PowerPress Podcasting plugin by Blubrry - Version 8.6.2

Version Description

  • Released 05/10/2021
  • Bugfixes in Blubrry uploader, network subscribe widget, and channel CSS
  • Fixed a vulnerability in the PowerPress Settings section
Download this release

Release Info

Developer benbeecroft
Plugin Icon 128x128 PowerPress Podcasting plugin by Blubrry
Version 8.6.2
Comparing to
See all releases

Code changes from version 8.6.1 to 8.6.2

Files changed (6) hide show
  1. powerpress.php +2 -2
  2. powerpressadmin-basic.php +2 -2
  3. powerpressadmin-editfeed.php +15 -15
  4. powerpressadmin-jquery.php +6 -2
  5. readme.txt +6 -1
  6. shortcodes/views/program-result.php +22 -11
powerpress.php CHANGED
@@ -3,7 +3,7 @@
3
  Plugin Name: Blubrry PowerPress
4
  Plugin URI: http://create.blubrry.com/resources/powerpress/
5
  Description: <a href="https://create.blubrry.com/resources/powerpress/" target="_blank">Blubrry PowerPress</a> is the No. 1 Podcasting plugin for WordPress. Developed by podcasters for podcasters; features include Simple and Advanced modes, multiple audio/video player options, subscribe to podcast tools, podcast SEO features, and more! Fully supports Apple Podcasts (previously iTunes), Google Podcasts, Spotify, Stitcher, and Blubrry Podcasting directories, as well as all podcast applications and clients.
6
- Version: 8.6.1
7
  Author: Blubrry
8
  Author URI: https://blubrry.com/
9
  Requires at least: 3.6
@@ -36,7 +36,7 @@ if( !function_exists('add_action') ) {
36
 
37
  // WP_PLUGIN_DIR (REMEMBER TO USE THIS DEFINE IF NEEDED)
38
 
39
- define('POWERPRESS_VERSION', '8.6.1' );
40
 
41
  // Translation support:
42
  if ( !defined('POWERPRESS_ABSPATH') )
3
  Plugin Name: Blubrry PowerPress
4
  Plugin URI: http://create.blubrry.com/resources/powerpress/
5
  Description: <a href="https://create.blubrry.com/resources/powerpress/" target="_blank">Blubrry PowerPress</a> is the No. 1 Podcasting plugin for WordPress. Developed by podcasters for podcasters; features include Simple and Advanced modes, multiple audio/video player options, subscribe to podcast tools, podcast SEO features, and more! Fully supports Apple Podcasts (previously iTunes), Google Podcasts, Spotify, Stitcher, and Blubrry Podcasting directories, as well as all podcast applications and clients.
6
+ Version: 8.6.2
7
  Author: Blubrry
8
  Author URI: https://blubrry.com/
9
  Requires at least: 3.6
36
 
37
  // WP_PLUGIN_DIR (REMEMBER TO USE THIS DEFINE IF NEEDED)
38
 
39
+ define('POWERPRESS_VERSION', '8.6.2' );
40
 
41
  // Translation support:
42
  if ( !defined('POWERPRESS_ABSPATH') )
powerpressadmin-basic.php CHANGED
@@ -141,8 +141,8 @@ jQuery(document).ready(function($) {
141
  <input type="hidden" name="General[pp-gen-settings-tabs]" value="1" />
142
  <input type="hidden" name="PlayerSettings[pp-gen-settings-tabs]" value="1" />
143
 
144
- <input type="hidden" id="save_tab_pos" name="tab" value="<?php echo (empty($_POST['tab']) ? "settings-welcome" : $_POST['tab']); ?>" />
145
- <input type="hidden" id="save_sidenav_pos" name="sidenav-tab" value="<?php echo (empty($_POST['sidenav-tab']) ? "" : $_POST['sidenav-tab']); ?>" />
146
 
147
  <div id="powerpress_admin_header">
148
  <h2><?php echo __('Blubrry PowerPress Settings', 'powerpress'); ?></h2>
141
  <input type="hidden" name="General[pp-gen-settings-tabs]" value="1" />
142
  <input type="hidden" name="PlayerSettings[pp-gen-settings-tabs]" value="1" />
143
 
144
+ <input type="hidden" id="save_tab_pos" name="tab" value="<?php echo (empty($_POST['tab']) ? "settings-welcome" : esc_attr($_POST['tab'])); ?>" />
145
+ <input type="hidden" id="save_sidenav_pos" name="sidenav-tab" value="<?php echo (empty($_POST['sidenav-tab']) ? "" : esc_attr($_POST['sidenav-tab'])); ?>" />
146
 
