Toolset Types – Custom Post Types, Custom Fields and Taxonomies - Version 1.8.8

Version Description

  • Release date: 2015-11-02
  • Replace esc_attr_e to esc_attr in skype field.
  • Change Installer version to 1.6.8 - Fixed XSS vulnerability. Props for (Jacques1)[http://forums.phpfreaks.com/user/167590-jacques1/]
Download this release

Release Info

Developer iworks
Plugin Icon 128x128 Toolset Types – Custom Post Types, Custom Fields and Taxonomies
Version 1.8.8
Comparing to
See all releases

Code changes from version 1.8.7.2 to 1.8.8

embedded/bootstrap.php CHANGED
@@ -156,7 +156,7 @@ function wpcf_embedded_init() {
156
  // Define necessary constants if plugin is not present
157
  // This ones are skipped if used as embedded code!
158
  if ( !defined( 'WPCF_VERSION' ) ) {
159
- define( 'WPCF_VERSION', '1.8.7.2' );
160
  define( 'WPCF_META_PREFIX', 'wpcf-' );
161
  }
162
 
156
  // Define necessary constants if plugin is not present
157
  // This ones are skipped if used as embedded code!
158
  if ( !defined( 'WPCF_VERSION' ) ) {
159
+ define( 'WPCF_VERSION', '1.8.8' );
160
  define( 'WPCF_META_PREFIX', 'wpcf-' );
161
  }
162
 
embedded/includes/fields/skype.php CHANGED
@@ -208,7 +208,7 @@ function wpcf_fields_skype_meta_box_ajax() {
208
 
209
  ?></h2>
210
  <p>
211
- <input id="btn-skypename" name="skypename" value="<?php esc_attr_e($_GET['skypename']); ?>" type="text" />
212
  </p>
213
  <?php
214
  echo WPCF_Loader::template( 'skype-select-button', $_GET );
208
 
209
  ?></h2>
210
  <p>
211
+ <input id="btn-skypename" name="skypename" value="<?php echo esc_attr($_GET['skypename']); ?>" type="text" />
212
  </p>
213
  <?php
214
  echo WPCF_Loader::template( 'skype-select-button', $_GET );
embedded/plugin.php CHANGED
@@ -5,7 +5,7 @@
5
  Description: Define custom post types, custom taxonomies and custom fields.
6
  Author: OnTheGoSystems
7
  Author URI: http://www.onthegosystems.com
8
- Version: 1.8.7.2
9
  */
10
  /**
11
  *
5
  Description: Define custom post types, custom taxonomies and custom fields.
6
  Author: OnTheGoSystems
7
  Author URI: http://www.onthegosystems.com
8
+ Version: 1.8.8
9
  */
10
  /**
11
  *
embedded/readme.txt CHANGED
@@ -5,7 +5,7 @@ Tags: CMS, custom field, custom fields, custom post type, custom post types, fie
5
  License: GPLv2
6
  Requires at least: 3.4
7
  Tested up to: 4.3,1
8
- Stable tag: 1.8.7.2
9
 
10
  The Embedded version lets you create custom types, taxonomies and fields for your theme or plugin, without requiring any plugin.
11
 
5
  License: GPLv2
6
  Requires at least: 3.4
7
  Tested up to: 4.3,1
8
+ Stable tag: 1.8.8
9
 
10
  The Embedded version lets you create custom types, taxonomies and fields for your theme or plugin, without requiring any plugin.
11
 
plus/installer/changelog.txt CHANGED
@@ -1,3 +1,6 @@
 
 
 
1
  = 1.6.7 =
2
  * Fixed a bug causing repeated calls to the Toolset api to validate the user subscription
3
  * Use https for API urls
1
+ = 1.6.8 =
2
+ * Sanitized an input that was a potential security issue
3
+
4
  = 1.6.7 =
5
  * Fixed a bug causing repeated calls to the Toolset api to validate the user subscription
6
  * Use https for API urls
plus/installer/includes/class-installer-theme.php CHANGED
@@ -843,7 +843,7 @@ class Installer_Theme_Class {
843
  check_ajax_referer( 'installer_theme_frontend_selected_tab', 'installer_theme_frontend_selected_tab_nonce' );
844
 
845
  //Client_side_active_tab
846
- $frontend_tab_selected = $_POST["frontend_tab_selected"];
847
  if ( !(empty($frontend_tab_selected)) ) {
848
  //Front end tab selected
849
  update_option( 'wp_installer_clientside_active_tab', $frontend_tab_selected, false );
@@ -864,8 +864,8 @@ class Installer_Theme_Class {
864
 
865
  //Message and link
866
  $theme_repo_name = $this->installer_theme_get_repo_product_name( $frontend_tab_selected );;
867
- $response['unregistered_messages'] = __( 'To install and update', 'installer' ) . ' ' . $theme_repo_name . ' ' . __( 'themes', 'installer' ) . ',' . ' ' .
868
- __( 'please', 'installer' ) . ' ' . '<a href="' . $registration_url . '">' . __( 'register', 'installer' ) . ' ' . $theme_repo_name . '</a>' . ' ' . __( 'for this site.', 'installer' );
869
 
870
  }
871
  }
843
  check_ajax_referer( 'installer_theme_frontend_selected_tab', 'installer_theme_frontend_selected_tab_nonce' );
844
 
845
  //Client_side_active_tab
846
+ $frontend_tab_selected = filter_input( INPUT_POST, 'frontend_tab_selected', FILTER_SANITIZE_FULL_SPECIAL_CHARS, FILTER_NULL_ON_FAILURE );
847
  if ( !(empty($frontend_tab_selected)) ) {
848
  //Front end tab selected
849
  update_option( 'wp_installer_clientside_active_tab', $frontend_tab_selected, false );
864
 
