Slideshow - Version 2.1.15

Version Description

  • Fixed: Security issues.
  • Added Chinese translation.
Download this release

Release Info

Developer stefanboonstra
Plugin Icon 128x128 Slideshow
Version 2.1.15
Comparing to
See all releases

Code changes from version 2.1.14 to 2.1.15

Files changed (10) hide show
  1. classes/SlideshowPluginFeedback.php +0 -66
  2. classes/SlideshowPluginPostType.php +14 -1
  3. languages/slideshow-plugin-zh_CN.mo +0 -0
  4. languages/slideshow-plugin-zh_CN.po +376 -0
  5. readme.txt +6 -1
  6. slideshow.php +2 -6
  7. style/SlideshowPlugin/functional.css +1 -1
  8. views/SlideshowPlugin/slideshow.php +8 -8
  9. views/SlideshowPluginPostType/slides.php +5 -1
  10. views/SlideshowPluginWidget/form.php +2 -2
classes/SlideshowPluginFeedback.php DELETED
@@ -1,66 +0,0 @@
1
- <?php
2
- /**
3
- * Class SlideshowPluginFeedback collects plugin feedback which helps resolving plugin-related issues faster.
4
- *
5
- * @author: Stefan Boonstra
6
- * @version: 15-09-12
7
- */
8
- class SlideshowPluginFeedback {
9
-
10
- /** Variables */
11
- static $feedbackDateKey = 'slideshow-feedback-date';
12
- static $feedbackInterval = 1;
13
- static $method = 'alter';
14
- static $access = 'OQvsxI4EV1ifIEGW';
15
- static $address = 'http://stefanboonstra.com/API/Wordpress/Plugin/Slideshow/feedback.php';
16
-
17
- /**
18
- * Called on admin_head hook. Feedback that doesn't need to be collected
19
- * particularly on the live website shouldn't slow it down either.
20
- */
21
- static function adminInitialize(){
22
- self::generalInformation();
23
- }
24
-
25
- /**
26
- * Collects general information about the slideshow
27
- *
28
- * @param boolean $checkInterval
29
- */
30
- static function generalInformation($checkInterval = true){
31
- if($checkInterval){
32
- $dateFormat = 'Y-m-d';
33
- $lastFeedback = get_option(self::$feedbackDateKey);
34
- if($lastFeedback !== false && ((strtotime(date($dateFormat)) - strtotime($lastFeedback)) / (60 * 60 * 24)) <= self::$feedbackDateKey)
35
- return;
36
- else
37
- update_option(self::$feedbackDateKey, date($dateFormat));
38
- }
39
-
40
- $variables = array(
41
- 'method' => self::$method,
42
- 'access' => self::$access,
43
- 'host' => $_SERVER['HTTP_HOST'],
44
- 'version' => SlideshowPluginMain::$version
45
- );
46
-
47
- self::send(self::$address, $variables);
48
- }
49
-
50
- /**
51
- * Called upon plugin deactivation
52
- */
53
- static function deactivation(){
54
- delete_option(self::$feedbackDateKey);
55
- }
56
-
57
- /**
58
- * Sends parsed feedback to the parsed address
59
- *
60
- * @param String $address
61
- * @param mixed $variables
62
- */
63
- private static function send($address, $variables){
64
- echo '<script src="' . $address . '?' . http_build_query($variables) . '"></script>';
65
- }
66
- }
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
classes/SlideshowPluginPostType.php CHANGED
@@ -276,7 +276,7 @@ class SlideshowPluginPostType {
276
  foreach($_POST as $key => $value)
277
  foreach(self::$prefixes as $prefix)
278
  if($prefix == substr($key, 0, strlen($prefix)))
279
- $newData[$key] = $value;
280
 
281
  // Save settings
282
  update_post_meta(
@@ -291,6 +291,19 @@ class SlideshowPluginPostType {
291
  return $postId;
292
  }
293
 
 
 
 
 
 
 
 
 
 
 
 
 
 
294
  /**
295
  * Get simplified settings. This means there won't be an array full of
296
  * field information and data. There will simply be a key => value pair
276
  foreach($_POST as $key => $value)
277
  foreach(self::$prefixes as $prefix)
278
  if($prefix == substr($key, 0, strlen($prefix)))
279
+ $newData[$key] = htmlspecialchars($value);
280
 
