Changeset 1720717

Timestamp:

08/28/2017 04:28:13 PM (9 years ago)

Author:

Jayjdk

Message:

Update to version 1.3.2

Location:

jayj-quicktag/trunk

Files:

• README.md (modified) (2 diffs)
• jayj-quicktag.php (modified) (6 diffs)
• readme.txt (modified) (2 diffs)
• uninstall.php (added)

jayj-quicktag/trunk/README.md

@@ -1 +1 @@
 # Jayj Quicktag
 
-**Contributors:** Jayjdk  
-**Tags:** quicktag, quicktags, editor, quick, tag, generator, import, export  
-**Requires at least:** 3.3  
-**Tested up to:** 4.1  
-**Stable tag:** 1.3.1  
+**Contributors:** Jayjdk
+**Tags:** quicktag, quicktags, editor, quick, tag, generator, import, export
+**Requires at least:** 3.3
+**Tested up to:** 4.1
+**Stable tag:** 1.3.2
 
 Allows you easily to add custom Quicktags to the post editor.
@@ -61 +61 @@
 
 ## Changelog
+
+### 1.3.2
+* Fix CSRF issue reported by Plugin Vulnerabilities. Thanks!
+* Use JSON for exporting and importing quicktags
 
 ### 1.3.1

jayj-quicktag/trunk/jayj-quicktag.php

@@ -2 +2 @@
 /**
  * Plugin Name: Jayj Quicktag
- * Plugin URI:  http://jayj.dk/plugins/jayj-quicktag/
+ * Plugin URI:  https://jayj.dk/plugins/jayj-quicktag/
  * Description: Allows you to easily add custom quicktags to the editor.
  * Author:      Jesper Johansen
- * Author URI:  http://jayj.dk
- * Version:     1.3.1
+ * Author URI:  https://jayj.dk
+ * Version:     1.3.2
  * License:     GPLv2 or later
  * Text Domain: jayj-quicktag
@@ -12 +12 @@
  */
 
-/* Register uninstall function. */
-register_uninstall_hook( __FILE__, 'jayj_quicktag_uninstall' );
-
 /* Load the textdomain for translation. */
 load_plugin_textdomain( 'jayj-quicktag', false, dirname( plugin_basename( __FILE__ ) ) . '/languages' );
 
 /**
- * Removes the Quicktags from the database
- *
- * @since 1.0.0
- */
-function jayj_quicktag_uninstall() {
-    delete_option( 'jayj_qt_settings' );
-}
-
-/**
  * Adds the options page
  *
@@ -63 +51 @@
 
     <form action="options.php" method="post">
-
         <?php
             /*
@@ -69 +56 @@
              */
             if ( isset( $_POST['jayj-quicktag-import-save'] ) ) :
+                check_admin_referer( 'jayj-quicktag_import' );
 
                 $options = get_option( 'jayj_qt_settings' );
-                $data = maybe_unserialize( stripslashes_deep( $_POST['jayj-quicktag-import'] ) );
+                $data = json_decode( stripslashes($_POST['jayj-quicktag-import'] ), true);
 
                 // Merge the old and the new Quicktags.
@@ -192 +180 @@
     <!-- Export/Import metaboxes -->
     <form action="" method="post" name="jayj-quicktag-import" class="jayj-quicktag-postboxes">
+        <?php wp_nonce_field( 'jayj-quicktag_import' ); ?>
 
         <div id="poststuff"><div class="metabox-holder">
@@ -207 +196 @@
                     <li><?php _e( 'Or you could paste it into <code>Jayj Quicktag > Import Quicktags</code> on another WordPress install.', 'jayj-quicktag' ); ?></li>
                 </ul>
-                <textarea rows="10" cols="60" onclick="this.focus(); this.select();"><?php echo esc_textarea( serialize( $options ) ); ?></textarea>
+                <textarea rows="10" cols="60" onclick="this.focus(); this.select();"><?php echo esc_textarea( json_encode( $options ) ); ?></textarea>
             </div>
         </div> <!-- .postbox -->

jayj-quicktag/trunk/readme.txt

@@ -5 +5 @@
 License: GPLv2 or later
 Requires at least: 3.3
-Tested up to: 4.1
-Stable tag: 1.3.1
+Tested up to: 4.8.1
+Stable tag: 1.3.2
 
 Allows you easily to add custom Quicktags to the post editor.
@@ -63 +63 @@
 == Changelog ==
 
-= 1.3.1
+= 1.3.2 =
+* Fix CSRF issue reported by Plugin Vulnerabilities. Thanks!
+* Use JSON for exporting and importing quicktags
+
+= 1.3.1 =
 * Added Spanish translation by [Andrew Kurtis](http://www.webhostinghub.com/).
 * Tested with WordPress 3.8