Photo Gallery by WD – Responsive Photo Gallery - Version 1.1.31

Version Description

Download this release

Release Info

Developer webdorado
Plugin Icon 128x128 Photo Gallery by WD – Responsive Photo Gallery
Version 1.1.31
Comparing to
See all releases

Code changes from version 1.1.30 to 1.1.31

admin/views/BWGViewBWGShortcode.php CHANGED
@@ -192,6 +192,7 @@ class BWGViewBWGShortcode {
192
  <option value="order" selected="selected">Order</option>
193
  <option value="alt">Title</option>
194
  <option value="date">Date</option>
 
195
  <option value="size">Size</option>
196
  <option value="filetype">Type</option>
197
  <option value="resolution">Resolution</option>
192
  <option value="order" selected="selected">Order</option>
193
  <option value="alt">Title</option>
194
  <option value="date">Date</option>
195
+ <option value="filename">Filename</option>
196
  <option value="size">Size</option>
197
  <option value="filetype">Type</option>
198
  <option value="resolution">Resolution</option>
filemanager/controller.php CHANGED
@@ -44,7 +44,7 @@ class FilemanagerController {
44
  }
45
 
46
  public function execute() {
47
- $task = isset($_REQUEST['task']) ? stripslashes($_REQUEST['task']) : 'display';
48
  if (method_exists($this, $task)) {
49
  $this->$task();
50
  }
@@ -71,10 +71,10 @@ class FilemanagerController {
71
  }
72
 
73
  public function make_dir() {
74
- $input_dir = (isset($_REQUEST['dir']) ? stripslashes($_REQUEST['dir']) : '');
75
  $cur_dir_path = $input_dir == '' ? $this->uploads_dir : $this->uploads_dir . '/' . $input_dir;
76
 
77
- $new_dir_path = $cur_dir_path . '/' . (isset($_REQUEST['new_dir_name']) ? stripslashes($_REQUEST['new_dir_name']) : '');
78
 
79
  $msg = '';
80
  if (file_exists($new_dir_path) == true) {
@@ -83,20 +83,20 @@ class FilemanagerController {
83
  else {
84
  mkdir($new_dir_path);
85
  }
86
- header('Location: ' . add_query_arg(array('action' => 'addImages', 'filemanager_msg' => $msg, 'width' => '650', 'height' => '500', 'task' => 'display', 'extensions' => $_REQUEST['extensions'], 'callback' => $_REQUEST['callback'], 'dir' => $_REQUEST['dir'], 'TB_iframe' => '1'), admin_url('admin-ajax.php')));
87
  exit;
88
  }
89
 
90
  public function rename_item() {
91
- $input_dir = (isset($_REQUEST['dir']) ? stripslashes($_REQUEST['dir']) : '');
92
  $cur_dir_path = $input_dir == '' ? $this->uploads_dir : $this->uploads_dir . '/' . $input_dir;
93
  $cur_dir_path = htmlspecialchars_decode($cur_dir_path, ENT_COMPAT | ENT_QUOTES);
94
 
95
- $file_names = explode('**#**', (isset($_REQUEST['file_names']) ? stripslashes($_REQUEST['file_names']) : ''));
96
  $file_name = $file_names[0];
97
  $file_name = htmlspecialchars_decode($file_name, ENT_COMPAT | ENT_QUOTES);
98
 
99
- $file_new_name = (isset($_REQUEST['file_new_name']) ? stripslashes($_REQUEST['file_new_name']) : '');
100
 
101
  $file_path = $cur_dir_path . '/' . $file_name;
102
  $thumb_file_path = $cur_dir_path . '/thumb/' . $file_name;
@@ -123,16 +123,16 @@ class FilemanagerController {
123
  $msg = "Can't rename the file.";
124
  }
125
  $_REQUEST['file_names'] = '';
126
- header('Location: ' . add_query_arg(array('action' => 'addImages', 'filemanager_msg' => $msg, 'width' => '650', 'height' => '500', 'task' => 'display', 'extensions' => $_REQUEST['extensions'], 'callback' => $_REQUEST['callback'], 'dir' => $_REQUEST['dir'], 'TB_iframe' => '1'), admin_url('admin-ajax.php')));
127
  exit;
128
  }
129
 
130
  public function remove_items() {
131
- $input_dir = (isset($_REQUEST['dir']) ? stripslashes($_REQUEST['dir']) : '');
132
  $cur_dir_path = $input_dir == '' ? $this->uploads_dir : $this->uploads_dir . '/' . $input_dir;
133
  $cur_dir_path = htmlspecialchars_decode($cur_dir_path, ENT_COMPAT | ENT_QUOTES);
134
 
135
- $file_names = explode('**#**', (isset($_REQUEST['file_names']) ? stripslashes($_REQUEST['file_names']) : ''));
136
 
137
  $msg = '';
138
  foreach ($file_names as $file_name) {
@@ -154,7 +154,7 @@ class FilemanagerController {
154
  }
155
  }
156
  $_REQUEST['file_names'] = '';
157
- header('Location: ' . add_query_arg(array('action' => 'addImages', 'filemanager_msg' => $msg, 'width' => '650', 'height' => '500', 'task' => 'show_file_manager', 'extensions' => $_REQUEST['extensions'], 'callback' => $_REQUEST['callback'], 'dir' => $_REQUEST['dir'], 'TB_iframe' => '1'), admin_url('admin-ajax.php')));
158
  exit;
159
  }
160
 
@@ -244,12 +244,12 @@ class FilemanagerController {
244
  }
245
  break;
246
  }
247
- header('Location: ' . add_query_arg(array('action' => 'addImages', 'filemanager_msg' => $msg, 'width' => '650', 'height' => '500', 'task' => 'show_file_manager', 'extensions' => $_REQUEST['extensions'], 'callback' => $_REQUEST['callback'], 'dir' => $_REQUEST['dir'], 'TB_iframe' => '1'), admin_url('admin-ajax.php')));
248
  exit;
249
  }
250
 