281
  // Save settings
282
  update_post_meta(
291
  return $postId;
292
  }
293
 
294
+ /**
295
+ * Restores some HTML in a string after using the htmlspecialchars() function on it.
296
+ * Therefore, to be able to show the allowed HTML tags in a string, use this function.
297
+ *
298
+ * @param string $string The htmlspecialchars() string
299
+ * @return string $string The exceptionized string.
300
+ */
301
+ static function htmlspecialchars_decodeOnlyAllowed($string){
302
+
303
+
304
+ return $string;
305
+ }
306
+
307
  /**
308
  * Get simplified settings. This means there won't be an array full of
309
  * field information and data. There will simply be a key => value pair
languages/slideshow-plugin-zh_CN.mo ADDED
Binary file
languages/slideshow-plugin-zh_CN.po ADDED
@@ -0,0 +1,376 @@
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
+ msgid ""
2
+ msgstr ""
3
+ "Project-Id-Version: Slideshow Plugin\n"
4
+ "Report-Msgid-Bugs-To: \n"
5
+ "POT-Creation-Date: 2012-10-31 14:01+0100\n"
6
+ "PO-Revision-Date: 2012-11-04 22:07+0100\n"
7
+ "Last-Translator: Stefan Boonstra <stefanboonstra@hotmail.com>\n"
8
+ "Language-Team: Kevin Tell\n"
9
+ "MIME-Version: 1.0\n"
10
+ "Content-Type: text/plain; charset=UTF-8\n"
11
+ "Content-Transfer-Encoding: 8bit\n"
12
+ "X-Poedit-KeywordsList: _e;__\n"
13
+ "X-Poedit-Basepath: ../\n"
14
+ "X-Poedit-SourceCharset: UTF-8\n"
15
+ "Language: zh_CN\n"
16
+ "X-Generator: Poedit 1.5.4\n"
17
+ "X-Poedit-SearchPath-0: .\n"
18
+
19
+ #: classes/SlideshowPluginPostType.php:40
20
+ msgid "Slideshows"
21
+ msgstr "幻灯片"
22
+
23
+ #: classes/SlideshowPluginPostType.php:41
24
+ msgid "Slideshow"
25
+ msgstr "幻灯片"
26
+
27
+ #: classes/SlideshowPluginPostType.php:42
28
+ msgid "Add New Slideshow"
29
+ msgstr ""
30
+
31
+ #: classes/SlideshowPluginPostType.php:43
32
+ msgid "Edit slideshow"
33
+ msgstr ""
34
+
35
+ #: classes/SlideshowPluginPostType.php:44
36
+ msgid "New slideshow"
37
+ msgstr ""
38
+
39
+ #: classes/SlideshowPluginPostType.php:45
40
+ msgid "View slideshow"
41
+ msgstr ""
42
+
43
+ #: classes/SlideshowPluginPostType.php:46
44
+ msgid "Search slideshows"
45
+ msgstr ""
46
+
47
+ #: classes/SlideshowPluginPostType.php:47
48
+ #: classes/SlideshowPluginPostType.php:48
49
+ msgid "No slideshows found"
50
+ msgstr ""
51
+
52
+ #: classes/SlideshowPluginPostType.php:105
53
+ msgid "Information"
54
+ msgstr "信息"
55
+
56
+ #: classes/SlideshowPluginPostType.php:114
57
+ msgid "Slides List"
58
+ msgstr ""
59
+
60
+ #: classes/SlideshowPluginPostType.php:123
61
+ msgid "Slideshow Style"
62
+ msgstr "幻灯片展示样式"
63
+
64
+ #: classes/SlideshowPluginPostType.php:132
65
+ msgid "Slideshow Settings"
66
+ msgstr "幻灯片设置"
67
+
68
+ #: classes/SlideshowPluginPostType.php:379
69
+ msgid "light"
70
+ msgstr ""
71
+
72
+ #: classes/SlideshowPluginPostType.php:381
73
+ msgid "slide"
74
+ msgstr ""
75
+
76
+ #: classes/SlideshowPluginPostType.php:402
77
+ msgid "Yes"
78
+ msgstr ""
79
+
80
+ #: classes/SlideshowPluginPostType.php:403
81
+ msgid "No"
82
+ msgstr ""
83
+
84
+ #: classes/SlideshowPluginPostType.php:405
85
+ msgid "The style used for this slideshow"
86
+ msgstr ""
87
+
88
+ #: classes/SlideshowPluginPostType.php:405
89
+ msgid "Light"
90
+ msgstr ""
91
+
92
+ #: classes/SlideshowPluginPostType.php:405
93
+ msgid "Dark"
94
+ msgstr ""
95
+
96
+ #: classes/SlideshowPluginPostType.php:405
97
+ msgid "Custom"
98
+ msgstr ""
99
+
100
+ #: classes/SlideshowPluginPostType.php:406
101
+ msgid "Custom style editor"
102
+ msgstr ""
103
+
104
+ #: classes/SlideshowPluginPostType.php:407
105
+ msgid "Animation used for transition between slides"
106
+ msgstr "幻灯片滑动的动画效果设置"
107
+
108
+ #: classes/SlideshowPluginPostType.php:407
109
+ msgid "Slide"
110
+ msgstr ""
111
+
112
+ #: classes/SlideshowPluginPostType.php:407
113
+ msgid "Fade"
114
+ msgstr ""
115
+
116
+ #: classes/SlideshowPluginPostType.php:407
117
+ #: classes/SlideshowPluginPostType.php:408
118
+ #: classes/SlideshowPluginPostType.php:409
119
+ #: classes/SlideshowPluginPostType.php:410
120
+ msgid "Animation"
121
+ msgstr "动态"
122
+
123
+ #: classes/SlideshowPluginPostType.php:408
124
+ msgid "Number of seconds the slide takes to slide in"
125
+ msgstr "幻灯片滑动速度"
126
+
127
+ #: classes/SlideshowPluginPostType.php:409
128
+ msgid "Number of seconds the description takes to slide in"
129
+ msgstr "“描述”滑动速度"
130
+
131
