Changeset 3027872

Timestamp:

01/28/2024 05:03:37 PM (2 years ago)

Author:

sudar

Message:

Release v2.4.9

Location:

email-log/trunk

Files:

• email-log.php (modified) (1 diff)
• include/Core/EmailLog.php (modified) (1 diff)
• include/Core/Request/NonceChecker.php (modified) (1 diff)
• languages/email-log.pot (modified) (1 diff)
• readme.txt (modified) (2 diffs)

email-log/trunk/email-log.php

@@ -6 +6 @@
  * Donate Link: http://sudarmuthu.com/if-you-wanna-thank-me
  * Author: Sudar
- * Version: 2.4.8
+ * Version: 2.4.9
  * Author URI: http://sudarmuthu.com/
  * Text Domain: email-log

email-log/trunk/include/Core/EmailLog.php

@@ -18 +18 @@
      * @var string
      */
-    const VERSION = '2.4.8';
+    const VERSION = '2.4.9';
 
     /**

email-log/trunk/include/Core/Request/NonceChecker.php

@@ -38 +38 @@
         if ( isset( $_POST['el-action'] ) ) {
             $action = sanitize_text_field( $_POST['el-action'] );
+
+            $allowed_actions = [
+                'el-download-system-info',
+                'el_license_activate',
+                'el_license_deactivate',
+                'el_bundle_license_activate',
+                'el_bundle_license_deactivate',
+                'el-log-list-export',
+                'el-log-list-export-all',
+                'el-export-logs-with-columns'
+            ];
+
+            if ( ! in_array( $action, $allowed_actions ) ) {
+                return;
+            }
 
             if ( ! isset( $_POST[ $action . '_nonce' ] ) ) {

email-log/trunk/languages/email-log.pot

@@ -1 @@
-# Copyright (C) 2021 Sudar
+# Copyright (C) 2024 Sudar
 # This file is distributed under the same license as the Email Log package.
 msgid ""
 msgstr ""
-"Project-Id-Version: Email Log 2.4.8\n"
+"Project-Id-Version: Email Log 2.4.9\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/email-log\n"
-"POT-Creation-Date: 2021-11-06 15:36:21+00:00\n"
+"POT-Creation-Date: 2024-01-28 17:02:20+00:00\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=utf-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"PO-Revision-Date: 2021-MO-DA HO:MI+ZONE\n"
+"PO-Revision-Date: 2024-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"

email-log/trunk/readme.txt

@@ -4 +4 @@
 Requires PHP: 5.6  
 Requires at least: 4.0  
-Tested up to: 6.1  
-Stable tag: 2.4.8  
+Tested up to: 6.4.2  
+Stable tag: 2.4.9  
 
 Log and view all outgoing emails from WordPress. Very useful if you have to debug email related problems or have to store sent emails for auditing.
@@ -133 +133 @@
 This Readme file was generated using <a href = 'http://sudarmuthu.com/wordpress/wp-readme'>wp-readme</a>, which generates readme files for WordPress Plugins.
 == Changelog ==
+
+= v2.4.9 – (In Dev) =
+- Tweak: Explicitly check the action name and only allow actions based on an allow list.
 
 = v2.4.8 – (2021-11-06) =