251
  public function import_items() {
252
- header('Location: ' . add_query_arg(array('action' => 'bwg_UploadHandler', 'importer_thumb_width' => $_REQUEST['importer_thumb_width'], 'importer_thumb_height' => $_REQUEST['importer_thumb_height'], 'callback' => $_REQUEST['callback'], 'file_namesML' => $_REQUEST['file_namesML'], 'import' => 'true', 'redir' => $_REQUEST['dir'], 'dir' => $this->get_uploads_dir() . '/' . $_REQUEST['dir'] . '/'), admin_url('admin-ajax.php')));
253
  exit;
254
  }
255
 
44
  }
45
 
46
  public function execute() {
47
+ $task = isset($_REQUEST['task']) ? stripslashes(esc_html($_REQUEST['task'])) : 'display';
48
  if (method_exists($this, $task)) {
49
  $this->$task();
50
  }
71
  }
72
 
73
  public function make_dir() {
74
+ $input_dir = (isset($_REQUEST['dir']) ? stripslashes(esc_html($_REQUEST['dir'])) : '');
75
  $cur_dir_path = $input_dir == '' ? $this->uploads_dir : $this->uploads_dir . '/' . $input_dir;
76
 
77
+ $new_dir_path = $cur_dir_path . '/' . (isset($_REQUEST['new_dir_name']) ? stripslashes(esc_html($_REQUEST['new_dir_name'])) : '');
78
 
79
  $msg = '';
80
  if (file_exists($new_dir_path) == true) {
83
  else {
84
  mkdir($new_dir_path);
85
  }
86
+ header('Location: ' . add_query_arg(array('action' => 'addImages', 'filemanager_msg' => $msg, 'width' => '650', 'height' => '500', 'task' => 'display', 'extensions' => esc_html($_REQUEST['extensions']), 'callback' => esc_html($_REQUEST['callback']), 'dir' => esc_html($_REQUEST['dir']), 'TB_iframe' => '1'), admin_url('admin-ajax.php')));
87
  exit;
88
  }
89
 
90
  public function rename_item() {
91
+ $input_dir = (isset($_REQUEST['dir']) ? stripslashes(esc_html($_REQUEST['dir'])) : '');
92
  $cur_dir_path = $input_dir == '' ? $this->uploads_dir : $this->uploads_dir . '/' . $input_dir;
93
  $cur_dir_path = htmlspecialchars_decode($cur_dir_path, ENT_COMPAT | ENT_QUOTES);
94
 
95
+ $file_names = explode('**#**', (isset($_REQUEST['file_names']) ? stripslashes(esc_html($_REQUEST['file_names'])) : ''));
96
  $file_name = $file_names[0];
97
  $file_name = htmlspecialchars_decode($file_name, ENT_COMPAT | ENT_QUOTES);
98
 
99
+ $file_new_name = (isset($_REQUEST['file_new_name']) ? stripslashes(esc_html($_REQUEST['file_new_name'])) : '');
100
 
101
  $file_path = $cur_dir_path . '/' . $file_name;
102
  $thumb_file_path = $cur_dir_path . '/thumb/' . $file_name;
123
  $msg = "Can't rename the file.";
124
  }
125
  $_REQUEST['file_names'] = '';
126
+ header('Location: ' . add_query_arg(array('action' => 'addImages', 'filemanager_msg' => $msg, 'width' => '650', 'height' => '500', 'task' => 'display', 'extensions' => esc_html($_REQUEST['extensions']), 'callback' => esc_html($_REQUEST['callback']), 'dir' => esc_html($_REQUEST['dir']), 'TB_iframe' => '1'), admin_url('admin-ajax.php')));
127
  exit;
128
  }
129
 
130
  public function remove_items() {
131
+ $input_dir = (isset($_REQUEST['dir']) ? stripslashes(esc_html($_REQUEST['dir'])) : '');
132
  $cur_dir_path = $input_dir == '' ? $this->uploads_dir : $this->uploads_dir . '/' . $input_dir;
133
  $cur_dir_path = htmlspecialchars_decode($cur_dir_path, ENT_COMPAT | ENT_QUOTES);
134
 
135
+ $file_names = explode('**#**', (isset($_REQUEST['file_names']) ? stripslashes(esc_html($_REQUEST['file_names'])) : ''));
136
 
137
  $msg = '';
138
  foreach ($file_names as $file_name) {
154
  }
155
  }
156
  $_REQUEST['file_names'] = '';
157
+ header('Location: ' . add_query_arg(array('action' => 'addImages', 'filemanager_msg' => $msg, 'width' => '650', 'height' => '500', 'task' => 'show_file_manager', 'extensions' => esc_html($_REQUEST['extensions']), 'callback' => esc_html($_REQUEST['callback']), 'dir' => esc_html($_REQUEST['dir']), 'TB_iframe' => '1'), admin_url('admin-ajax.php')));
158
  exit;
159
  }
160
 
244
  }
245
  break;
246
  }
247
+ header('Location: ' . add_query_arg(array('action' => 'addImages', 'filemanager_msg' => $msg, 'width' => '650', 'height' => '500', 'task' => 'show_file_manager', 'extensions' => esc_html($_REQUEST['extensions']), 'callback' => esc_html($_REQUEST['callback']), 'dir' => esc_html($_REQUEST['dir']), 'TB_iframe' => '1'), admin_url('admin-ajax.php')));
248
  exit;
249
  }
250
 
