Version Description
- Release date: 2015-11-02
- Replace esc_attr_e to esc_attr in skype field.
- Change Installer version to 1.6.8 - Fixed XSS vulnerability. Props for (Jacques1)[http://forums.phpfreaks.com/user/167590-jacques1/]
Download this release
Release Info
Developer | iworks |
Plugin | Toolset Types – Custom Post Types, Custom Fields and Taxonomies |
Version | 1.8.8 |
Comparing to | |
See all releases |
Code changes from version 1.8.7.2 to 1.8.8
- embedded/bootstrap.php +1 -1
- embedded/includes/fields/skype.php +1 -1
- embedded/plugin.php +1 -1
- embedded/readme.txt +1 -1
- plus/installer/changelog.txt +3 -0
- plus/installer/includes/class-installer-theme.php +3 -3
- plus/installer/installer.php +1 -1
- plus/installer/loader.php +2 -2
- readme.txt +7 -1
- wpcf.php +2 -2
embedded/bootstrap.php
CHANGED
@@ -156,7 +156,7 @@ function wpcf_embedded_init() {
|
|
156 |
// Define necessary constants if plugin is not present
|
157 |
// This ones are skipped if used as embedded code!
|
158 |
if ( !defined( 'WPCF_VERSION' ) ) {
|
159 |
-
define( 'WPCF_VERSION', '1.8.
|
160 |
define( 'WPCF_META_PREFIX', 'wpcf-' );
|
161 |
}
|
162 |
|
156 |
// Define necessary constants if plugin is not present
|
157 |
// This ones are skipped if used as embedded code!
|
158 |
if ( !defined( 'WPCF_VERSION' ) ) {
|
159 |
+
define( 'WPCF_VERSION', '1.8.8' );
|
160 |
define( 'WPCF_META_PREFIX', 'wpcf-' );
|
161 |
}
|
162 |
|
embedded/includes/fields/skype.php
CHANGED
@@ -208,7 +208,7 @@ function wpcf_fields_skype_meta_box_ajax() {
|
|
208 |
|
209 |
?></h2>
|
210 |
<p>
|
211 |
-
<input id="btn-skypename" name="skypename" value="<?php
|
212 |
</p>
|
213 |
<?php
|
214 |
echo WPCF_Loader::template( 'skype-select-button', $_GET );
|
208 |
|
209 |
?></h2>
|
210 |
<p>
|
211 |
+
<input id="btn-skypename" name="skypename" value="<?php echo esc_attr($_GET['skypename']); ?>" type="text" />
|
212 |
</p>
|
213 |
<?php
|
214 |
echo WPCF_Loader::template( 'skype-select-button', $_GET );
|
embedded/plugin.php
CHANGED
@@ -5,7 +5,7 @@
|
|
5 |
Description: Define custom post types, custom taxonomies and custom fields.
|
6 |
Author: OnTheGoSystems
|
7 |
Author URI: http://www.onthegosystems.com
|
8 |
-
Version: 1.8.
|
9 |
*/
|
10 |
/**
|
11 |
*
|
5 |
Description: Define custom post types, custom taxonomies and custom fields.
|
6 |
Author: OnTheGoSystems
|
7 |
Author URI: http://www.onthegosystems.com
|
8 |
+
Version: 1.8.8
|
9 |
*/
|
10 |
/**
|
11 |
*
|
embedded/readme.txt
CHANGED
@@ -5,7 +5,7 @@ Tags: CMS, custom field, custom fields, custom post type, custom post types, fie
|
|
5 |
License: GPLv2
|
6 |
Requires at least: 3.4
|
7 |
Tested up to: 4.3,1
|
8 |
-
Stable tag: 1.8.
|
9 |
|
10 |
The Embedded version lets you create custom types, taxonomies and fields for your theme or plugin, without requiring any plugin.
|
11 |
|
5 |
License: GPLv2
|
6 |
Requires at least: 3.4
|
7 |
Tested up to: 4.3,1
|
8 |
+
Stable tag: 1.8.8
|
9 |
|
10 |
The Embedded version lets you create custom types, taxonomies and fields for your theme or plugin, without requiring any plugin.