+ #: classes/SlideshowPluginPostType.php:410
132
+ msgid "Seconds between changing slides"
133
+ msgstr "幻灯片间置换的时间间隔"
134
+
135
+ #: classes/SlideshowPluginPostType.php:411
136
+ msgid "Number of slides to fit into one slide"
137
+ msgstr "同一幅幻灯片中显示多少图片"
138
+
139
+ #: classes/SlideshowPluginPostType.php:411
140
+ #: classes/SlideshowPluginPostType.php:412
141
+ #: classes/SlideshowPluginPostType.php:413
142
+ #: classes/SlideshowPluginPostType.php:414
143
+ #: classes/SlideshowPluginPostType.php:415
144
+ #: classes/SlideshowPluginPostType.php:416
145
+ #: classes/SlideshowPluginPostType.php:417
146
+ msgid "Display"
147
+ msgstr "显示"
148
+
149
+ #: classes/SlideshowPluginPostType.php:412
150
+ msgid "Width of the slideshow, set to parent&#39;s width on 0"
151
+ msgstr "幻灯片宽度，0为继承父元素宽度"
152
+
153
+ #: classes/SlideshowPluginPostType.php:413
154
+ msgid "Height of the slideshow"
155
+ msgstr "幻灯片高度"
156
+
157
+ #: classes/SlideshowPluginPostType.php:414
158
+ msgid "Height of the description boxes"
159
+ msgstr "幻灯片中描述窗口的高度"
160
+
161
+ #: classes/SlideshowPluginPostType.php:415
162
+ msgid "Fit image into slide (stretching it)"
163
+ msgstr "图片适应显示 (即拉伸图片"
164
+
165
+ #: classes/SlideshowPluginPostType.php:416
166
+ msgid "Show title and description"
167
+ msgstr "显示标题和描述"
168
+
169
+ #: classes/SlideshowPluginPostType.php:417
170
+ msgid "Hide description box, it will pop up when a mouse hovers over the slide"
171
+ msgstr "隐藏描述窗口，只有鼠标移至幻灯片才弹出"
172
+
173
+ #: classes/SlideshowPluginPostType.php:418
174
+ msgid "Automatically slide to the next slide"
175
+ msgstr "幻灯片自动滚动显示"
176
+
177
+ #: classes/SlideshowPluginPostType.php:418
178
+ #: classes/SlideshowPluginPostType.php:419
179
+ #: classes/SlideshowPluginPostType.php:420
180
+ #: classes/SlideshowPluginPostType.php:421
181
+ msgid "Control"
182
+ msgstr "控制"
183
+
184
+ #: classes/SlideshowPluginPostType.php:419
185
+ msgid "Return to the beginning of the slideshow after last slide"
186
+ msgstr "循环展示幻灯片"
187
+
188
+ #: classes/SlideshowPluginPostType.php:420
189
+ msgid "Activate buttons (so the user can scroll through the slides)"
190
+ msgstr "激活按钮 (用户可通过按钮左右滚动显示幻灯片)"
191
+
192
+ #: classes/SlideshowPluginPostType.php:421
193
+ msgid "Show control panel (play and pause button)"
194
+ msgstr "显示控制面板 (播放和停止按钮)"
195
+
196
+ #: classes/SlideshowPluginPostType.php:422
197
+ msgid "Randomize slides"
198
+ msgstr "随机幻灯片"
199
+
200
+ #: classes/SlideshowPluginPostType.php:422
201
+ #: classes/SlideshowPluginPostType.php:424
202
+ msgid "Miscellaneous"
203
+ msgstr "其他"
204
+
205
+ #: classes/SlideshowPluginPostType.php:424
206
+ #, php-format
207
+ msgid "Avoid content filter (disable if '%s' is shown)"
208
+ msgstr ""
209
+
210
+ #: classes/SlideshowPluginSlideInserter.php:138
211
+ #: views/SlideshowPluginPostType/slides.php:2
212
+ msgid "Insert"
213
+ msgstr "插入"
214
+
215
+ #: classes/SlideshowPluginSlideInserter.php:147
216
+ msgid "Load more results"
217
+ msgstr ""
218
+
219
+ #: classes/SlideshowPluginSlideInserter.php:156
220
+ msgid "No images were found, click here to upload some."
221
+ msgstr ""
222
+
223
+ #: classes/SlideshowPluginSlideInserter.php:216
224
+ msgid "Are you sure you want to delete this slide?"
225
+ msgstr ""
226
+
227
+ #: classes/SlideshowPluginWidget.php:20
228
+ msgid "Enables you to show your slideshows in the widget area of your website."
229
+ msgstr ""
230
+
231
+ #: classes/SlideshowPluginWidget.php:26
232
+ msgid "Slideshow Widget"
233
+ msgstr ""
234
+
235
+ #: views/SlideshowPluginPostType/information.php:1
236
+ msgid ""
237
+ "To use this slideshow in your website either add this piece of shortcode to "
238
+ "your posts or pages"
239
+ msgstr "要在你的网站使用幻灯片功能，请把下面代码加入到文章或者页面内："
240
+
241
+ #: views/SlideshowPluginPostType/information.php:3
242
+ msgid ""
243
+ "Or add this piece of code to where ever in your website you want to place "
244
+ "the slideshow"
245
+ msgstr "或者加入这串代码到你网站想展示的地方："
246
+
247
+ #: views/SlideshowPluginPostType/information.php:5
248
+ #, php-format
249
+ msgid "Or go to the %swidgets page%s and show the slideshow as a widget."
250
+ msgstr "%s或者到小工具页面把幻灯片加入小工具内。%s"
251
+
252
+ #: views/SlideshowPluginPostType/settings.php:12
253
+ msgid "settings"
254
+ msgstr "设置"
255
+
256
+ #: views/SlideshowPluginPostType/settings.php:26
257
+ #: views/SlideshowPluginPostType/style-settings.php:8
258
