WP Realtime Sitemap - Version 1.4.1

Version Description

  • Minor security update added nonce field to the form, to check request came from your site and not someone elses site who was using the same plugin.
Download this release

Release Info

Developer Rincewind
Plugin Icon wp plugin WP Realtime Sitemap
Version 1.4.1
Comparing to
See all releases

Code changes from version 1.4 to 1.4.1

Files changed (2) hide show
  1. readme.txt +4 -1
  2. wp-realtime-sitemap.php +7 -2
readme.txt CHANGED
@@ -1,6 +1,6 @@
1
  === WP Realtime Sitemap ===
2
  Contributors: rincewind
3
- Donate link: http://www.daniel-tweedy.co.uk/redir/wp-realtime-sitemap-donate
4
  Tags: seo, navigation, sitemap, sitemaps
5
  Requires at least: 3.0
6
  Tested up to: 3.0
@@ -90,6 +90,9 @@ Please see the installation page for information about the short code usage for
90
 
91
  == Changelog ==
92
 
 
 
 
93
  = 1.4 =
94
  * Hot Fix: Removed comment replacement code in favour of shortcodes instead, this was needed to fix an issue on some blogs where php memory limit is set to 64MB.
95
  * Added options to choose to have post count and post date output with the sitemap.
1
  === WP Realtime Sitemap ===
2
  Contributors: rincewind
3
+ Donate link: http://www.daniel-tweedy.co.uk/redir/wp-realtime-sitemap-donate/
4
  Tags: seo, navigation, sitemap, sitemaps
5
  Requires at least: 3.0
6
  Tested up to: 3.0
90
 
91
  == Changelog ==
92
 
93
+ = 1.4.1 =
94
+ * Minor security update added nonce field to the form, to check request came from your site and not someone elses site who was using the same plugin.
95
+
96
  = 1.4 =
97
  * Hot Fix: Removed comment replacement code in favour of shortcodes instead, this was needed to fix an issue on some blogs where php memory limit is set to 64MB.
98
  * Added options to choose to have post count and post date output with the sitemap.
wp-realtime-sitemap.php CHANGED
@@ -3,8 +3,8 @@
3
  /*
4
  Plugin Name: WP Realtime Sitemap
5
  Plugin URI: http://www.daniel-tweedy.co.uk/redir/wp-realtime-sitemap-home/
6
- Description: Adds a sitemap to your Wordpress blog that is always up-to-date. Add `<!--wp-realtime-sitemap-->` to any page or post and the site map will be added there. Use Settings->WP Realtime Sitemap to set options.
7
- Version: 1.4
8
  Author: Daniel Tweedy
9
  Author URI: http://www.daniel-tweedy.co.uk/
10
  License: GPL2
@@ -29,12 +29,16 @@ License: GPL2
29
  load_plugin_textdomain('wp-realtime-sitemap', false, dirname(plugin_basename(__FILE__)) . '/language');
30
 
31
  function wprs_options_form() {
 
32
  if (!current_user_can('manage_options')) {
33
  wp_die( __('You do not have sufficient permissions to access this page.', 'wp-realtime-sitemap') );
34
  }
35
 
36
  // Check if we have a posted form to deal with.
37
  if (isset($_POST['info_update'])) {
 
 
 
38
  // Get current options from the database.
39
  $options = get_option('plugin_wp_realtime_sitemap_settings');
40
 
@@ -66,6 +70,7 @@ function wprs_options_form() {
66
 
67
  <form method="post">
68
  <h3>Globals</h3>
 
69
  <table class="form-table">
70
  <tr valign="top">
71
  <th scope="row"><label for="sort_column">Sort column</label></th>
3
  /*
4
  Plugin Name: WP Realtime Sitemap
5
  Plugin URI: http://www.daniel-tweedy.co.uk/redir/wp-realtime-sitemap-home/
6
+ Description: Adds a sitemap to your Wordpress blog that is always up-to-date. Add `[wp-realtime-sitemap show="all"]` to any page or post and the site map will be added there. Use Settings->WP Realtime Sitemap to set options.
7
+ Version: 1.4.1
8
  Author: Daniel Tweedy
9
  Author URI: http://www.daniel-tweedy.co.uk/
10
  License: GPL2
29
  load_plugin_textdomain('wp-realtime-sitemap', false, dirname(plugin_basename(__FILE__)) . '/language');
30
 
31
  function wprs_options_form() {
32
+ // check user has access to change settings for this plugin.
33
  if (!current_user_can('manage_options')) {
34
  wp_die( __('You do not have sufficient permissions to access this page.', 'wp-realtime-sitemap') );
35
  }
36
 
37
  // Check if we have a posted form to deal with.
38
  if (isset($_POST['info_update'])) {
39
+ // check admin security.
40
+ check_admin_referer('wp-realtime-sitemap');
41
+
42
  // Get current options from the database.
43
  $options = get_option('plugin_wp_realtime_sitemap_settings');
44
 
70
 
71
  <form method="post">
72
  <h3>Globals</h3>
73
+ <?php wp_nonce_field('wp-realtime-sitemap'); ?>
74
  <table class="form-table">
75
  <tr valign="top">
76
  <th scope="row"><label for="sort_column">Sort column</label></th>