147
  <div id="powerpress_admin_header">
148
  <h2><?php echo __('Blubrry PowerPress Settings', 'powerpress'); ?></h2>
powerpressadmin-editfeed.php CHANGED
@@ -304,6 +304,7 @@ function powerpress_admin_editfeed($type='', $type_value = '', $feed_slug = fals
304
  <div class="pp-sidenav-extra"><a href="https://www.blubrry.com/support/" class="pp-sidenav-extra-text"><?php echo htmlspecialchars(__('POWERPRESS DOCUMENTATION', 'powerpress')); ?></a></div>
305
  <div class="pp-sidenav-extra"><a href="https://www.blubrry.com/podcast-insider/" class="pp-sidenav-extra-text"><?php echo htmlspecialchars(__('PODCAST INSIDER BLOG', 'powerpress')); ?></a></div>
306
  </div>
 
307
  <button style="display: none;" id="welcome-default-open" class="pp-sidenav-tablinks active" onclick="sideNav(event, 'welcome-all')"><img class="pp-nav-icon" style="width: 22px;" alt="" src="<?php echo powerpress_get_root_url(); ?>images/settings_nav_icons/rss-symbol.svg"><?php echo htmlspecialchars(__('Hidden button', 'powerpress')); ?></button>
308
  <div id="welcome-all" class="pp-sidenav-tab active">
309
  <?php powerpressadmin_welcome($General, $FeedSettings, $NewPostQueryString); ?>
@@ -427,26 +428,25 @@ function powerpress_admin_editfeed($type='', $type_value = '', $feed_slug = fals
427
  </div>
428
 
429
  <div id="settings-other" class="pp-tabcontent">
430
- <div class="pp-sidenav-toggle-container">
431
- <div id="other-toggle-sidenav" class="toggle-sidenav" title="Blubrry Services" onclick="powerpress_displaySideNav(this);">&lt;</div>
432
- <div class="pp-sidenav">
 
 
 
 
 
 
 
 
 
433
  <?php
434
- powerpressadmin_edit_blubrry_services($General);
 
435
  ?>
436
- <div class="pp-sidenav-extra" style="margin-top: 10%;"><a href="https://www.blubrry.com/support/" class="pp-sidenav-extra-text"><?php echo htmlspecialchars(__('POWERPRESS DOCUMENTATION', 'powerpress')); ?></a></div>
437
- <div class="pp-sidenav-extra"><a href="https://www.blubrry.com/podcast-insider/" class="pp-sidenav-extra-text"><?php echo htmlspecialchars(__('PODCAST INSIDER BLOG', 'powerpress')); ?></a></div>
438
  </div>
439
  </div>
440
- <button style="display: none;" id="other-default-open" class="pp-sidenav-tablinks active" onclick="sideNav(event, 'other-all')"><img class="pp-nav-icon" style="width: 22px;" alt="" src="<?php echo powerpress_get_root_url(); ?>images/settings_nav_icons/rss-symbol.svg"><?php echo htmlspecialchars(__('Hidden button', 'powerpress')); ?></button>
441
- <div id="other-all" class="pp-sidenav-tab active">
442
- <?php
443
- powerpressadmin_settings_tab_other($General, $FeedSettings, $feed_slug, $cat_ID, $FeedAttribs);
444
- powerpress_settings_tab_footer();
445
- ?>
446
- </div>
447
- </div>
448
 
449
- </div>
450
  <div class="clear"></div>
451
 
452
  <div class="clear"></div>
304
  <div class="pp-sidenav-extra"><a href="https://www.blubrry.com/support/" class="pp-sidenav-extra-text"><?php echo htmlspecialchars(__('POWERPRESS DOCUMENTATION', 'powerpress')); ?></a></div>
305
  <div class="pp-sidenav-extra"><a href="https://www.blubrry.com/podcast-insider/" class="pp-sidenav-extra-text"><?php echo htmlspecialchars(__('PODCAST INSIDER BLOG', 'powerpress')); ?></a></div>
306
  </div>
307
+ </div>
308
  <button style="display: none;" id="welcome-default-open" class="pp-sidenav-tablinks active" onclick="sideNav(event, 'welcome-all')"><img class="pp-nav-icon" style="width: 22px;" alt="" src="<?php echo powerpress_get_root_url(); ?>images/settings_nav_icons/rss-symbol.svg"><?php echo htmlspecialchars(__('Hidden button', 'powerpress')); ?></button>
309
  <div id="welcome-all" class="pp-sidenav-tab active">
310
  <?php powerpressadmin_welcome($General, $FeedSettings, $NewPostQueryString); ?>
428
  </div>
429
 