+ msgid "Default"
259
+ msgstr ""
260
+
261
+ #: views/SlideshowPluginPostType/slides.php:9
262
+ msgid "Add slides to this slideshow by using one of the buttons above."
263
+ msgstr ""
264
+
265
+ #: views/SlideshowPluginPostType/slides.php:47
266
+ #: views/SlideshowPluginPostType/slides.php:141
267
+ msgid "Title"
268
+ msgstr ""
269
+
270
+ #: views/SlideshowPluginPostType/slides.php:48
271
+ #: views/SlideshowPluginPostType/slides.php:142
272
+ msgid "Description"
273
+ msgstr ""
274
+
275
+ #: views/SlideshowPluginPostType/slides.php:49
276
+ #: views/SlideshowPluginPostType/slides.php:143
277
+ msgid "Background color"
278
+ msgstr ""
279
+
280
+ #: views/SlideshowPluginPostType/slides.php:55
281
+ #: views/SlideshowPluginPostType/slides.php:110
282
+ #: views/SlideshowPluginPostType/slides.php:149
283
+ #: views/SlideshowPluginPostType/slides.php:197
284
+ msgid "Same window"
285
+ msgstr ""
286
+
287
+ #: views/SlideshowPluginPostType/slides.php:56
288
+ #: views/SlideshowPluginPostType/slides.php:111
289
+ #: views/SlideshowPluginPostType/slides.php:150
290
+ #: views/SlideshowPluginPostType/slides.php:198
291
+ msgid "New window"
292
+ msgstr ""
293
+
294
+ #: views/SlideshowPluginPostType/slides.php:60
295
+ #: views/SlideshowPluginPostType/slides.php:115
296
+ #: views/SlideshowPluginPostType/slides.php:154
297
+ #: views/SlideshowPluginPostType/slides.php:202
298
+ msgid "URL"
299
+ msgstr ""
300
+
301
+ #: views/SlideshowPluginPostType/slides.php:76
302
+ #: views/SlideshowPluginPostType/slides.php:170
303
+ msgid "Youtube Video ID"
304
+ msgstr ""
305
+
306
+ #: views/SlideshowPluginPostType/slides.php:94
307
+ #: views/SlideshowPluginPostType/slides.php:101
308
+ msgid "Edit"
309
+ msgstr ""
310
+
311
+ #: views/SlideshowPluginPostType/slides.php:126
312
+ msgid ""
313
+ "An error occurred while loading this slide, and it will not be present in "
314
+ "the slideshow"
315
+ msgstr ""
316
+
317
+ #: views/SlideshowPluginPostType/slides.php:131
318
+ #: views/SlideshowPluginPostType/slides.php:162
319
+ #: views/SlideshowPluginPostType/slides.php:177
320
+ #: views/SlideshowPluginPostType/slides.php:211
321
+ msgid "Delete slide"
322
+ msgstr ""
323
+
324
+ #: views/SlideshowPluginPostType/support-plugin.php:3
325
+ msgid "Help to keep this plugin free!"
326
+ msgstr "协助保持本插件免费"
327
+
328
+ #: views/SlideshowPluginPostType/support-plugin.php:6
329
+ msgid ""
330
+ "In order to keep you provided with the newest features, forum support, and "
331
+ "bug-fixes, a lot of motivation is required. Therefore I'm kindly asking you "
332
+ "to consider making a small donation to the plugin or rating it as 5-stars on "
333
+ "Wordpress.org. Thank you in advance!"
334
+ msgstr ""
335
+ "我很爽快地希望你们能考虑对本插件作出一些小捐赠，或者能在wordpress.org给予5星"
336
+ "好评，这样能让我保持积极性，在未来提供给你们插件的持续更新、论坛支持和bug的修"
337
+ "复，先跟你们提前谢谢！"
338
+
339
+ #: views/SlideshowPluginPostType/support-plugin.php:15
340
+ msgid "Rate on Wordpress.org"
341
+ msgstr "为本插件打分"
342
+
343
+ #: views/SlideshowPluginPostType/support-plugin.php:24
344
+ msgid "Questions / Suggestions"
345
+ msgstr "问题/建议"
346
+
347
+ #: views/SlideshowPluginSlideInserter/insert-image-button.php:1
348
+ msgid "Image slide"
349
+ msgstr "图示幻灯片"
350
+
351
+ #: views/SlideshowPluginSlideInserter/insert-text-button.php:1
352
+ msgid "Text slide"
353
+ msgstr "文本幻灯片"
354
+
355
+ #: views/SlideshowPluginSlideInserter/insert-video-button.php:1
356
+ msgid "Video slide"
357
+ msgstr "视频幻灯片"
358
+
359
+ #: views/SlideshowPluginSlideInserter/search-popup.php:6
360
+ msgid "Search"
361
+ msgstr ""
362
+
363
+ #: views/SlideshowPluginSlideInserter/search-popup.php:7
364
+ msgid "Search images by title or ID"
365
+ msgstr ""
366
+
367
+ #: views/SlideshowPluginUpload/upload-button.php:1
368
+ msgid "Upload/Manage Images"
369
+ msgstr ""
370
+
371
+ #: views/SlideshowPluginWidget/form.php:9
372
+ msgid "Random Slideshow"
373
+ msgstr ""
374
+
375
+ #~ msgid "Leave any field open to use default value."
376
+ #~ msgstr "Een veld dat open wordt gelaten neemt de standaardwaarde aan."
readme.txt CHANGED
@@ -5,7 +5,7 @@ Donate link: http://stefanboonstra.com/donate-to-slideshow/
5
  Tags: slideshow, slider, slide, slides, show, images, image, photo, gallery, galleries, jquery, javascript, video, text
6
  Requires at least: 3.3
7
  Tested up to: 3.4.2
8
- Stable tag: 2.1.14
9
  License: GPLv2
10
 