865
  //Message and link
866
  $theme_repo_name = $this->installer_theme_get_repo_product_name( $frontend_tab_selected );;
867
+ $response['unregistered_messages'] = sprintf( __( 'To install and update %s, please %sregister%s %s for this site.', 'installer' ),
868
+ $theme_repo_name, '<a href="' . $registration_url . '">', '</a>', $theme_repo_name );
869
 
870
  }
871
  }
plus/installer/installer.php CHANGED
@@ -1,5 +1,5 @@
1
  <?php
2
- define('WP_INSTALLER_VERSION', '1.6.7');
3
 
4
  include_once dirname(__FILE__) . '/includes/installer.class.php';
5
 
1
  <?php
2
+ define('WP_INSTALLER_VERSION', '1.6.8');
3
 
4
  include_once dirname(__FILE__) . '/includes/installer.class.php';
5
 
plus/installer/loader.php CHANGED
@@ -3,7 +3,7 @@
3
  Plugin Name: Installer
4
  Plugin URI: http://wp-compatibility.com/installer-plugin/
5
  Description: Need help buying, installing and upgrading commercial themes and plugins? **Installer** handles all this for you, right from the WordPress admin. Installer lets you find themes and plugins from different sources, then, buy them from within the WordPress admin. Instead of manually uploading and unpacking, you'll see those themes and plugins available, just like any other plugin you're getting from WordPress.org.
6
- Version: 1.6.7
7
  Author: OnTheGoSystems Inc.
8
  Author URI: http://www.onthegosystems.com/
9
  */
@@ -28,7 +28,7 @@ $wp_installer_instance = dirname(__FILE__) . '/installer.php';
28
  global $wp_installer_instances;
29
  $wp_installer_instances[$wp_installer_instance] = array(
30
  'bootfile' => $wp_installer_instance,
31
- 'version' => '1.6.7'
32
  );
33
 
34
  // Exception: When WPML prior 3.2 is used, that instance must be used regardless of another newer instance
3
  Plugin Name: Installer
4
  Plugin URI: http://wp-compatibility.com/installer-plugin/
5
  Description: Need help buying, installing and upgrading commercial themes and plugins? **Installer** handles all this for you, right from the WordPress admin. Installer lets you find themes and plugins from different sources, then, buy them from within the WordPress admin. Instead of manually uploading and unpacking, you'll see those themes and plugins available, just like any other plugin you're getting from WordPress.org.
6
+ Version: 1.6.8
7
  Author: OnTheGoSystems Inc.
8
  Author URI: http://www.onthegosystems.com/
9
  */
28
  global $wp_installer_instances;
29
  $wp_installer_instances[$wp_installer_instance] = array(
30
  'bootfile' => $wp_installer_instance,
31
+ 'version' => '1.6.8'
32
  );
33
 
34
  // Exception: When WPML prior 3.2 is used, that instance must be used regardless of another newer instance
readme.txt CHANGED
@@ -5,7 +5,7 @@ Tags: CMS, custom field, custom fields, custom post type, custom post types, fie
5
  License: GPLv2
6
  Requires at least: 3.4
7
  Tested up to: 4.3.1
8
- Stable tag: 1.8.7.2
9
 
10
  The complete and reliable plugin for managing custom post types, custom taxonomies and custom fields.
11
 
@@ -155,6 +155,12 @@ Additionally, Types is the only plugin that lets you define parent/child relatio
155
 
156
  == Changelog ==
157
 
 
 
 
 
 
 
158
  = 1.8.7.2 =
159
 
160
  * Release date: 2015-10-28
5
  License: GPLv2
6
  Requires at least: 3.4
7
  Tested up to: 4.3.1
8
+ Stable tag: 1.8.8
9
 
10
  The complete and reliable plugin for managing custom post types, custom taxonomies and custom fields.
11
 
155
 
156
  == Changelog ==
157
 
158
+ = 1.8.8 =
159
+
160
+ * Release date: 2015-11-02
161
+ * Replace esc_attr_e to esc_attr in skype field.
162
+ * Change Installer version to 1.6.8 - Fixed XSS vulnerability. Props for (Jacques1)[http://forums.phpfreaks.com/user/167590-jacques1/]
163
+
164
  = 1.8.7.2 =
165
 
166
  * Release date: 2015-10-28
wpcf.php CHANGED
@@ -5,7 +5,7 @@
5
  Description: Define custom post types, custom taxonomies and custom fields.
6
  Author: OnTheGoSystems
7
  Author URI: http://www.onthegosystems.com
8
- Version: 1.8.7.2
9
  */
10
  /**
11
  *
@@ -16,7 +16,7 @@ if ( !defined( 'WPCF_VERSION' ) ) {
16
  /**
17
  * make sure that WPCF_VERSION in embedded/bootstrap.php is the same!
18
  */
19
- define( 'WPCF_VERSION', '1.8.7.2' );
20
  }
21
 
22
  define( 'WPCF_REPOSITORY', 'http://api.wp-types.com/' );
5
  Description: Define custom post types, custom taxonomies and custom fields.
6
  Author: OnTheGoSystems
7
  Author URI: http://www.onthegosystems.com
8
+ Version: 1.8.8
9
  */
10
  /**
11
  *
16
  /**
17
  * make sure that WPCF_VERSION in embedded/bootstrap.php is the same!
18
  */
19
+ define( 'WPCF_VERSION', '1.8.8' );
20
  }
21
 
22
  define( 'WPCF_REPOSITORY', 'http://api.wp-types.com/' );