Timetable and Event Schedule by MotoPress - Version 2.4.5

Version Description

Download this release

Release Info

Developer jetmonsters
Plugin Icon 128x128 Timetable and Event Schedule by MotoPress
Version 2.4.5
Comparing to
See all releases

Code changes from version 2.4.4 to 2.4.5

Files changed (4) hide show
  1. changelog.txt +13 -0
  2. classes/models/class-events.php +19 -11
  3. mp-timetable.php +1 -1
  4. readme.txt +5 -15
changelog.txt CHANGED
@@ -1,3 +1,16 @@
 
 
 
 
 
 
 
 
 
 
 
 
 
1
  = 2.3.18, Mar 18 2021 =
2
  * Improved compatibility with WordPress 5.7.
3
 
1
+ = 2.4.2, Aug 20 2021 =
2
+ * Security - added nonces to prevent CSRF.
3
+
4
+ = 2.4.1, Aug 18 2021 =
5
+ * Bug fix: fixed a PHP notice in Widget Areas in WordPress 5.8.
6
+
7
+ = 2.4.0, Aug 11 2021 =
8
+ * Security - Fixed security issues. Reported by wpscan.com.
9
+
10
+ = 2.3.19, Jul 27 2021 =
11
+ * Improved compatibility with WordPress 5.8.
12
+ * Security - Fixed unescaped meta data. Reported by Trustwave.
13
+
14
  = 2.3.18, Mar 18 2021 =
15
  * Improved compatibility with WordPress 5.7.
16
 
classes/models/class-events.php CHANGED
@@ -863,22 +863,30 @@ class Events extends Model {
863
  /*
864
  * duplicate all post meta
865
  */
866
- $post_meta = $wpdb->get_results("SELECT meta_key, meta_value FROM $wpdb->postmeta WHERE post_id=$post_id");
867
 
868
- if ( !empty($post_meta) ) {
869
 
870
- $sql_query = "INSERT INTO $wpdb->postmeta (post_id, meta_key, meta_value) ";
 
 
 
 
871
 
872
- foreach ($post_meta as $meta_info) {
873
- $meta_key = $meta_info->meta_key;
874
- if ( $meta_key == '_wp_old_slug' ) continue;
875
- $meta_value = addslashes($meta_info->meta_value);
876
- $sql_query_sel[]= "SELECT $new_post_id, '$meta_key', '$meta_value'";
877
- }
 
878
 
879
- $sql_query .= implode( " UNION ALL ", $sql_query_sel );
 
 
 
 
880
 
881
- $wpdb->query( $sql_query );
882
  }
883
 
884
  /*
863
  /*
864
  * duplicate all post meta
865
  */
866
+ $post_meta_keys = \get_post_custom_keys( $post_id );
867
 
868
+ if ( ! empty( $post_meta_keys ) ) {
869
 
870
+ $meta_excludelist = [
871
+ '_edit_lock',
872
+ '_edit_last',
873
+ '_wp_old_slug'
874
+ ];
875
 
876
+ $meta_keys = \array_diff( $post_meta_keys, $meta_excludelist );
877
+
878
+ foreach ( $meta_keys as $meta_key ) {
879
+ $meta_values = \get_post_custom_values( $meta_key, $post_id );
880
+
881
+ // Clear existing meta data
882
+ \delete_post_meta( $new_post_id, $meta_key );
883
 
884
+ foreach ( $meta_values as $meta_value ) {
885
+ $meta_value = \maybe_unserialize( $meta_value );
886
+ \add_post_meta( $new_post_id, $meta_key, addslashes( $meta_value ) );
887
+ }
888
+ }
889
 
 
890
  }
891
 
892
  /*
mp-timetable.php CHANGED
@@ -4,7 +4,7 @@
4
  * Plugin Name: Timetable and Event Schedule
5
  * Plugin URI: https://motopress.com/products/timetable-event-schedule/
6
  * Description: Smart time-management tool with a clean minimalist design for featuring your timetables and upcoming events.
7
- * Version: 2.4.4
8
  * Author: MotoPress
9
  * Author URI: https://motopress.com
10
  * License: GPLv2 or later
4
  * Plugin Name: Timetable and Event Schedule
5
  * Plugin URI: https://motopress.com/products/timetable-event-schedule/
6
  * Description: Smart time-management tool with a clean minimalist design for featuring your timetables and upcoming events.
7
+ * Version: 2.4.5
8
  * Author: MotoPress
9
  * Author URI: https://motopress.com
10
  * License: GPLv2 or later
readme.txt CHANGED
@@ -4,7 +4,7 @@ Donate link: https://motopress.com/
4
  Tags: schedule, timetable, calendar, event, events calendar, dates, event organizer, booking, appointment, upcoming events
5
  Requires at least: 4.6
6
  Tested up to: 5.8
7
- Stable tag: 2.4.4
8
  License: GPLv2 or later
9
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
10
 
@@ -94,24 +94,14 @@ Plugin bundles the following third-party resources:
94
 
95
  == Changelog ==
96
 
 
 
 
97
  = 2.4.4, Oct 27 2021 =
98
  * Security - sanitization and escaping.
99
 
100
  = 2.4.3, Sep 27 2021 =
101
- * Security - Fixed unescaped shortcode attributes.
102
-
103
- = 2.4.2, Aug 20 2021 =
104
- * Security - added nonces to prevent CSRF.
105
-
106
- = 2.4.1, Aug 18 2021 =
107
- * Bug fix: fixed a PHP notice in Widget Areas in WordPress 5.8.
108
-
109
- = 2.4.0, Aug 11 2021 =
110
- * Security - Fixed security issues. Reported by wpscan.com.
111
-
112
- = 2.3.19, Jul 27 2021 =
113
- * Improved compatibility with WordPress 5.8.
114
- * Security - Fixed unescaped meta data. Reported by Trustwave.
115
 
116
  --------
117
 
4
  Tags: schedule, timetable, calendar, event, events calendar, dates, event organizer, booking, appointment, upcoming events
5
  Requires at least: 4.6
6
  Tested up to: 5.8
7
+ Stable tag: 2.4.5
8
  License: GPLv2 or later
9
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
10
 
94
 
95
  == Changelog ==
96
 
97
+ = 2.4.5, Jan 12 2022 =
98
+ * Security - implemented better handling of the event duplication functionality. Reported by Chloe Chamberland from Wordfence.
99
+
100
  = 2.4.4, Oct 27 2021 =
101
  * Security - sanitization and escaping.
102
 
103
  = 2.4.3, Sep 27 2021 =
104
+ * Security - fixed unescaped shortcode attributes.
 
 
 
 
 
 
 
 
 
 
 
 
 
105
 
106
  --------
107