|
11 |
|
plus/installer/changelog.txt
CHANGED
@@ -1,3 +1,6 @@
|
|
|
|
|
|
|
|
1 |
= 1.6.7 =
|
2 |
* Fixed a bug causing repeated calls to the Toolset api to validate the user subscription
|
3 |
* Use https for API urls
|
1 |
+
= 1.6.8 =
|
2 |
+
* Sanitized an input that was a potential security issue
|
3 |
+
|
4 |
= 1.6.7 =
|
5 |
* Fixed a bug causing repeated calls to the Toolset api to validate the user subscription
|
6 |
* Use https for API urls
|
plus/installer/includes/class-installer-theme.php
CHANGED
@@ -843,7 +843,7 @@ class Installer_Theme_Class {
|
|
843 |
check_ajax_referer( 'installer_theme_frontend_selected_tab', 'installer_theme_frontend_selected_tab_nonce' );
|
844 |
|
845 |
//Client_side_active_tab
|
846 |
-
$frontend_tab_selected =
|
847 |
if ( !(empty($frontend_tab_selected)) ) {
|
848 |
//Front end tab selected
|
849 |
update_option( 'wp_installer_clientside_active_tab', $frontend_tab_selected, false );
|
@@ -864,8 +864,8 @@ class Installer_Theme_Class {
|
|
864 |
|
865 |
//Message and link
|
866 |
$theme_repo_name = $this->installer_theme_get_repo_product_name( $frontend_tab_selected );;
|
867 |
-
$response['unregistered_messages'] = __( 'To install and update
|
868 |
-
|
869 |
|
870 |
}
|
871 |
}
|
843 |
check_ajax_referer( 'installer_theme_frontend_selected_tab', 'installer_theme_frontend_selected_tab_nonce' );
|
844 |
|
845 |
//Client_side_active_tab
|
846 |
+
$frontend_tab_selected = filter_input( INPUT_POST, 'frontend_tab_selected', FILTER_SANITIZE_FULL_SPECIAL_CHARS, FILTER_NULL_ON_FAILURE );
|
847 |
if ( !(empty($frontend_tab_selected)) ) {
|
848 |
//Front end tab selected
|
849 |
update_option( 'wp_installer_clientside_active_tab', $frontend_tab_selected, false );
|
864 |
|
865 |
//Message and link
|
866 |
$theme_repo_name = $this->installer_theme_get_repo_product_name( $frontend_tab_selected );;
|
867 |
+
$response['unregistered_messages'] = sprintf( __( 'To install and update %s, please %sregister%s %s for this site.', 'installer' ),
|
868 |
+
$theme_repo_name, '<a href="' . $registration_url . '">', '</a>', $theme_repo_name );
|
869 |
|
870 |
}
|
871 |
}
|
plus/installer/installer.php
CHANGED
@@ -1,5 +1,5 @@
|
|
1 |
<?php
|
2 |
-
define('WP_INSTALLER_VERSION', '1.6.
|
3 |
|
4 |
include_once dirname(__FILE__) . '/includes/installer.class.php';
|
5 |
|
1 |
<?php
|
2 |
+
define('WP_INSTALLER_VERSION', '1.6.8');
|
3 |
|
4 |
include_once dirname(__FILE__) . '/includes/installer.class.php';
|
5 |
|
plus/installer/loader.php
CHANGED
@@ -3,7 +3,7 @@
|
|
3 |
Plugin Name: Installer
|
4 |
Plugin URI: http://wp-compatibility.com/installer-plugin/
|
5 |
Description: Need help buying, installing and upgrading commercial themes and plugins? **Installer** handles all this for you, right from the WordPress admin. Installer lets you find themes and plugins from different sources, then, buy them from within the WordPress admin. Instead of manually uploading and unpacking, you'll see those themes and plugins available, just like any other plugin you're getting from WordPress.org.
|
6 |
-
Version: 1.6.
|
7 |
Author: OnTheGoSystems Inc.
|
8 |
Author URI: http://www.onthegosystems.com/
|
9 |
*/
|
@@ -28,7 +28,7 @@ $wp_installer_instance = dirname(__FILE__) . '/installer.php';
|
|
28 |
global $wp_installer_instances;
|
29 |
$wp_installer_instances[$wp_installer_instance] = array(
|
30 |
'bootfile' => $wp_installer_instance,
|
31 |
-
'version' => '1.6.
