Visitors Traffic Real Time Statistics - Version 3.9

Version Description

  1. Authenticated (subscriber+) SQL Injection - Security Bug fixes
Download this release

Release Info

Developer osamaesh
Plugin Icon 128x128 Visitors Traffic Real Time Statistics
Version 3.9
Comparing to
See all releases

Code changes from version 3.8 to 3.9

Files changed (3) hide show
  1. Visitors-Traffic-Real-Time-Statistics.php +1 -1
  2. functions.php +5 -5
  3. readme.txt +4 -1
Visitors-Traffic-Real-Time-Statistics.php CHANGED
@@ -4,7 +4,7 @@ Plugin Name: Visitor Traffic Real Time Statistics
4
  Description: Hits counter that shows analytical numbers of your WordPress site visitors and hits.
5
  Author: wp-buy
6
  Author URI: https://www.wp-buy.com/
7
- Version: 3.8
8
  Text Domain: visitors-traffic-real-time-statistics
9
  Domain Path: /languages
10
  */
4
  Description: Hits counter that shows analytical numbers of your WordPress site visitors and hits.
5
  Author: wp-buy
6
  Author URI: https://www.wp-buy.com/
7
+ Version: 3.9
8
  Text Domain: visitors-traffic-real-time-statistics
9
  Domain Path: /languages
10
  */
functions.php CHANGED
@@ -1759,7 +1759,7 @@ function ahcfree_get_vsitors_by_country($all,$cnt=true,$start='',$limit='',$fdt=
1759
  {
1760
  /*$sql = "select tot.ctr_name, tot.ctr_internet_code, tot.total from (SELECT c.ctr_name, c.ctr_internet_code, count(1) as total FROM ahc_recent_visitors v, ahc_countries c where v.ctr_id = c.ctr_id $cond group by ctr_name) as tot order by tot.total desc";
1761
  $results = $wpdb->get_results($sql, OBJECT);*/
1762
- $sql = "select count(*) as cnt from (SELECT c.ctr_name, c.ctr_internet_code, count(1) as total FROM ahc_recent_visitors v, ahc_countries c where v.ctr_id = c.ctr_id $cond group by ctr_name ) as tot order by tot.total desc";
1763
 
1764
  return $wpdb->get_var($sql);
1765
  }
@@ -1767,7 +1767,7 @@ function ahcfree_get_vsitors_by_country($all,$cnt=true,$start='',$limit='',$fdt=
1767
  $limitCond="";
1768
  if($start!='' && $limit!='')
1769
  {
1770
- $limitCond=" limit $start,$limit";
1771
 
1772
  }
1773
  if($all==1)
@@ -1775,7 +1775,7 @@ function ahcfree_get_vsitors_by_country($all,$cnt=true,$start='',$limit='',$fdt=
1775
  $limitCond = "";
1776
  }
1777
 
1778
- $sql = "select tot.ctr_name, tot.ctr_internet_code, tot.total from (SELECT c.ctr_name, c.ctr_internet_code, count(1) as total FROM ahc_recent_visitors v, ahc_countries c where v.ctr_id = c.ctr_id $cond group by ctr_name ) as tot order by tot.total desc $limitCond";
1779
  $results = $wpdb->get_results($sql, OBJECT);
1780
  //echo $sql;
1781
  if ($results !== false) {
@@ -1924,7 +1924,7 @@ function ahcfree_get_recent_visitors($all,$cnt=true,$start='',$limit='',$fdt='',
1924
  $limitCond="";
1925
  if($start !='' && $limit!='')
1926
  {
1927
- $limitCond =" LIMIT $start, $limit";
1928
  }
1929
 
1930
  if($all==1)
@@ -2049,7 +2049,7 @@ function ahcfree_get_latest_search_key_words_used($all,$cnt=true,$start='',$limi
2049
  $limitCond="";
2050
  if($start !='' && $limit!='')
2051
  {
2052
- $limitCond =" LIMIT $start, $limit";
2053
  }
2054
 