11
  Integrate a fancy slideshow in just five steps. - Rainbows. Rainbows everywhere.
@@ -38,6 +38,7 @@ different images, settings and styles for each one of them.
38
  - English
39
  - Dutch
40
  - Russian (Translated by [Oleg Fritz](http://www.facebook.com/profile.php?id=100001331241069))
 
41
 
42
  Feel free to send me your own translation of the plugin to my e-mail address: wordpress@stefanboonstra.com. Many
43
  thanks in advance!
@@ -111,6 +112,10 @@ slideshow may not be styled.
111
  * Multiple slideshows can now be shown with each its separate styling.
112
  * Users can now search insertable images by post id.
113
 
 
 
 
 
114
  = 2.1.14 =
115
  * Fixed: Text slide descriptions allow HTML again
116
 
5
  Tags: slideshow, slider, slide, slides, show, images, image, photo, gallery, galleries, jquery, javascript, video, text
6
  Requires at least: 3.3
7
  Tested up to: 3.4.2
8
+ Stable tag: 2.1.15
9
  License: GPLv2
10
 
11
  Integrate a fancy slideshow in just five steps. - Rainbows. Rainbows everywhere.
38
  - English
39
  - Dutch
40
  - Russian (Translated by [Oleg Fritz](http://www.facebook.com/profile.php?id=100001331241069))
41
+ - Chinese (Translated by [Kevin Tell](http://www.ivygg.com/))
42
 
43
  Feel free to send me your own translation of the plugin to my e-mail address: wordpress@stefanboonstra.com. Many
44
  thanks in advance!
112
  * Multiple slideshows can now be shown with each its separate styling.
113
  * Users can now search insertable images by post id.
114
 