251
  public function import_items() {
252
+ header('Location: ' . add_query_arg(array('action' => 'bwg_UploadHandler', 'importer_thumb_width' => esc_html($_REQUEST['importer_thumb_width']), 'importer_thumb_height' => esc_html($_REQUEST['importer_thumb_height']), 'callback' => esc_html($_REQUEST['callback']), 'file_namesML' => esc_html($_REQUEST['file_namesML']), 'import' => 'true', 'redir' => esc_html($_REQUEST['dir']), 'dir' => $this->get_uploads_dir() . '/' . esc_html($_REQUEST['dir']) . '/'), admin_url('admin-ajax.php')));
253
  exit;
254
  }
255
 
filemanager/model.php CHANGED
@@ -45,11 +45,11 @@ class FilemanagerModel {
45
  $data = array();
46
  $data['session_data'] = $session_data;
47
  $data['path_components'] = $this->get_path_components();
48
- $data['dir'] = (isset($_REQUEST['dir']) ? $_REQUEST['dir'] : '');
49
  $data['files'] = $this->get_files($session_data['sort_by'], $session_data['sort_order']);
50
  $data['media_library_files'] = ($this->controller->get_options_data()->enable_ML_import ? $this->get_media_library_files($session_data['sort_by'], $session_data['sort_order']) : array());
51
- $data['extensions'] = (isset($_REQUEST['extensions']) ? $_REQUEST['extensions'] : '');
52
- $data['callback'] = (isset($_REQUEST['callback']) ? $_REQUEST['callback'] : '');
53
 
54
  return $data;
55
  }
@@ -105,9 +105,9 @@ class FilemanagerModel {
105
  function get_files($sort_by, $sort_order) {
106
  $icons_dir_path = WD_BWG_DIR . '/filemanager/images/file_icons';
107
  $icons_dir_url = WD_BWG_URL . '/filemanager/images/file_icons';
108
- $valid_types = explode(',', isset($_REQUEST['extensions']) ? strtolower($_REQUEST['extensions']) : '*');
109
- $parent_dir = $this->controller->get_uploads_dir() . (isset($_REQUEST['dir']) ? '/' . $_REQUEST['dir'] : '');
110
- $parent_dir_url = $this->controller->get_uploads_url() . (isset($_REQUEST['dir']) ? '/' . $_REQUEST['dir'] : '');
111
 
112
 
113
  $file_names = $this->get_sorted_file_names($parent_dir, $sort_by, $sort_order);
@@ -165,7 +165,7 @@ class FilemanagerModel {
165
  function get_media_library_files($sort_by, $sort_order) {
166
  $icons_dir_path = WD_BWG_DIR . '/filemanager/images/file_icons';
167
  $icons_dir_url = WD_BWG_URL . '/filemanager/images/file_icons';
168
- $valid_types = explode(',', isset($_REQUEST['extensions']) ? strtolower($_REQUEST['extensions']) : '*');
169
  $upload_dir = wp_upload_dir();
170
  $parent_dir = $upload_dir['basedir'];
171
  $parent_dir_url = $upload_dir['baseurl'];
45
  $data = array();
46
  $data['session_data'] = $session_data;
47
  $data['path_components'] = $this->get_path_components();
48
+ $data['dir'] = (isset($_REQUEST['dir']) ? esc_html($_REQUEST['dir']) : '');
49
  $data['files'] = $this->get_files($session_data['sort_by'], $session_data['sort_order']);
50
  $data['media_library_files'] = ($this->controller->get_options_data()->enable_ML_import ? $this->get_media_library_files($session_data['sort_by'], $session_data['sort_order']) : array());
51
+ $data['extensions'] = (isset($_REQUEST['extensions']) ? esc_html($_REQUEST['extensions']) : '');
52
+ $data['callback'] = (isset($_REQUEST['callback']) ? esc_html($_REQUEST['callback']) : '');
53
 
54
  return $data;
55
  }
105
  function get_files($sort_by, $sort_order) {
106
  $icons_dir_path = WD_BWG_DIR . '/filemanager/images/file_icons';
107
  $icons_dir_url = WD_BWG_URL . '/filemanager/images/file_icons';
108
+ $valid_types = explode(',', isset($_REQUEST['extensions']) ? strtolower(esc_html($_REQUEST['extensions'])) : '*');
109
+ $parent_dir = $this->controller->get_uploads_dir() . (isset($_REQUEST['dir']) ? '/' . esc_html($_REQUEST['dir']) : '');
110
+ $parent_dir_url = $this->controller->get_uploads_url() . (isset($_REQUEST['dir']) ? '/' . esc_html($_REQUEST['dir']) : '');
111
 
112
 
113
  $file_names = $this->get_sorted_file_names($parent_dir, $sort_by, $sort_order);
165
  function get_media_library_files($sort_by, $sort_order) {
166
  $icons_dir_path = WD_BWG_DIR . '/filemanager/images/file_icons';
167
  $icons_dir_url = WD_BWG_URL . '/filemanager/images/file_icons';
168
+ $valid_types = explode(',', isset($_REQUEST['extensions']) ? strtolower(esc_html($_REQUEST['extensions'])) : '*');
169
  $upload_dir = wp_upload_dir();
170
  $parent_dir = $upload_dir['basedir'];
171
  $parent_dir_url = $upload_dir['baseurl'];
filemanager/view.php CHANGED
@@ -70,9 +70,9 @@ class FilemanagerView {
70
  var messageFilesUploadComplete = "<?php echo 'Files upload complete'; ?>";
71
 
72
  var root = "<?php echo addslashes($this->controller->get_uploads_dir()); ?>";
73
- var dir = "<?php echo (isset($_REQUEST['dir']) ? addslashes($_REQUEST['dir']) : ''); ?>";
74
- var dirUrl = "<?php echo $this->controller->get_uploads_url() . (isset($_REQUEST['dir']) ? $_REQUEST['dir'] . '/' : ''); ?>";
75
- var callback = "<?php echo (isset($_REQUEST['callback']) ? $_REQUEST['callback'] : ''); ?>";
76
  var sortBy = "<?php echo $sort_by; ?>";
77
  var sortOrder = "<?php echo $sort_order; ?>";
78
  </script>
@@ -339,7 +339,7 @@ class FilemanagerView {
339
  </div>
340
  <div id="btnBrowseContainer">
341
  <input id="jQueryUploader" type="file" name="files[]"
342
- data-url="<?php echo add_query_arg(array('action' => 'bwg_UploadHandler', 'dir' => $this->controller->get_uploads_dir() . '/' . (isset($_REQUEST['dir']) ? $_REQUEST['dir'] : '') . '/'), admin_url('admin-ajax.php')); ?>"
343
  multiple>
344
  </div>
345
  <script>
@@ -402,12 +402,12 @@ class FilemanagerView {
402
  </div>
403
 