430
  <div id="settings-other" class="pp-tabcontent">
431
+ <div class="pp-sidenav-toggle-container">
432
+ <div id="other-toggle-sidenav" class="toggle-sidenav" title="Blubrry Services" onclick="powerpress_displaySideNav(this);">&lt;</div>
433
+ <div class="pp-sidenav">
434
+ <?php
435
+ powerpressadmin_edit_blubrry_services($General);
436
+ ?>
437
+ <div class="pp-sidenav-extra" style="margin-top: 10%;"><a href="https://www.blubrry.com/support/" class="pp-sidenav-extra-text"><?php echo htmlspecialchars(__('POWERPRESS DOCUMENTATION', 'powerpress')); ?></a></div>
438
+ <div class="pp-sidenav-extra"><a href="https://www.blubrry.com/podcast-insider/" class="pp-sidenav-extra-text"><?php echo htmlspecialchars(__('PODCAST INSIDER BLOG', 'powerpress')); ?></a></div>
439
+ </div>
440
+ </div>
441
+ <button style="display: none;" id="other-default-open" class="pp-sidenav-tablinks active" onclick="sideNav(event, 'other-all')"><img class="pp-nav-icon" style="width: 22px;" alt="" src="<?php echo powerpress_get_root_url(); ?>images/settings_nav_icons/rss-symbol.svg"><?php echo htmlspecialchars(__('Hidden button', 'powerpress')); ?></button>
442
+ <div id="other-all" class="pp-sidenav-tab active">
443
  <?php
444
+ powerpressadmin_settings_tab_other($General, $FeedSettings, $feed_slug, $cat_ID, $FeedAttribs);
445
+ powerpress_settings_tab_footer();
446
  ?>
 
 
447
  </div>
448
  </div>
 
 
 
 
 
 
 
 
449
 
 
450
  <div class="clear"></div>
451
 
452
  <div class="clear"></div>
powerpressadmin-jquery.php CHANGED
@@ -284,11 +284,15 @@ window.addEventListener('message', function(event) {
284
  <?php
285
  if (defined('POWERPRESS_BLUBRRY_API_URL')) {
286
  $desired_origin = str_replace('api', 'publish', rtrim(POWERPRESS_BLUBRRY_API_URL, '/'));
 
 
287
  } else {
288
- $desired_origin = 'https://publish.blubrry.com';
289
  }
290
  ?>
291
- if(event.origin === '<?php echo $desired_origin; ?>')
 
 
292
  {
293
  if (event.data.message.includes("FILE: ")) {
294
  let file = event.data.message.replace("FILE: ", "");
284
  <?php
285
  if (defined('POWERPRESS_BLUBRRY_API_URL')) {
286
  $desired_origin = str_replace('api', 'publish', rtrim(POWERPRESS_BLUBRRY_API_URL, '/'));
287
+ $desired_origin = str_replace('https://', '', $desired_origin);
288
+ $desired_origin = str_replace('http://', '', $desired_origin);
289
  } else {
290
+ $desired_origin = 'publish.blubrry.com';
291
  }
292
  ?>
293
+ let event_origin_host = event.origin.replace('https://', '');
294
+ event_origin_host = event_origin_host.replace('http://', '');
295
+ if(event_origin_host === '<?php echo $desired_origin; ?>')
296
  {
297
  if (event.data.message.includes("FILE: ")) {
298
  let file = event.data.message.replace("FILE: ", "");
readme.txt CHANGED
@@ -4,7 +4,7 @@ Tags: podcasting, podcast, podcaster, powerpress, itunes, apple, apple podcasts,
4
  Requires at least: 3.6
5
  Requires PHP: 5.2
6
  Tested up to: 5.7
7
- Stable tag: 8.6.1
8
  Donate link: https://create.blubrry.com/resources/podcast-media-hosting/
9
  License: GPLv2 or later
10
 
@@ -184,6 +184,11 @@ If you are a fan of PowerPress, we would greatly appreciate it if you could take
184
 
185
  == Changelog ==
186
 
 
 
 
 
 
187
  = 8.6.1 =
188
  * Released 05/04/2021
189
  * Fixed a bug related to the stats data cache
4
  Requires at least: 3.6
5
  Requires PHP: 5.2
6
  Tested up to: 5.7
7
+ Stable tag: 8.6.2
8
  Donate link: https://create.blubrry.com/resources/podcast-media-hosting/
9
  License: GPLv2 or later
10
 