|
32 |
);
|
33 |
|
34 |
// Exception: When WPML prior 3.2 is used, that instance must be used regardless of another newer instance
|
3 |
Plugin Name: Installer
|
4 |
Plugin URI: http://wp-compatibility.com/installer-plugin/
|
5 |
Description: Need help buying, installing and upgrading commercial themes and plugins? **Installer** handles all this for you, right from the WordPress admin. Installer lets you find themes and plugins from different sources, then, buy them from within the WordPress admin. Instead of manually uploading and unpacking, you'll see those themes and plugins available, just like any other plugin you're getting from WordPress.org.
|
6 |
+
Version: 1.6.8
|
7 |
Author: OnTheGoSystems Inc.
|
8 |
Author URI: http://www.onthegosystems.com/
|
9 |
*/
|
28 |
global $wp_installer_instances;
|
29 |
$wp_installer_instances[$wp_installer_instance] = array(
|
30 |
'bootfile' => $wp_installer_instance,
|
31 |
+
'version' => '1.6.8'
|
32 |
);
|
33 |
|
34 |
// Exception: When WPML prior 3.2 is used, that instance must be used regardless of another newer instance
|
readme.txt
CHANGED
@@ -5,7 +5,7 @@ Tags: CMS, custom field, custom fields, custom post type, custom post types, fie
|
|
5 |
License: GPLv2
|
6 |
Requires at least: 3.4
|
7 |
Tested up to: 4.3.1
|
8 |
-
Stable tag: 1.8.
|
9 |
|
10 |
The complete and reliable plugin for managing custom post types, custom taxonomies and custom fields.
|
11 |
|
@@ -155,6 +155,12 @@ Additionally, Types is the only plugin that lets you define parent/child relatio
|
|
155 |
|
156 |
== Changelog ==
|
157 |
|
|
|
|
|
|
|
|
|
|
|
|
|
158 |
= 1.8.7.2 =
|
159 |
|
160 |
* Release date: 2015-10-28
|
5 |
License: GPLv2
|
6 |
Requires at least: 3.4
|
7 |
Tested up to: 4.3.1
|
8 |
+
Stable tag: 1.8.8
|
9 |
|
10 |
The complete and reliable plugin for managing custom post types, custom taxonomies and custom fields.
|
11 |
|
155 |
|
156 |
== Changelog ==
|
157 |
|
158 |
+
= 1.8.8 =
|
159 |
+
|
160 |
+
* Release date: 2015-11-02
|
161 |
+
* Replace esc_attr_e to esc_attr in skype field.
|
162 |
+
* Change Installer version to 1.6.8 - Fixed XSS vulnerability. Props for (Jacques1)[http://forums.phpfreaks.com/user/167590-jacques1/]
|
163 |
+
|
164 |
= 1.8.7.2 =
|
165 |
|
166 |
* Release date: 2015-10-28
|
wpcf.php
CHANGED
@@ -5,7 +5,7 @@
|
|
5 |
Description: Define custom post types, custom taxonomies and custom fields.
|
6 |
Author: OnTheGoSystems
|
7 |
Author URI: http://www.onthegosystems.com
|
8 |
-
Version: 1.8.
|
9 |
*/
|
10 |
/**
|
11 |
*
|
@@ -16,7 +16,7 @@ if ( !defined( 'WPCF_VERSION' ) ) {
|
|
16 |
/**
|
17 |
* make sure that WPCF_VERSION in embedded/bootstrap.php is the same!
|
18 |
*/
|
19 |
-
define( 'WPCF_VERSION', '1.8.
|
20 |
}
|
21 |
|
22 |
define( 'WPCF_REPOSITORY', 'http://api.wp-types.com/' );
|
5 |
Description: Define custom post types, custom taxonomies and custom fields.
|
6 |
Author: OnTheGoSystems
|
7 |
Author URI: http://www.onthegosystems.com
|
8 |
+
Version: 1.8.8
|
9 |
*/
|
10 |
/**
|
11 |
*
|
16 |
/**
|
17 |
* make sure that WPCF_VERSION in embedded/bootstrap.php is the same!
|
18 |
*/
|
19 |
+
define( 'WPCF_VERSION', '1.8.8' );
|
20 |
}
|
21 |
|
22 |
define( 'WPCF_REPOSITORY', 'http://api.wp-types.com/' );
|