404
  <input type="hidden" name="task" value="">
405
- <input type="hidden" name="extensions" value="<?php echo (isset($_REQUEST['extensions']) ? $_REQUEST['extensions'] : '*'); ?>">
406
- <input type="hidden" name="callback" value="<?php echo (isset($_REQUEST['callback']) ? $_REQUEST['callback'] : ''); ?>">
407
  <input type="hidden" name="sort_by" value="<?php echo $sort_by; ?>">
408
  <input type="hidden" name="sort_order" value="<?php echo $sort_order; ?>">
409
  <input type="hidden" name="items_view" value="<?php echo $items_view; ?>">
410
- <input type="hidden" name="dir" value="<?php echo (isset($_REQUEST['dir']) ? $_REQUEST['dir'] : ''); ?>"/>
411
  <input type="hidden" name="file_names" value=""/>
412
  <input type="hidden" name="file_namesML" value=""/>
413
  <input type="hidden" name="file_new_name" value=""/>
70
  var messageFilesUploadComplete = "<?php echo 'Files upload complete'; ?>";
71
 
72
  var root = "<?php echo addslashes($this->controller->get_uploads_dir()); ?>";
73
+ var dir = "<?php echo (isset($_REQUEST['dir']) ? addslashes(esc_html($_REQUEST['dir'])) : ''); ?>";
74
+ var dirUrl = "<?php echo $this->controller->get_uploads_url() . (isset($_REQUEST['dir']) ? esc_html($_REQUEST['dir']) . '/' : ''); ?>";
75
+ var callback = "<?php echo (isset($_REQUEST['callback']) ? esc_html($_REQUEST['callback']) : ''); ?>";
76
  var sortBy = "<?php echo $sort_by; ?>";
77
  var sortOrder = "<?php echo $sort_order; ?>";
78
  </script>
339
  </div>
340
  <div id="btnBrowseContainer">
341
  <input id="jQueryUploader" type="file" name="files[]"
342
+ data-url="<?php echo add_query_arg(array('action' => 'bwg_UploadHandler', 'dir' => $this->controller->get_uploads_dir() . '/' . (isset($_REQUEST['dir']) ? esc_html($_REQUEST['dir']) : '') . '/'), admin_url('admin-ajax.php')); ?>"
343
  multiple>
344
  </div>
345
  <script>
402
  </div>
403
 
404
  <input type="hidden" name="task" value="">
405
+ <input type="hidden" name="extensions" value="<?php echo (isset($_REQUEST['extensions']) ? esc_html($_REQUEST['extensions']) : '*'); ?>">
406
+ <input type="hidden" name="callback" value="<?php echo (isset($_REQUEST['callback']) ? esc_html($_REQUEST['callback']) : ''); ?>">
407
  <input type="hidden" name="sort_by" value="<?php echo $sort_by; ?>">
408
  <input type="hidden" name="sort_order" value="<?php echo $sort_order; ?>">
409
  <input type="hidden" name="items_view" value="<?php echo $items_view; ?>">
410
+ <input type="hidden" name="dir" value="<?php echo (isset($_REQUEST['dir']) ? esc_html($_REQUEST['dir']) : ''); ?>"/>
411
  <input type="hidden" name="file_names" value=""/>
412
  <input type="hidden" name="file_namesML" value=""/>
413
  <input type="hidden" name="file_new_name" value=""/>
frontend/models/BWGModelGalleryBox.php CHANGED
@@ -43,7 +43,7 @@ class BWGModelGalleryBox {
43
 
44
  public function get_image_rows_data($gallery_id, $sort_by, $order_by = 'asc') {
45
  global $wpdb;
46
- if ($sort_by == 'size' || $sort_by == 'resolution') {
47
  $sort_by = ' CAST(t1.' . $sort_by . ' AS SIGNED) ';
48
  }
49
  elseif (($sort_by != 'alt') && ($sort_by != 'date') && ($sort_by != 'filetype')) {
43
 
44
  public function get_image_rows_data($gallery_id, $sort_by, $order_by = 'asc') {
45
  global $wpdb;
46
+ if ($sort_by == 'size' || $sort_by == 'resolution' || $sort_by == 'filename') {
47
  $sort_by = ' CAST(t1.' . $sort_by . ' AS SIGNED) ';
48
  }
49
  elseif (($sort_by != 'alt') && ($sort_by != 'date') && ($sort_by != 'filetype')) {
frontend/models/BWGModelImage_browser.php CHANGED
@@ -39,7 +39,7 @@ class BWGModelImage_browser {
39
  else {
40
  $where = '';
41
  }
42
- if ($sort_by == 'size' || $sort_by == 'resolution') {
43
  $sort_by = ' CAST(' . $sort_by . ' AS SIGNED) ';
44
  }
45
  elseif (($sort_by != 'alt') && ($sort_by != 'date') && ($sort_by != 'filetype')) {
39
  else {
40
  $where = '';
41
  }
42
+ if ($sort_by == 'size' || $sort_by == 'resolution' || $sort_by == 'filename') {
43
  $sort_by = ' CAST(' . $sort_by . ' AS SIGNED) ';
44
  }
45
  elseif (($sort_by != 'alt') && ($sort_by != 'date') && ($sort_by != 'filetype')) {
frontend/models/BWGModelSlideshow.php CHANGED
@@ -37,7 +37,7 @@ class BWGModelSlideshow {
37
 