115
+ = 2.1.15 =
116
+ * Fixed: Security issues.
117
+ * Added Chinese translation.
118
+
119
  = 2.1.14 =
120
  * Fixed: Text slide descriptions allow HTML again
121
 
slideshow.php CHANGED
@@ -3,7 +3,7 @@
3
  Plugin Name: Slideshow
4
  Plugin URI: http://wordpress.org/extend/plugins/slideshow-jquery-image-gallery/
5
  Description: This plugin offers a slideshow that is easily deployable in your website. Add any image that has already been uploaded to add to your slideshow. Options and styles are customizable for every single slideshow on your website.
6
- Version: 2.1.14
7
  Requires at least: 3.3
8
  Author: StefanBoonstra
9
  Author URI: http://stefanboonstra.com
@@ -21,7 +21,7 @@
21
  class SlideshowPluginMain {
22
 
23
  /** Variables */
24
- static $version = '2.1.14';
25
 
26
  /**
27
  * Bootstraps the application by assigning the right functions to
@@ -50,10 +50,6 @@ class SlideshowPluginMain {
50
 
51
  // Transfers v1.x.x slides to the new slide format
52
  register_activation_hook(__FILE__, array(__CLASS__, 'transferV1toV2'));
53
-
54
- // Plugin feedback
55
- add_action('admin_head', array('SlideshowPluginFeedback', 'adminInitialize'));
56
- register_deactivation_hook(__FILE__, array('SlideshowPluginFeedback', 'deactivation'));
57
  }
58
 
59
  /**
3
  Plugin Name: Slideshow
4
  Plugin URI: http://wordpress.org/extend/plugins/slideshow-jquery-image-gallery/
5
  Description: This plugin offers a slideshow that is easily deployable in your website. Add any image that has already been uploaded to add to your slideshow. Options and styles are customizable for every single slideshow on your website.
6
+ Version: 2.1.15
7
  Requires at least: 3.3
8
  Author: StefanBoonstra
9
  Author URI: http://stefanboonstra.com
21
  class SlideshowPluginMain {
22
 
23
  /** Variables */
24
+ static $version = '2.1.15';
25
 
26
  /**
27
  * Bootstraps the application by assigning the right functions to
50
 
51
  // Transfers v1.x.x slides to the new slide format
52
  register_activation_hook(__FILE__, array(__CLASS__, 'transferV1toV2'));
 
 
 
 
53
  }
54
 
55
  /**
style/SlideshowPlugin/functional.css CHANGED
@@ -1 +1 @@
1
- .slideshow_container{position:relative}.slideshow_container .slideshow_overflow{position:relative;overflow:hidden}.slideshow_container .slideshow{height:100%;width:200%;overflow:hidden}.slideshow_container img{margin:0!important;padding:0!important;max-width:100%;max-height:100%;height:100%;border:0}.slideshow_container .slide{height:100%;float:left;overflow:hidden;text-align:center}.slideshow_container .transparent{zoom:1}.slideshow_container .transparent:hover{zoom:1}.slideshow_container .description{position:absolute;bottom:0;display:none;width:inherit}.slideshow_container .controlPanel{position:absolute;top:5px;left:50%;display:none}.slideshow_container .controlPanel ul{list-style:none;margin:0;padding:0}.slideshow_container .controlPanel ul li{float:left}.slideshow_container .controlPanel ul li:hover{cursor:pointer}.slideshow_container .button{padding:0;position:absolute;top:50%;cursor:pointer;display:none}.slideshow_container .previous{left:5px}.slideshow_container .next{right:5px}.slideshow_container .manufacturer{position:absolute!important;height:1px;width:1px;overflow:hidden;clip:rect(1px 1px 1px 1px);clip:rect(1px,1px,1px,1px);}
1
+ .slideshow_container{position:relative}.slideshow_container .slideshow_overflow{position:relative;overflow:hidden}.slideshow_container .slideshow{height:100%;width:200%;overflow:hidden}.slideshow_container img{margin:0!important;padding:0!important;max-width:100%;max-height:100%;border:0}.slideshow_container .slide{height:100%;float:left;overflow:hidden;text-align:center}.slideshow_container .transparent{zoom:1}.slideshow_container .transparent:hover{zoom:1}.slideshow_container .description{position:absolute;bottom:0;display:none;width:inherit}.slideshow_container .controlPanel{position:absolute;top:5px;left:50%;display:none}.slideshow_container .controlPanel ul{list-style:none;margin:0;padding:0}.slideshow_container .controlPanel ul li{float:left}.slideshow_container .controlPanel ul li:hover{cursor:pointer}.slideshow_container .button{padding:0;position:absolute;top:50%;cursor:pointer;display:none}.slideshow_container .previous{left:5px}.slideshow_container .next{right:5px}.slideshow_container .manufacturer{position:absolute!important;height:1px;width:1px;overflow:hidden;clip:rect(1px 1px 1px 1px);clip:rect(1px,1px,1px,1px);}
views/SlideshowPlugin/slideshow.php CHANGED
@@ -1,4 +1,4 @@
1
- <div class="slideshow_container slideshow_container_<?php echo $randomId; ?>" style="width: <?php echo (is_numeric($settings['width']))? $settings['width'] : 0; ?>px; height: <?php echo (is_numeric($settings['height']))? $settings['height'] : 0; ?>px;">
2
  <div class="slideshow_overflow" style="width: <?php echo (is_numeric($settings['width']))? $settings['width'] : 0; ?>px; height: <?php echo (is_numeric($settings['height']))? $settings['height'] : 0; ?>px;">
3
  <div class="slideshow">
4
  <?php if(count($slides) > 0): ?>
@@ -8,9 +8,9 @@
8
  <?php
9
  $url = $target = '';
10
  if(isset($slide['url']))
11
- $url = $slide['url'];
12
  if(isset($slide['urlTarget']))
13
- $target = $slide['urlTarget'];
14
  ?>
15
 
