WP Photo Album Plus - Version 8.1.02.002

Version Description

= 8.1.01 =

  • This version addresses various bug fixes, feature requests and security fixes.
Download this release

Release Info

Developer opajaap
Plugin Icon wp plugin WP Photo Album Plus
Version 8.1.02.002
Comparing to
See all releases

Code changes from version 8.1.02.001 to 8.1.02.002

Files changed (3) hide show
  1. wppa-album-admin-autosave.php +7 -4
  2. wppa-wrappers.php +4 -1
  3. wppa.php +2 -2
wppa-album-admin-autosave.php CHANGED
@@ -3,7 +3,7 @@
3
  * Package: wp-photo-album-plus
4
  *
5
  * create, edit and delete albums
6
- * Version 8.1.02.001
7
  *
8
  */
9
 
@@ -1599,7 +1599,7 @@ global $wppa_revno;
1599
  __( 'Press Delete to continue, and Cancel to go back.', 'wp-photo-album-plus' ) . '
1600
  </p>
1601
  <form name="wppa-del-form" action="' . esc_url( wppa_dbg_url( get_admin_url() . 'admin.php?page=wppa_admin_menu' ) ) . '" method="post">' .
1602
- wp_nonce_field( '$wppa_nonce', WPPA_NONCE ) . '
1603
  <p>' .
1604
  __( 'What would you like to do with photos currently in the album?', 'wp-photo-album-plus' ) . '<br />
1605
  <input type="radio" name="wppa-del-photos" value="delete" checked="checked" />' . __( 'Delete', 'wp-photo-album-plus' ) . '<br />
@@ -1635,7 +1635,7 @@ global $wppa_revno;
1635
  />
1636
  </form>
1637
  </div>';
1638
- wooa_echo( $result );
1639
  }
1640
  else {
1641
  wppa_error_message( sprintf( __( 'Album admin action %s is not implemented', 'wp-photo-album-plus' ),
@@ -1648,7 +1648,10 @@ global $wppa_revno;
1648
 
1649
  // if album deleted
1650
  if ( wppa_get( 'del-confirm' ) ) {
1651
- check_admin_referer( '$wppa_nonce', WPPA_NONCE );
 
 
 
1652
 
1653
  $album_owner = $wpdb->get_var( $wpdb->prepare( "SELECT owner FROM $wpdb->wppa_albums WHERE id = %s", wppa_get( 'del-id' ) ) );
1654
  if ( ( $album_owner == '--- public ---' && ! current_user_can('administrator') ) || ! wppa_have_access( wppa_get( 'del-id' ) ) ) {
3
  * Package: wp-photo-album-plus
4
  *
5
  * create, edit and delete albums
6
+ * Version 8.1.02.002
7
  *
8
  */
9
 
1599
  __( 'Press Delete to continue, and Cancel to go back.', 'wp-photo-album-plus' ) . '
1600
  </p>
1601
  <form name="wppa-del-form" action="' . esc_url( wppa_dbg_url( get_admin_url() . 'admin.php?page=wppa_admin_menu' ) ) . '" method="post">' .
1602
+ wp_nonce_field( 'wppa-nonce', 'wppa-nonce' ) . '
1603
  <p>' .
1604
  __( 'What would you like to do with photos currently in the album?', 'wp-photo-album-plus' ) . '<br />
1605
  <input type="radio" name="wppa-del-photos" value="delete" checked="checked" />' . __( 'Delete', 'wp-photo-album-plus' ) . '<br />
1635
  />
1636
  </form>
1637
  </div>';
1638
+ wppa_echo( $result );
1639
  }
1640
  else {
1641
  wppa_error_message( sprintf( __( 'Album admin action %s is not implemented', 'wp-photo-album-plus' ),
1648
 
1649
  // if album deleted
1650
  if ( wppa_get( 'del-confirm' ) ) {
1651
+
1652
+ if ( ! wp_verify_nonce( wppa_get( 'nonce' ), 'wppa-nonce' ) ) {
1653
+ wp_die('Security check failure');
1654
+ }
1655
 
1656
  $album_owner = $wpdb->get_var( $wpdb->prepare( "SELECT owner FROM $wpdb->wppa_albums WHERE id = %s", wppa_get( 'del-id' ) ) );
1657
  if ( ( $album_owner == '--- public ---' && ! current_user_can('administrator') ) || ! wppa_have_access( wppa_get( 'del-id' ) ) ) {
wppa-wrappers.php CHANGED
@@ -5,7 +5,7 @@
5
  * Contains wrappers for standard php functions
6
  * For security and bug reasons
7
  *
8
- * Version 8.1.01.002
9
  *
10
  */
11
 
@@ -756,6 +756,9 @@ static $allowed_tags;
756
  'id' => true,
757
  'class' => true,
758
  'onsubmit' => true,
 
 
 
759
  ),
760
  'h1' => array(),
761
  'h2' => array(),
5
  * Contains wrappers for standard php functions
6
  * For security and bug reasons
7
  *
8
+ * Version 8.1.02.002
9
  *
10
  */
11
 
756
  'id' => true,
757
  'class' => true,
758
  'onsubmit' => true,
759
+ 'name' => true,
760
+ 'action' => true,
761
+ 'method' => true,
762
  ),
763
  'h1' => array(),
764
  'h2' => array(),
wppa.php CHANGED
@@ -2,7 +2,7 @@
2
  /*
3
  * Plugin Name: WP Photo Album Plus
4
  * Description: Easily manage and display your photo albums and slideshows within your WordPress site.
5
- * Version: 8.1.02.001
6
  * Author: J.N. Breetvelt a.k.a. OpaJaap
7
  * Author URI: http://wppa.opajaap.nl/
8
  * Plugin URI: http://wordpress.org/extend/plugins/wp-photo-album-plus/
@@ -24,7 +24,7 @@ global $wp_version;
24
 
25
  /* WPPA GLOBALS */
26
  global $wppa_api_version;
27
- $wppa_api_version = '8.1.02.001'; // WPPA software version
28
  global $wppa_revno;
29
  $wppa_revno = str_replace( '.', '', $wppa_api_version ); // WPPA db version
30
 
2
  /*
3
  * Plugin Name: WP Photo Album Plus
4
  * Description: Easily manage and display your photo albums and slideshows within your WordPress site.
5
+ * Version: 8.1.02.002
6
  * Author: J.N. Breetvelt a.k.a. OpaJaap
7
  * Author URI: http://wppa.opajaap.nl/
8
  * Plugin URI: http://wordpress.org/extend/plugins/wp-photo-album-plus/
24
 
25
  /* WPPA GLOBALS */
26
  global $wppa_api_version;
27
+ $wppa_api_version = '8.1.02.002'; // WPPA software version
28
  global $wppa_revno;
29
  $wppa_revno = str_replace( '.', '', $wppa_api_version ); // WPPA db version
30