38
  public function get_image_rows_data($id, $sort_by, $order_by = 'asc', $bwg) {
39
  global $wpdb;
40
- if ($sort_by == 'size' || $sort_by == 'resolution') {
41
  $sort_by = ' CAST(' . $sort_by . ' AS SIGNED) ';
42
  }
43
  elseif (($sort_by != 'alt') && ($sort_by != 'date') && ($sort_by != 'filetype')) {
37
 
38
  public function get_image_rows_data($id, $sort_by, $order_by = 'asc', $bwg) {
39
  global $wpdb;
40
+ if ($sort_by == 'size' || $sort_by == 'resolution' || $sort_by == 'filename') {
41
  $sort_by = ' CAST(' . $sort_by . ' AS SIGNED) ';
42
  }
43
  elseif (($sort_by != 'alt') && ($sort_by != 'date') && ($sort_by != 'filetype')) {
frontend/models/BWGModelThumbnails.php CHANGED
@@ -54,7 +54,7 @@ class BWGModelThumbnails {
54
  $where = '';
55
  }
56
  }
57
- if ($sort_by == 'size' || $sort_by == 'resolution') {
58
  $sort_by = ' CAST(' . $sort_by . ' AS SIGNED) ';
59
  }
60
  elseif (($sort_by != 'alt') && ($sort_by != 'date') && ($sort_by != 'filetype') && ($sort_by != 'RAND()')) {
@@ -73,7 +73,7 @@ class BWGModelThumbnails {
73
  $limit_str = '';
74
  }
75
  if($type == 'tag') {
76
- $row = $wpdb->get_results($wpdb->prepare('SELECT image.* FROM ' . $wpdb->prefix . 'bwg_image as image INNER JOIN ' . $wpdb->prefix . 'bwg_image_tag as tag ON image.id=tag.image_id WHERE image.published=1 ' . $where . ' AND tag.tag_id="%d" ORDER BY ' . $sort_by . ' ' . $sort_direction . ' ' . $limit_str, $id));
77
  }
78
  else {
79
  $row = $wpdb->get_results($wpdb->prepare('SELECT * FROM ' . $wpdb->prefix . 'bwg_image WHERE published=1 ' . $where . ' AND gallery_id="%d" ORDER BY ' . $sort_by . ' ' . $sort_direction . ' ' . $limit_str, $id));
54
  $where = '';
55
  }
56
  }
57
+ if ($sort_by == 'size' || $sort_by == 'resolution' || $sort_by == 'filename') {
58
  $sort_by = ' CAST(' . $sort_by . ' AS SIGNED) ';
59
  }
60
  elseif (($sort_by != 'alt') && ($sort_by != 'date') && ($sort_by != 'filetype') && ($sort_by != 'RAND()')) {
73
  $limit_str = '';
74
  }
75
  if($type == 'tag') {
76
+ $row = $wpdb->get_results($wpdb->prepare('SELECT image.* FROM ' . $wpdb->prefix . 'bwg_image as image INNER JOIN ' . $wpdb->prefix . 'bwg_image_tag as tag ON image.id=tag.image_id WHERE image.published=1 ' . $where . ' AND tag.tag_id="%d" ORDER BY ' . $sort_by . ' ' . $sort_direction . ' ' . $limit_str, $id));
77
  }
78
  else {
79
  $row = $wpdb->get_results($wpdb->prepare('SELECT * FROM ' . $wpdb->prefix . 'bwg_image WHERE published=1 ' . $where . ' AND gallery_id="%d" ORDER BY ' . $sort_by . ' ' . $sort_direction . ' ' . $limit_str, $id));
frontend/views/BWGViewAlbum_compact_preview.php CHANGED
@@ -569,7 +569,7 @@ class BWGViewAlbum_compact_preview {
569
  $thumb_top = ($params['compuct_album_thumb_height'] - $image_thumb_height) / 2;
570
  if ($type != 'gallery') {
571
  ?>
572
- <a style="font-size: 0;" <?php echo ($from !== "widget" ? "onclick=\"spider_frontend_ajax('gal_front_form_" . $bwg . "', '" . $bwg . "', 'bwg_album_compact_" . $bwg . "', '" . $album_galallery_row->alb_gal_id . "', '" . $album_gallery_id . "', '" . $def_type . "', '', '" . $title . "')\"" : "href='" . $permalink . "'") ?>>
573
  <span class="bwg_album_thumb_<?php echo $bwg; ?>">
574
  <?php
575
  if ($params['compuct_album_title'] == 'show' && $theme_row->album_compact_thumb_title_pos == 'top') {
569
  $thumb_top = ($params['compuct_album_thumb_height'] - $image_thumb_height) / 2;
570
  if ($type != 'gallery') {
571
  ?>
572
+ <a style="font-size: 0;" <?php echo ($from !== "widget" ? "onclick=\"spider_frontend_ajax('gal_front_form_" . $bwg . "', '" . $bwg . "', 'bwg_album_compact_" . $bwg . "', '" . $album_galallery_row->alb_gal_id . "', '" . $album_gallery_id . "', '" . $def_type . "', '', '" . htmlspecialchars(addslashes($title)) . "')\"" : "href='" . $permalink . "'") ?>>
573
  <span class="bwg_album_thumb_<?php echo $bwg; ?>">
574
  <?php
575
  if ($params['compuct_album_title'] == 'show' && $theme_row->album_compact_thumb_title_pos == 'top') {
frontend/views/BWGViewAlbum_extended_preview.php CHANGED
@@ -545,7 +545,7 @@ class BWGViewAlbum_extended_preview {
545
  ?>
546
  <div class="bwg_album_extended_div_<?php echo $bwg; ?>">
547
  <div class="bwg_album_extended_thumb_div_<?php echo $bwg; ?>">
548
- <a style="font-size: 0;" onclick="spider_frontend_ajax('gal_front_form_<?php echo $bwg; ?>', '<?php echo $bwg; ?>', 'bwg_album_extended_<?php echo $bwg; ?>', '<?php echo $album_galallery_row->alb_gal_id; ?>', '<?php echo $album_gallery_id; ?>', '<?php echo $def_type; ?>', '', '<?php echo $title; ?>')">
549
  <span class="bwg_album_thumb_<?php echo $bwg; ?>" style="height:inherit;">
550
  <span class="bwg_album_thumb_spun1_<?php echo $bwg; ?>">
551
  <span class="bwg_album_thumb_spun2_<?php echo $bwg; ?>">
545
  ?>
546
  <div class="bwg_album_extended_div_<?php echo $bwg; ?>">
547
  <div class="bwg_album_extended_thumb_div_<?php echo $bwg; ?>">
548
+ <a style="font-size: 0;" onclick="spider_frontend_ajax('gal_front_form_<?php echo $bwg; ?>', '<?php echo $bwg; ?>', 'bwg_album_extended_<?php echo $bwg; ?>', '<?php echo $album_galallery_row->alb_gal_id; ?>', '<?php echo $album_gallery_id; ?>', '<?php echo $def_type; ?>', '', '<?php echo htmlspecialchars(addslashes($title)); ?>')">
549
  <span class="bwg_album_thumb_<?php echo $bwg; ?>" style="height:inherit;">
550
  <span class="bwg_album_thumb_spun1_<?php echo $bwg; ?>">
551
  <span class="bwg_album_thumb_spun2_<?php echo $bwg; ?>">
frontend/views/BWGViewGalleryBox.php CHANGED
@@ -723,6 +723,14 @@ class BWGViewGalleryBox {
723
  .bwg_image_count_container {
724
  display: none;
725
  }
 