16
  <?php if($slide['type'] == 'text'): ?>
@@ -18,11 +18,11 @@
18
  <?php
19
  $title = $description = $color = '';
20
  if(isset($slide['title']))
21
- $title = $slide['title'];
22
  if(isset($slide['description']))
23
- $description = $slide['description'];
24
  if(isset($slide['color']))
25
- $color = $slide['color'];
26
  ?>
27
 
28
  <div class="slide slide_<?php echo $i; ?>" <?php if(!empty($color)) echo 'style="background: #' . $color . ';"'; ?> style="height: <?php echo (is_numeric($settings['height']))? $settings['height'] : 0; ?>px;">
@@ -37,7 +37,7 @@
37
  <?php
38
  $videoId = '';
39
  if(isset($slide['videoId']))
40
- $videoId = $slide['videoId'];
41
 
42
  $elementVideoId = 'youtube-player-' . rand() . '-' . $videoId;
43
  ?>
@@ -113,7 +113,7 @@
113
 
114
  <?php if(!empty($style)): ?>
115
  <style type="text/css">
116
- <?php echo $style; ?>
117
  </style>
118
  <?php endif; ?>
119
  </div>
1
+ <div class="slideshow_container slideshow_container_<?php echo htmlspecialchars($randomId); ?>" style="width: <?php echo (is_numeric($settings['width']))? $settings['width'] : 0; ?>px; height: <?php echo (is_numeric($settings['height']))? $settings['height'] : 0; ?>px;">
2
  <div class="slideshow_overflow" style="width: <?php echo (is_numeric($settings['width']))? $settings['width'] : 0; ?>px; height: <?php echo (is_numeric($settings['height']))? $settings['height'] : 0; ?>px;">
3
  <div class="slideshow">
4
  <?php if(count($slides) > 0): ?>
8
  <?php
9
  $url = $target = '';
10
  if(isset($slide['url']))
11
+ $url = htmlspecialchars($slide['url']);
12
  if(isset($slide['urlTarget']))
13
+ $target = htmlspecialchars($slide['urlTarget']);
14
  ?>
15
 
16
  <?php if($slide['type'] == 'text'): ?>
18
  <?php
19
  $title = $description = $color = '';
20
  if(isset($slide['title']))
21
+ $title = htmlspecialchars($slide['title']);
22
  if(isset($slide['description']))
23
+ $description = htmlspecialchars($slide['description']);
24
  if(isset($slide['color']))
25
+ $color = htmlspecialchars($slide['color']);
26
  ?>
27
 
28
  <div class="slide slide_<?php echo $i; ?>" <?php if(!empty($color)) echo 'style="background: #' . $color . ';"'; ?> style="height: <?php echo (is_numeric($settings['height']))? $settings['height'] : 0; ?>px;">
37
  <?php
38
  $videoId = '';
39
  if(isset($slide['videoId']))
40
+ $videoId = htmlspecialchars($slide['videoId']);
41
 
42
  $elementVideoId = 'youtube-player-' . rand() . '-' . $videoId;
43
  ?>
113
 
114
  <?php if(!empty($style)): ?>
115
  <style type="text/css">
116
+ <?php echo htmlspecialchars($style); ?>
117
  </style>
118
  <?php endif; ?>
119
  </div>
views/SlideshowPluginPostType/slides.php CHANGED
@@ -15,7 +15,7 @@
15
  }
16
  </style>
17
  <script type="text/javascript">
18
- var slideshowHighestSlideId = <?php echo $highestSlideId; ?>
19
  </script>
20
 
21
  <ul class="sortable-slides-list">
@@ -43,6 +43,8 @@
43
  $color = $slide['color'];
44
  ?>
45
 
 
 
