;
150
readme.txt CHANGED
@@ -48,6 +48,9 @@ Credits: [Vladimir Prelovac](http://prelovac.com/vladimir) for his worker plugin
48
49
== Changelog ==
50
51
= 1.3.7 =
52
* Fix: Dropbox SSL3 verification issue.
53
48
49
== Changelog ==
50
51
+ = 1.3.8 =
52
+ * Fix: Fixed a security bug that would allow someone to put WP site into maintenance mode if they know the admin username.
53
+
54
= 1.3.7 =
55
* Fix: Dropbox SSL3 verification issue.
56