 
 
 
 
 
 
 
726
  }
727
  .bwg_image_count_container {
728
  left: 0;
723
  .bwg_image_count_container {
724
  display: none;
725
  }
726
+ .bwg_image_title,
727
+ .bwg_image_title * {
728
+ font-size: 12px;
729
+ }
730
+ .bwg_image_description,
731
+ .bwg_image_description * {
732
+ font-size: 10px;
733
+ }
734
  }
735
  .bwg_image_count_container {
736
  left: 0;
frontend/views/BWGViewSlideshow.php CHANGED
@@ -927,6 +927,7 @@ class BWGViewSlideshow {
927
  jQuery(next_image_class).css({
928
  opacity : 1,
929
  filter: 'Alpha(opacity=100)',
 
930
  backfaceVisibility : 'hidden',
931
  transform : 'translateY(' + nty + 'px) translateX(' + ntx + 'px) rotateY('+ nry +'deg) rotateX('+ nrx +'deg)'
932
  });
927
  jQuery(next_image_class).css({
928
  opacity : 1,
929
  filter: 'Alpha(opacity=100)',
930
+ zIndex: 2,
931
  backfaceVisibility : 'hidden',
932
  transform : 'translateY(' + nty + 'px) translateX(' + ntx + 'px) rotateY('+ nry +'deg) rotateX('+ nrx +'deg)'
933
  });
photo-gallery.php CHANGED
@@ -4,7 +4,7 @@
4
  * Plugin Name: Photo Gallery
5
  * Plugin URI: http://web-dorado.com/products/wordpress-photo-gallery-plugin.html
6
  * Description: This plugin is a fully responsive gallery plugin with advanced functionality. It allows having different image galleries for your posts and pages. You can create unlimited number of galleries, combine them into albums, and provide descriptions and tags.
7
- * Version: 1.1.30
8
  * Author: http://web-dorado.com/
9
  * License: GNU/GPLv3 http://www.gnu.org/licenses/gpl-3.0.html
10
  */
@@ -100,6 +100,14 @@ function bwg_UploadHandler() {
100
  }
101
 
102
  function bwg_filemanager_ajax() {
 
 
 
 
 
 
 
 
103
  global $wpdb;
104
  require_once(WD_BWG_DIR . '/framework/WDWLibrary.php');
105
  $page = WDWLibrary::get('action');
@@ -119,6 +127,14 @@ function bwg_edit_tag() {
119
  }
120
 
121
  function bwg_ajax() {
 
 
 
 
 
 
 
 
122
  global $wpdb;
123
  require_once(WD_BWG_DIR . '/framework/WDWLibrary.php');
124
  $page = WDWLibrary::get('action');
@@ -398,7 +414,7 @@ function bwg_activate() {
398
  `author` bigint(20) NOT NULL,
399
  `published` tinyint(1) NOT NULL,
400
  PRIMARY KEY (`id`)
401
- ) ENGINE=MyISAM DEFAULT CHARSET=utf8;";
402
  $wpdb->query($bwg_gallery);
403
  $bwg_album = "CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "bwg_album` (
404
  `id` bigint(20) NOT NULL AUTO_INCREMENT,
@@ -411,7 +427,7 @@ function bwg_activate() {
411
  `author` bigint(20) NOT NULL,
412
  `published` tinyint(1) NOT NULL,
413
  PRIMARY KEY (`id`)
414
- ) ENGINE=MyISAM DEFAULT CHARSET=utf8;";
415
  $wpdb->query($bwg_album);
416
  $bwg_album_gallery = "CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "bwg_album_gallery` (
417
  `id` bigint(20) NOT NULL AUTO_INCREMENT,
@@ -420,7 +436,7 @@ function bwg_activate() {
420
  `alb_gal_id` bigint(20) NOT NULL,
421
  `order` bigint(20) NOT NULL,
422
  PRIMARY KEY (`id`)
423
- ) ENGINE=MyISAM DEFAULT CHARSET=utf8;";
424
  $wpdb->query($bwg_album_gallery);
425
  $bwg_image = "CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "bwg_image` (
426
  `id` bigint(20) NOT NULL AUTO_INCREMENT,
@@ -444,7 +460,7 @@ function bwg_activate() {
444
  `hit_count` bigint(20) NOT NULL,
445
  `redirect_url` varchar(255) NOT NULL,
446
  PRIMARY KEY (`id`)
447
- ) ENGINE=MyISAM DEFAULT CHARSET=utf8;";
448
  $wpdb->query($bwg_image);
449
  $bwg_image_tag = "CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "bwg_image_tag` (
450
  `id` bigint(20) NOT NULL AUTO_INCREMENT,
@@ -452,7 +468,7 @@ function bwg_activate() {
452
  `image_id` bigint(20) NOT NULL,
453
  `gallery_id` bigint(20) NOT NULL,
454
  PRIMARY KEY (`id`)
455
- ) ENGINE=MyISAM DEFAULT CHARSET=utf8;";
456
  $wpdb->query($bwg_image_tag);
457
  $bwg_option = "CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "bwg_option` (
458
  `id` bigint(20) NOT NULL AUTO_INCREMENT,
@@ -566,7 +582,7 @@ function bwg_activate() {
566
  `show_album_name` tinyint(1) NOT NULL,
567
  `show_image_counts` tinyint(1) NOT NULL,
568
  PRIMARY KEY (`id`)
569
- ) ENGINE=MyISAM DEFAULT CHARSET=utf8;";
570
  $wpdb->query($bwg_option);
571
  $bwg_theme = "CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "bwg_theme` (
572
  `id` bigint(20) NOT NULL AUTO_INCREMENT,
@@ -943,7 +959,7 @@ function bwg_activate() {
943
 