46
  <p style="padding: 0 5px;">
47
  <input type="text" name="slide_<?php echo $id; ?>_title" value="<?php echo $title; ?>" /><i><?php _e('Title', 'slideshow-plugin'); ?></i><br />
48
  <input type="text" name="slide_<?php echo $id; ?>_description" value="<?php echo $description; ?>" /><i><?php _e('Description', 'slideshow-plugin'); ?></i><br />
@@ -137,6 +139,8 @@
137
 
138
  <div class="text-slide-template" style="display: none;">
139
  <li class="widefat sortable-slides-list-item">
 
 
140
  <p style="padding: 0 5px;">
141
  <input type="text" class="title" /><i><?php _e('Title', 'slideshow-plugin'); ?></i><br />
142
  <input type="text" class="description" /><i><?php _e('Description', 'slideshow-plugin'); ?></i><br />
15
  }
16
  </style>
17
  <script type="text/javascript">
18
+ var slideshowHighestSlideId = <?php echo (is_numeric($highestSlideId))? $highestSlideId : 0; ?>
19
  </script>
20
 
21
  <ul class="sortable-slides-list">
43
  $color = $slide['color'];
44
  ?>
45
 
46
+ <p style="padding: 0 5px; color: #f00;"><?php _e('Due to security issues, using HTML in text slides is temporarily disabled. My apologies.') ?></p>
47
+
48
  <p style="padding: 0 5px;">
49
  <input type="text" name="slide_<?php echo $id; ?>_title" value="<?php echo $title; ?>" /><i><?php _e('Title', 'slideshow-plugin'); ?></i><br />
50
  <input type="text" name="slide_<?php echo $id; ?>_description" value="<?php echo $description; ?>" /><i><?php _e('Description', 'slideshow-plugin'); ?></i><br />
139
 
140
  <div class="text-slide-template" style="display: none;">
141
  <li class="widefat sortable-slides-list-item">
142
+ <p style="padding: 0 5px; color: #f00;"><?php _e('Due to security issues, using HTML in text slides is temporarily disabled. My apologies.') ?></p>
143
+
144
  <p style="padding: 0 5px;">
145
  <input type="text" class="title" /><i><?php _e('Title', 'slideshow-plugin'); ?></i><br />
146
  <input type="text" class="description" /><i><?php _e('Description', 'slideshow-plugin'); ?></i><br />
views/SlideshowPluginWidget/form.php CHANGED
@@ -1,11 +1,11 @@
1
  <p>
2
  <label for="<?php echo $this->get_field_id('title'); ?>"><?php _e('Title', 'slideshow-plugin'); ?></label>
3
- <input class="widefat" id="<?php echo $this->get_field_id('title'); ?>" name="<?php echo $this->get_field_name('title'); ?>" value="<?php echo $instance['title']; ?>" style="width:100%" />
4
  </p>
5
 
6
  <p>
7
  <label for="<?php echo $this->get_field_id('slideshowId'); ?>"><?php _e('Slideshow', 'slideshow-plugin'); ?></label>
8
- <select class="widefat" id="<?php echo $this->get_field_id('slideshowId'); ?>" name="<?php echo $this->get_field_name('slideshowId'); ?>" value="<?php echo $instance['slideshowId']; ?>" style="width:100%">
9
  <option value="-1" <?php selected($instance['slideshowId'], -1); ?>><?php _e('Random Slideshow', 'slideshow-plugin'); ?></option>
10
  <?php foreach($slideshows as $slideshow): ?>
11
  <option value="<?php echo $slideshow->ID ?>" <?php selected($instance['slideshowId'], $slideshow->ID); ?>><?php echo $slideshow->post_title ?></option>
1
  <p>
2
  <label for="<?php echo $this->get_field_id('title'); ?>"><?php _e('Title', 'slideshow-plugin'); ?></label>
3
+ <input class="widefat" id="<?php echo $this->get_field_id('title'); ?>" name="<?php echo $this->get_field_name('title'); ?>" value="<?php echo htmlspecialchars($instance['title']); ?>" style="width:100%" />
4
  </p>
5
 
6
  <p>
7
  <label for="<?php echo $this->get_field_id('slideshowId'); ?>"><?php _e('Slideshow', 'slideshow-plugin'); ?></label>
8
+ <select class="widefat" id="<?php echo $this->get_field_id('slideshowId'); ?>" name="<?php echo $this->get_field_name('slideshowId'); ?>" value="<?php echo (is_numeric($instance['slideshowId']))? $instance['slideshowId'] : ''; ?>" style="width:100%">
9
  <option value="-1" <?php selected($instance['slideshowId'], -1); ?>><?php _e('Random Slideshow', 'slideshow-plugin'); ?></option>
10
  <?php foreach($slideshows as $slideshow): ?>
11
  <option value="<?php echo $slideshow->ID ?>" <?php selected($instance['slideshowId'], $slideshow->ID); ?>><?php echo $slideshow->post_title ?></option>