184
 
185
  == Changelog ==
186
 
187
+ = 8.6.2 =
188
+ * Released 05/10/2021
189
+ * Bugfixes in Blubrry uploader, network subscribe widget, and channel CSS
190
+ * Fixed a vulnerability in the PowerPress Settings section
191
+
192
  = 8.6.1 =
193
  * Released 05/04/2021
194
  * Fixed a bug related to the stats data cache
shortcodes/views/program-result.php CHANGED
@@ -89,23 +89,34 @@
89
  'modern_style'=>$props['ssb-shape']=="square"?"-sq":"" ,
90
  'modern_direction'=>'horizontal',
91
  'itunes_url'=>esc_url($props['subscribe_itunes'] ? $props['subscribe_itunes'] : $props['program_itunesurl']),
92
- 'subscribe_feature_email'=>true,
93
- 'subscribe_feature_gp'=>true,
94
- 'subscribe_feature_stitcher'=>true,
 
95
  'stitcher_url'=>esc_url($props['subscribe_stitcher']),
96
- 'subscribe_feature_tunein'=>true,
97
  'tunein_url'=>esc_url($props['subscribe_tunein']),
98
- 'subscribe_feature_spotify'=>true,
99
  'spotify_url'=>esc_url($props['subscribe_spotify']), //TODO make program meta have this value
100
- 'subscribe_feature_iheart'=>false,
101
  'iheart_url'=>esc_url($props['subscribe_iheart']), //For future use
102
- 'subscribe_feature_deezer'=>false,
103
  'deezer_url'=>esc_url($props['subscribe_deezer']), //For future use
104
- 'subscribe_feature_radio_com'=>false,
105
- 'radio_com_url'=>esc_url($props['subscribe_radio_com']), //For future use
106
- 'subscribe_feature_pandora'=>false,
 
 
 
 
 
 
 
 
 
 
107
  'pandora_url'=>esc_url($props['subscribe_pandora']), //For future use
108
- 'subscribe_feature_rss'=>true,
109
  'subscribe_page_url'=>esc_url($props['subscribe_html'])
110
  ]) ?>
111
  </div>
89
  'modern_style'=>$props['ssb-shape']=="square"?"-sq":"" ,
90
  'modern_direction'=>'horizontal',
91
  'itunes_url'=>esc_url($props['subscribe_itunes'] ? $props['subscribe_itunes'] : $props['program_itunesurl']),
92
+ 'subscribe_feature_email_sidebar'=>true,
93
+ 'subscribe_feature_android_sidebar'=>true,
94
+ 'subscribe_feature_gp_sidebar'=>true,
95
+ 'subscribe_feature_stitcher_sidebar'=>true,
96
  'stitcher_url'=>esc_url($props['subscribe_stitcher']),
97
+ 'subscribe_feature_tunein_sidebar'=>true,
98
  'tunein_url'=>esc_url($props['subscribe_tunein']),
99
+ 'subscribe_feature_spotify_sidebar'=>true,
100
  'spotify_url'=>esc_url($props['subscribe_spotify']), //TODO make program meta have this value
101
+ 'subscribe_feature_iheart_sidebar'=>false,
102
  'iheart_url'=>esc_url($props['subscribe_iheart']), //For future use
103
+ 'subscribe_feature_deezer_sidebar'=>false,
104
  'deezer_url'=>esc_url($props['subscribe_deezer']), //For future use
105
+ 'subscribe_feature_blubrry_sidebar'=>false,
106
+ 'blubrry_url'=>esc_url($props['subscribe_blubrry']), //For future use
107
+ 'subscribe_feature_podchaser_sidebar'=>false,
108
+ 'podchaser_url'=>esc_url($props['subscribe_podchaser']), //For future use
109
+ 'subscribe_feature_jiosaavn_sidebar'=>false,
110
+ 'jiosaavn_url'=>esc_url($props['subscribe_jiosaavn']), //For future use
111
+ 'subscribe_feature_gaana_sidebar'=>false,
112
+ 'gaana_url'=>esc_url($props['subscribe_gaana']), //For future use
113
+ 'subscribe_feature_pcindex_sidebar'=>false,
114
+ 'pcindex_url'=>esc_url($props['subscribe_pcindex']), //For future use
115
+ 'subscribe_feature_amazon_sidebar'=>false,
116
+ 'amazon_url'=>esc_url($props['subscribe_amazon_music']), //For future use
117
+ 'subscribe_feature_pandora_sidebar'=>false,
118
  'pandora_url'=>esc_url($props['subscribe_pandora']), //For future use
119
+ 'subscribe_feature_rss_sidebar'=>true,
120
  'subscribe_page_url'=>esc_url($props['subscribe_html'])
121
  ]) ?>
122
  </div>