944
  `default_theme` tinyint(1) NOT NULL,
945
  PRIMARY KEY (`id`)
946
- ) ENGINE=MyISAM DEFAULT CHARSET=utf8;";
947
  $wpdb->query($bwg_theme);
948
  $bwg_image_comment = "CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "bwg_image_comment` (
949
  `id` bigint(20) NOT NULL AUTO_INCREMENT,
@@ -955,7 +971,7 @@ function bwg_activate() {
955
  `mail` mediumtext NOT NULL,
956
  `published` tinyint(1) NOT NULL,
957
  PRIMARY KEY (`id`)
958
- ) ENGINE=MyISAM DEFAULT CHARSET=utf8;";
959
  $wpdb->query($bwg_image_comment);
960
 
961
  $bwg_image_rate = "CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "bwg_image_rate` (
@@ -965,7 +981,7 @@ function bwg_activate() {
965
  `ip` varchar(64) NOT NULL,
966
  `date` varchar(64) NOT NULL,
967
  PRIMARY KEY (`id`)
968
- ) ENGINE=MyISAM DEFAULT CHARSET=utf8;";
969
  $wpdb->query($bwg_image_rate);
970
 
971
  $upload_dir = wp_upload_dir();
4
  * Plugin Name: Photo Gallery
5
  * Plugin URI: http://web-dorado.com/products/wordpress-photo-gallery-plugin.html
6
  * Description: This plugin is a fully responsive gallery plugin with advanced functionality. It allows having different image galleries for your posts and pages. You can create unlimited number of galleries, combine them into albums, and provide descriptions and tags.
7
+ * Version: 1.1.31
8
  * Author: http://web-dorado.com/
9
  * License: GNU/GPLv3 http://www.gnu.org/licenses/gpl-3.0.html
10
  */
100
  }
101
 
102
  function bwg_filemanager_ajax() {
103
+ if (function_exists('current_user_can')) {
104
+ if (!current_user_can('publish_posts')) {
105
+ die('Access Denied');
106
+ }
107
+ }
108
+ else {
109
+ die('Access Denied');
110
+ }
111
  global $wpdb;
112
  require_once(WD_BWG_DIR . '/framework/WDWLibrary.php');
113
  $page = WDWLibrary::get('action');
127
  }
128
 
129
  function bwg_ajax() {
130
+ if (function_exists('current_user_can')) {
131
+ if (!current_user_can('publish_posts')) {
132
+ die('Access Denied');
133
+ }
134
+ }
135
+ else {
136
+ die('Access Denied');
137
+ }
138
  global $wpdb;
139
  require_once(WD_BWG_DIR . '/framework/WDWLibrary.php');
140
  $page = WDWLibrary::get('action');
414
  `author` bigint(20) NOT NULL,
415
  `published` tinyint(1) NOT NULL,
416
  PRIMARY KEY (`id`)
417
+ ) DEFAULT CHARSET=utf8;";
418
  $wpdb->query($bwg_gallery);
419
  $bwg_album = "CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "bwg_album` (
420
  `id` bigint(20) NOT NULL AUTO_INCREMENT,
427
  `author` bigint(20) NOT NULL,
428
  `published` tinyint(1) NOT NULL,
429
  PRIMARY KEY (`id`)
430
+ ) DEFAULT CHARSET=utf8;";
431
  $wpdb->query($bwg_album);
432
  $bwg_album_gallery = "CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "bwg_album_gallery` (
433
  `id` bigint(20) NOT NULL AUTO_INCREMENT,
436
  `alb_gal_id` bigint(20) NOT NULL,
437
  `order` bigint(20) NOT NULL,
438
  PRIMARY KEY (`id`)
439
+ ) DEFAULT CHARSET=utf8;";
440
  $wpdb->query($bwg_album_gallery);
441
  $bwg_image = "CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "bwg_image` (
442
  `id` bigint(20) NOT NULL AUTO_INCREMENT,
460
  `hit_count` bigint(20) NOT NULL,
461
  `redirect_url` varchar(255) NOT NULL,
462
  PRIMARY KEY (`id`)
463
+ ) DEFAULT CHARSET=utf8;";
464
  $wpdb->query($bwg_image);
465
  $bwg_image_tag = "CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "bwg_image_tag` (
466
  `id` bigint(20) NOT NULL AUTO_INCREMENT,
468
  `image_id` bigint(20) NOT NULL,
469
  `gallery_id` bigint(20) NOT NULL,
470
  PRIMARY KEY (`id`)
471
+ ) DEFAULT CHARSET=utf8;";
472
  $wpdb->query($bwg_image_tag);
473
  $bwg_option = "CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "bwg_option` (
474
  `id` bigint(20) NOT NULL AUTO_INCREMENT,
582
  `show_album_name` tinyint(1) NOT NULL,
583
  `show_image_counts` tinyint(1) NOT NULL,
584
  PRIMARY KEY (`id`)
585
+ ) DEFAULT CHARSET=utf8;";
586
  $wpdb->query($bwg_option);
587
  $bwg_theme = "CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "bwg_theme` (
588
  `id` bigint(20) NOT NULL AUTO_INCREMENT,
959
 
