User Submitted Posts - Version 20190501

Version Description

To upgrade User Submitted Posts, remove the old version and replace with the new version. Or just click "Update" from the Plugins screen and let WordPress do it for you automatically.

Important! The /custom/ directory is deprecated. If you are using a custom form template, please move it to /wp-content/your-theme/usp/. For more information, check out the "Custom Submission Form" section under Installation.

Note: uninstalling the plugin from the WP Plugins screen results in the removal of all settings from the WP database. Submitted posts are NOT removed if you deactivate the plugin, reset default options, or uninstall the plugins; that is, all submitted posts must be removed manually.

Download this release

Release Info

Developer specialk
Plugin Icon 128x128 User Submitted Posts
Version 20190501
Comparing to
See all releases

Code changes from version 20190426 to 20190501

Files changed (2) hide show
  1. readme.txt +9 -4
  2. user-submitted-posts.php +5 -5
readme.txt CHANGED
@@ -9,9 +9,9 @@ Author URI: https://plugin-planet.com/
9
  Donate link: https://monzillamedia.com/donate.html
10
  Contributors: specialk
11
  Requires at least: 4.1
12
- Tested up to: 5.1
13
- Stable tag: 20190426
14
- Version: 20190426
15
  Requires PHP: 5.3
16
  Text Domain: usp
17
  Domain Path: /languages
@@ -709,9 +709,14 @@ Links, tweets and likes also appreciated. Thanks! :)
709
  If you like USP, please take a moment to [give a 5-star rating](https://wordpress.org/support/plugin/user-submitted-posts/reviews/?rate=5#new-post). It helps to keep development and support going strong. Thank you!
710
 
711
 
 
 
 
 
 
712
  **20190426**
713
 
714
- * Adds check that uploaded images are in fact images (Thanks to Matthias)
715
  * Tests on WordPress 5.1 and 5.2 (beta)
716
 
717
  **20190312**
9
  Donate link: https://monzillamedia.com/donate.html
10
  Contributors: specialk
11
  Requires at least: 4.1
12
+ Tested up to: 5.2
13
+ Stable tag: 20190501
14
+ Version: 20190501
15
  Requires PHP: 5.3
16
  Text Domain: usp
17
  Domain Path: /languages
709
  If you like USP, please take a moment to [give a 5-star rating](https://wordpress.org/support/plugin/user-submitted-posts/reviews/?rate=5#new-post). It helps to keep development and support going strong. Thank you!
710
 
711
 
712
+ **20190501**
713
+
714
+ * Fixes security issue with uploaded images on Apache + FastCGI
715
+ * Tests on WordPress 5.1 and 5.2 (beta)
716
+
717
  **20190426**
718
 
719
+ * Adds another security check for uploaded images (Thanks to Matthias)
720
  * Tests on WordPress 5.1 and 5.2 (beta)
721
 
722
  **20190312**
user-submitted-posts.php CHANGED
@@ -9,9 +9,9 @@
9
  Donate link: https://monzillamedia.com/donate.html
10
  Contributors: specialk
11
  Requires at least: 4.1
12
- Tested up to: 5.1
13
- Stable tag: 20190426
14
- Version: 20190426
15
  Requires PHP: 5.3
16
  Text Domain: usp
17
  Domain Path: /languages
@@ -40,7 +40,7 @@ if (!defined('ABSPATH')) die();
40
 
41
 
42
  define('USP_WP_VERSION', '4.1');
43
- define('USP_VERSION', '20190426');
44
  define('USP_PLUGIN', esc_html__('User Submitted Posts', 'usp'));
45
  define('USP_PATH', plugin_basename(__FILE__));
46
 
@@ -906,7 +906,7 @@ function usp_attach_images($post_id, $newPost, $files, $file_count) {
906
 
907
  $append = ($file_count > 1) ? '-'. $i : '';
908
 
909
- $file_name = basename($files['name'][$i]);
910
 
911
  $parts = pathinfo($file_name);
912
 
9
  Donate link: https://monzillamedia.com/donate.html
10
  Contributors: specialk
11
  Requires at least: 4.1
12
+ Tested up to: 5.2
13
+ Stable tag: 20190501
14
+ Version: 20190501
15
  Requires PHP: 5.3
16
  Text Domain: usp
17
  Domain Path: /languages
40
 
41
 
42
  define('USP_WP_VERSION', '4.1');
43
+ define('USP_VERSION', '20190501');
44
  define('USP_PLUGIN', esc_html__('User Submitted Posts', 'usp'));
45
  define('USP_PATH', plugin_basename(__FILE__));
46
 
906
 
907
  $append = ($file_count > 1) ? '-'. $i : '';
908
 
909
+ $file_name = basename(sanitize_file_name($files['name'][$i]));
910
 
911
  $parts = pathinfo($file_name);
912