Tuxedo Big File Uploads - Version 2.0.3

Version Description

Download this release

Release Info

Developer uglyrobot
Plugin Icon 128x128 Tuxedo Big File Uploads
Version 2.0.3
Comparing to
See all releases

Code changes from version 2.0.2 to 2.0.3

Files changed (2) hide show
  1. readme.txt +5 -6
  2. tuxedo_big_file_uploads.php +4 -37
readme.txt CHANGED
@@ -1,14 +1,9 @@
1
  === Big File Uploads - Increase Maximum File Upload Size ===
2
-
3
- Plugin Name: Big File Uploads - Increase Maximum File Upload Size
4
- Version: 2.0.2
5
- Author: Infinite Uploads
6
- Author URI: https://infiniteuploads.com/?utm_source=wordpress.org&utm_medium=readme&utm_campaign=bfu_readme&utm_term=author_uri
7
  Contributors: uglyrobot, jdailey, andtrev
8
  Tags: increase file size limit, increase upload limit, max upload file size, post max size, upload limit, file upload, files uploader, ftp, video uploader, AJAX
9
  Requires at least: 5.3
10
  Tested up to: 6.0
11
- Stable tag: 2.0.2
12
  Requires PHP: 5.6
13
  License: GPLv2
14
  License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -111,6 +106,10 @@ No. [Infinite Uploads](https://wordpress.org/plugins/infinite-uploads/) is an op
111
 
112
  == Changelog ==
113
 
 
 
 
 
114
  2.0.2 - 2022-2-03
115
  ----------------------------------------------------------------------
116
  - Fix: Conflicts with some theme builders like Themify.
1
  === Big File Uploads - Increase Maximum File Upload Size ===
 
 
 
 
 
2
  Contributors: uglyrobot, jdailey, andtrev
3
  Tags: increase file size limit, increase upload limit, max upload file size, post max size, upload limit, file upload, files uploader, ftp, video uploader, AJAX
4
  Requires at least: 5.3
5
  Tested up to: 6.0
6
+ Stable tag: 2.0.3
7
  Requires PHP: 5.6
8
  License: GPLv2
9
  License URI: https://www.gnu.org/licenses/gpl-2.0.html
106
 
107
  == Changelog ==
108
 
109
+ 2.0.3 - 2022-7-03
110
+ ----------------------------------------------------------------------
111
+ - Security fix: Prevent OS command injection in rare hosting configurations. props Marco Nappi.
112
+
113
  2.0.2 - 2022-2-03
114
  ----------------------------------------------------------------------
115
  - Fix: Conflicts with some theme builders like Themify.
tuxedo_big_file_uploads.php CHANGED
@@ -2,7 +2,7 @@
2
  /**
3
  * Plugin Name: Big File Uploads
4
  * Description: Enable large file uploads in the built-in WordPress media uploader via multipart uploads, and set maximum upload file size to any value based on user role. Uploads can be as large as available disk space allows.
5
- * Version: 2.0.2
6
  * Author: Infinite Uploads
7
  * Author URI: https://infiniteuploads.com/?utm_source=bfu_plugin&utm_medium=plugin&utm_campaign=bfu_plugin&utm_content=meta
8
  * Network: true
@@ -34,7 +34,7 @@ if ( ! defined( 'ABSPATH' ) ) {
34
  die();
35
  }
36
 
37
- define( 'BIG_FILE_UPLOADS_VERSION', '2.0.2' );
38
 
39
  /**
40
  * Big File Uploads manager class.
@@ -416,38 +416,6 @@ class BigFileUploads {
416
  wp_send_json_success();
417
  }
418
 
419
- /**
420
- * Return a file's mime type.
421
- *
422
- * @since 1.2.0
423
- *
424
- * @param string $filename File name.
425
- * @return false|string $mimetype Mime type.
426
- */
427
- public function get_mime_content_type( $filename ) {
428
-
429
- if ( function_exists( 'mime_content_type' ) ) {
430
- return mime_content_type( $filename );
431
- }
432
-
433
- if ( function_exists( 'finfo_open' ) ) {
434
- $finfo = finfo_open( FILEINFO_MIME );
435
- $mimetype = finfo_file( $finfo, $filename );
436
- finfo_close( $finfo );
437
- return $mimetype;
438
- } else {
439
- ob_start();
440
- system( 'file -i -b ' . $filename );
441
- $output = ob_get_clean();
442
- $output = explode( '; ', $output );
443
- if ( is_array( $output ) ) {
444
- $output = $output[0];
445
- }
446
- return $output;
447
- }
448
-
449
- }
450
-
451
  /**
452
  * AJAX chunk receiver.
453
  * Ajax callback for plupload to handle chunked uploads.
@@ -626,9 +594,8 @@ class BigFileUploads {
626
  rename( $filePath, $_FILES['async-upload']['tmp_name'] );
627
  $_FILES['async-upload']['name'] = $fileName;
628
  $_FILES['async-upload']['size'] = filesize( $_FILES['async-upload']['tmp_name'] );
629
- //$wp_filetype = wp_check_filetype_and_ext( $_FILES['async-upload']['tmp_name'], $_FILES['async-upload']['tmp_name'] );
630
- $_FILES['async-upload']['type'] = $this->get_mime_content_type( $_FILES['async-upload']['tmp_name'] );
631
- //$_FILES['async-upload']['type'] = $wp_filetype['type'];
632
  header( 'Content-Type: text/html; charset=' . get_option( 'blog_charset' ) );
633
 
634
  if ( ! isset( $_REQUEST['short'] ) || ! isset( $_REQUEST['type'] ) ) {
2
  /**
3
  * Plugin Name: Big File Uploads
4
  * Description: Enable large file uploads in the built-in WordPress media uploader via multipart uploads, and set maximum upload file size to any value based on user role. Uploads can be as large as available disk space allows.
5
+ * Version: 2.0.3
6
  * Author: Infinite Uploads
7
  * Author URI: https://infiniteuploads.com/?utm_source=bfu_plugin&utm_medium=plugin&utm_campaign=bfu_plugin&utm_content=meta
8
  * Network: true
34
  die();
35
  }
36
 
37
+ define( 'BIG_FILE_UPLOADS_VERSION', '2.0.3' );
38
 
39
  /**
40
  * Big File Uploads manager class.
416
  wp_send_json_success();
417
  }
418
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
419
  /**
420
  * AJAX chunk receiver.
421
  * Ajax callback for plupload to handle chunked uploads.
594
  rename( $filePath, $_FILES['async-upload']['tmp_name'] );
595
  $_FILES['async-upload']['name'] = $fileName;
596
  $_FILES['async-upload']['size'] = filesize( $_FILES['async-upload']['tmp_name'] );
597
+ $wp_filetype = wp_check_filetype_and_ext( $_FILES['async-upload']['tmp_name'], $_FILES['async-upload']['tmp_name'] );
598
+ $_FILES['async-upload']['type'] = $wp_filetype['type'];
 
599
  header( 'Content-Type: text/html; charset=' . get_option( 'blog_charset' ) );
600
 
601
  if ( ! isset( $_REQUEST['short'] ) || ! isset( $_REQUEST['type'] ) ) {