960
  `default_theme` tinyint(1) NOT NULL,
961
  PRIMARY KEY (`id`)
962
+ ) DEFAULT CHARSET=utf8;";
963
  $wpdb->query($bwg_theme);
964
  $bwg_image_comment = "CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "bwg_image_comment` (
965
  `id` bigint(20) NOT NULL AUTO_INCREMENT,
971
  `mail` mediumtext NOT NULL,
972
  `published` tinyint(1) NOT NULL,
973
  PRIMARY KEY (`id`)
974
+ ) DEFAULT CHARSET=utf8;";
975
  $wpdb->query($bwg_image_comment);
976
 
977
  $bwg_image_rate = "CREATE TABLE IF NOT EXISTS `" . $wpdb->prefix . "bwg_image_rate` (
981
  `ip` varchar(64) NOT NULL,
982
  `date` varchar(64) NOT NULL,
983
  PRIMARY KEY (`id`)
984
+ ) DEFAULT CHARSET=utf8;";
985
  $wpdb->query($bwg_image_rate);
986
 
987
  $upload_dir = wp_upload_dir();
readme.txt CHANGED
@@ -3,8 +3,8 @@ Contributors: webdorado
3
  Donate link: http://web-dorado.com/products/wordpress-photo-gallery-plugin.html
4
  Tags: photo, photo gallery, image gallery, video gallery, gallery, galleries, wordpress gallery plugin, images gallery, album, photo albums, simple gallery, best gallery plugin, free photo gallery, wp gallery, wordpress gallery, website gallery, gallery shortcode, best gallery, picture, pictures, gallery slider, photo album, photogallery, widget gallery, image, images, photos, gallery lightbox, photoset, wordpress photo gallery plugin, wp gallery plugins, responsive wordpress photo gallery, media, image album, filterable gallery, banner rotator, fullscreen gallery, fotogalerie, galleria, galerie, galeri
5
  Requires at least: 3.0
6
- Tested up to: 3.9
7
- Stable tag: 1.1.30
8
  License: GPLv2 or later
9
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
10
 
@@ -14,7 +14,7 @@ Photo Gallery is an advanced plugin with a list of tools and options for adding
14
 
15
  https://www.youtube.com/watch?v=4Mxg0FsFZZE&index=5&list=PLnxWPiY5tLFUsFI67acGEPAqoDMZqss5F
16
 
17
- ### [WordPress Photo Gallery](http://web-dorado.com/products/wordpress-photo-gallery-plugin.html)
18
  [Demo](http://wpdemo.web-dorado.com/gallery/)
19
  [Demo Admin](http://wpdemo.web-dorado.com/wp-admin/admin.php?page=galleries_bwg)
20
  [User Manual](http://web-dorado.com/wordpress-gallery-guide-step-1.html)
3
  Donate link: http://web-dorado.com/products/wordpress-photo-gallery-plugin.html
4
  Tags: photo, photo gallery, image gallery, video gallery, gallery, galleries, wordpress gallery plugin, images gallery, album, photo albums, simple gallery, best gallery plugin, free photo gallery, wp gallery, wordpress gallery, website gallery, gallery shortcode, best gallery, picture, pictures, gallery slider, photo album, photogallery, widget gallery, image, images, photos, gallery lightbox, photoset, wordpress photo gallery plugin, wp gallery plugins, responsive wordpress photo gallery, media, image album, filterable gallery, banner rotator, fullscreen gallery, fotogalerie, galleria, galerie, galeri
5
  Requires at least: 3.0
6
+ Tested up to: 4.0
7
+ Stable tag: 1.1.31
8
  License: GPLv2 or later
9
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
10
 
14
 
15
  https://www.youtube.com/watch?v=4Mxg0FsFZZE&index=5&list=PLnxWPiY5tLFUsFI67acGEPAqoDMZqss5F
16
 
17
+ [WordPress Photo Gallery](http://web-dorado.com/products/wordpress-photo-gallery-plugin.html)
18
  [Demo](http://wpdemo.web-dorado.com/gallery/)
19
  [Demo Admin](http://wpdemo.web-dorado.com/wp-admin/admin.php?page=galleries_bwg)
20
  [User Manual](http://web-dorado.com/wordpress-gallery-guide-step-1.html)
update/bwg_update.php CHANGED
@@ -74,7 +74,7 @@ function bwg_update($version) {
74
  `ip` varchar(64) NOT NULL,
75
  `date` varchar(64) NOT NULL,
76
  PRIMARY KEY (`id`)
77
- ) ENGINE=MyISAM DEFAULT CHARSET=utf8;";
78
  $wpdb->query($bwg_image_rate);
79
  // Add average rating, rating count, hit counter to image table.
80
  $wpdb->query("ALTER TABLE " . $wpdb->prefix . "bwg_image ADD `avg_rating` float(20) NOT NULL DEFAULT 0");
74
  `ip` varchar(64) NOT NULL,
75
  `date` varchar(64) NOT NULL,
76
  PRIMARY KEY (`id`)
77
+ ) DEFAULT CHARSET=utf8;";
78
  $wpdb->query($bwg_image_rate);
79
  // Add average rating, rating count, hit counter to image table.
80
  $wpdb->query("ALTER TABLE " . $wpdb->prefix . "bwg_image ADD `avg_rating` float(20) NOT NULL DEFAULT 0");