Plugin Directory

Changeset 2889302 for wp-slimstat


Ignore:
Timestamp:
03/29/2023 02:52:17 PM (3 years ago)
Author:
mostafa.s1990
Message:

Update to version 4.9.4 from GitHub

Location:
wp-slimstat
Files:
6 edited
1 copied

Legend:

Unmodified
Added
Removed
  • wp-slimstat/tags/4.9.4/admin/view/wp-slimstat-db.php

    r2843920 r2889302  
    649649
    650650    public static function count_records( $_column = 'id', $_where = '', $_use_date_filters = true ) {
     651        // Validating the column
     652        if (in_array($_column, ['id', 'ip', 'other_ip', 'username', 'email', 'country', 'location', 'city', 'referer', 'resource', 'searchterms', 'notes', 'visit_id', 'server_latency', 'page_performance', 'browser', 'browser_version', 'browser_type', 'platform', 'language', 'fingerprint', 'user_agent', 'resolution', 'screen_width', 'screen_height', 'content_type', 'category', 'author', 'content_id', 'outbound_resource', 'tz_offset', 'dt_out', 'dt']) === false) {
     653            return;
     654        }
     655
    651656        $distinct_column = ( $_column != 'id' ) ? "DISTINCT $_column" : $_column;
    652657        $_where = self::get_combined_where( $_where, $_column, $_use_date_filters );
  • wp-slimstat/tags/4.9.4/readme.txt

    r2869327 r2889302  
    55Requires at least: 5.6
    66Requires PHP: 7.4+
    7 Tested up to: 6.1
    8 Stable tag: 4.9.3.3
     7Tested up to: 6.2
     8Stable tag: 4.9.4
    99
    1010== Description ==
     
    5050
    5151== Changelog ==
     52= 4.9.4 =
     53* [Fix] Hardened plugin security and sanitization of arguments
     54
    5255= 4.9.3.3 =
    5356* [Fix] Disabled shortcode's filtering WHERE statement and make security harder.
  • wp-slimstat/tags/4.9.4/wp-slimstat.php

    r2869327 r2889302  
    44Plugin URI: https://wp-slimstat.com/
    55Description: The leading web analytics plugin for WordPress
    6 Version: 4.9.3.3
     6Version: 4.9.4
    77Author: Jason Crouse, VeronaLabs
    88Text Domain: wp-slimstat
     
    735735     */
    736736    public static function slimstat_shortcode( $_attributes = '', $_content = '' ) {
    737         extract( shortcode_atts( array(
     737        shortcode_atts( array(
    738738            'f' => '',  // recent, popular, count, widget
    739739            'w' => '',  // column to use (for recent, popular and count) or widget to use
    740740            's' => ' ', // separator
    741741            'o' => 0    // offset for counters
    742         ), $_attributes ) );
     742        ), $_attributes );
     743
     744        $f = isset($_attributes['f']) ? $_attributes['f'] : '';
     745        $w = isset($_attributes['w']) ? $_attributes['w'] : '';
     746        $s = isset($_attributes['s']) ? $_attributes['s'] : '';
     747        $o = isset($_attributes['o']) ? $_attributes['o'] : 0;
    743748
    744749        $output = $where = $as_column = '';
  • wp-slimstat/trunk/admin/view/wp-slimstat-db.php

    r2843920 r2889302  
    649649
    650650    public static function count_records( $_column = 'id', $_where = '', $_use_date_filters = true ) {
     651        // Validating the column
     652        if (in_array($_column, ['id', 'ip', 'other_ip', 'username', 'email', 'country', 'location', 'city', 'referer', 'resource', 'searchterms', 'notes', 'visit_id', 'server_latency', 'page_performance', 'browser', 'browser_version', 'browser_type', 'platform', 'language', 'fingerprint', 'user_agent', 'resolution', 'screen_width', 'screen_height', 'content_type', 'category', 'author', 'content_id', 'outbound_resource', 'tz_offset', 'dt_out', 'dt']) === false) {
     653            return;
     654        }
     655
    651656        $distinct_column = ( $_column != 'id' ) ? "DISTINCT $_column" : $_column;
    652657        $_where = self::get_combined_where( $_where, $_column, $_use_date_filters );
  • wp-slimstat/trunk/readme.txt

    r2869327 r2889302  
    55Requires at least: 5.6
    66Requires PHP: 7.4+
    7 Tested up to: 6.1
    8 Stable tag: 4.9.3.3
     7Tested up to: 6.2
     8Stable tag: 4.9.4
    99
    1010== Description ==
     
    5050
    5151== Changelog ==
     52= 4.9.4 =
     53* [Fix] Hardened plugin security and sanitization of arguments
     54
    5255= 4.9.3.3 =
    5356* [Fix] Disabled shortcode's filtering WHERE statement and make security harder.
  • wp-slimstat/trunk/wp-slimstat.php

    r2869327 r2889302  
    44Plugin URI: https://wp-slimstat.com/
    55Description: The leading web analytics plugin for WordPress
    6 Version: 4.9.3.3
     6Version: 4.9.4
    77Author: Jason Crouse, VeronaLabs
    88Text Domain: wp-slimstat
     
    735735     */
    736736    public static function slimstat_shortcode( $_attributes = '', $_content = '' ) {
    737         extract( shortcode_atts( array(
     737        shortcode_atts( array(
    738738            'f' => '',  // recent, popular, count, widget
    739739            'w' => '',  // column to use (for recent, popular and count) or widget to use
    740740            's' => ' ', // separator
    741741            'o' => 0    // offset for counters
    742         ), $_attributes ) );
     742        ), $_attributes );
     743
     744        $f = isset($_attributes['f']) ? $_attributes['f'] : '';
     745        $w = isset($_attributes['w']) ? $_attributes['w'] : '';
     746        $s = isset($_attributes['s']) ? $_attributes['s'] : '';
     747        $o = isset($_attributes['o']) ? $_attributes['o'] : 0;
    743748
    744749        $output = $where = $as_column = '';
Note: See TracChangeset for help on using the changeset viewer.