2055
  if($all==1)
1759
  {
1760
  /*$sql = "select tot.ctr_name, tot.ctr_internet_code, tot.total from (SELECT c.ctr_name, c.ctr_internet_code, count(1) as total FROM ahc_recent_visitors v, ahc_countries c where v.ctr_id = c.ctr_id $cond group by ctr_name) as tot order by tot.total desc";
1761
  $results = $wpdb->get_results($sql, OBJECT);*/
1762
+ $sql = $wpdb->prepare("select count(*) as cnt from (SELECT c.ctr_name, c.ctr_internet_code, count(1) as total FROM ahc_recent_visitors v, ahc_countries c where v.ctr_id = c.ctr_id %s group by ctr_name ) as tot order by tot.total desc", $cond);
1763
 
1764
  return $wpdb->get_var($sql);
1765
  }
1767
  $limitCond="";
1768
  if($start!='' && $limit!='')
1769
  {
1770
+ $limitCond = " limit ".intval($start).",".intval($limit);
1771
 
1772
  }
1773
  if($all==1)
1775
  $limitCond = "";
1776
  }
1777
 
1778
+ $sql = $wpdb->prepare("select tot.ctr_name, tot.ctr_internet_code, tot.total from (SELECT c.ctr_name, c.ctr_internet_code, count(1) as total FROM ahc_recent_visitors v, ahc_countries c where v.ctr_id = c.ctr_id %s group by ctr_name ) as tot order by tot.total desc %s", $cond, $limitCond );
1779
  $results = $wpdb->get_results($sql, OBJECT);
1780
  //echo $sql;
1781
  if ($results !== false) {
1924
  $limitCond="";
1925
  if($start !='' && $limit!='')
1926
  {
1927
+ $limitCond =" LIMIT ".intval($start).", ".intval($limit);
1928
  }
1929
 
1930
  if($all==1)
2049
  $limitCond="";
2050
  if($start !='' && $limit!='')
2051
  {
2052
+ $limitCond =" LIMIT ".intval($start).", ".intval($limit);
2053
  }
2054
 
2055
  if($all==1)
readme.txt CHANGED
@@ -3,7 +3,7 @@ Contributors: wp-buy, osamaesh
3
  Tags: visitor, traffic, statistics, analytics, stats, online, Visit, WordPress analytics ,visitors online, count visitor, google analytics, analytics, GeoIP, Geo locations, analytics dashboard, visits, chart, browser, blog, today, yesterday, week, month, wp Statistics, year, post, page, sidebar, summary, feedburner, hits, pagerank, google, histats, alexa, live visit, counter, diagram, graph
4
  Requires at least: 3.0.1
5
  Tested up to: 5.8
6
- Stable tag: 3.8
7
  License: GPLv2 or later
8
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
9
 
@@ -150,6 +150,9 @@ This plugin supports IPv6; however, PHP must be compiled with IPv6 support enabl
150
 
151
  == Changelog ==
152
 
 
 
 
153
  = 3.8 =
154
  1. WordPress 5.8 compatibility
155
 
3
  Tags: visitor, traffic, statistics, analytics, stats, online, Visit, WordPress analytics ,visitors online, count visitor, google analytics, analytics, GeoIP, Geo locations, analytics dashboard, visits, chart, browser, blog, today, yesterday, week, month, wp Statistics, year, post, page, sidebar, summary, feedburner, hits, pagerank, google, histats, alexa, live visit, counter, diagram, graph
4
  Requires at least: 3.0.1
5
  Tested up to: 5.8
6
+ Stable tag: 3.9
7
  License: GPLv2 or later
8
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
9
 
150
 
151
  == Changelog ==
152
 
153
+ = 3.9 =
154
+ 1. Authenticated (subscriber+) SQL Injection - Security Bug fixes
155
+
156
  = 3.8 =
157
  1. WordPress 5.8 compatibility
158