Changeset 3371681

Timestamp:

10/02/2025 09:44:45 AM (6 months ago)

Author:

petredobrescu

Message:

Version 4.1.7

• Fix: A potential "Cross-Site Scripting" vulnerability has been patched, responsibly disclosed by the WordFence team;
• Fix: Corrected a few text typos.

Location:

enable-media-replace

Files:

• tags/4.1.7 (copied) (copied from enable-media-replace/trunk)
• tags/4.1.7/classes/ViewController.php (modified) (2 diffs)
• tags/4.1.7/classes/emr-plugin.php (modified) (2 diffs)
• tags/4.1.7/enable-media-replace.php (modified) (2 diffs)
• tags/4.1.7/readme.txt (modified) (2 diffs)
• trunk/classes/ViewController.php (modified) (2 diffs)
• trunk/classes/emr-plugin.php (modified) (2 diffs)
• trunk/enable-media-replace.php (modified) (2 diffs)
• trunk/readme.txt (modified) (2 diffs)

enable-media-replace/tags/4.1.7/classes/ViewController.php

@@ -115 +115 @@
                     break;
                     case self::ERROR_DIRECTORY_SECURITY:
-                        $message = __('Specificed directory is outside the upload directory. This is not allowed for security reasons', 'enable-media-replace');
+                        $message = __('Specified directory is outside the upload directory. This is not allowed for security reasons', 'enable-media-replace');
                         $path = isset($errorData['path']) ? $errorData['path'] : false;
                         $basedir = isset($errorData['basedir']) ? $errorData['basedir'] : false;
@@ -125 +125 @@
                     break;
                     case self::ERROR_DIRECTORY_NOTEXIST:
-                        $message = __('Specificed new directory does not exist. Path must be a relative path from the upload directory and exist', 'enable-media-replace');
+                        $message = __('Specified new directory does not exist. Path must be a relative path from the upload directory and exist', 'enable-media-replace');
                     break;
 

enable-media-replace/tags/4.1.7/classes/emr-plugin.php

@@ -643 +643 @@
    * @todo Note this returns the wrong date, ie. server date not corrected for timezone. Function could be removed altogether, not sure about purpose.
    */
-    public function get_modified_date($atts)
-    {
-        $id=0;
-        $format= '';
-
-        extract(shortcode_atts(array(
-        'id' => '',
-        'format' => get_option('date_format') . " " . get_option('time_format'),
-        ), $atts));
-
-        if ($id == '') {
-            return false;
-        }
-
+    public function get_modified_date($args)
+    {
+
+        $id = isset($args['id']) ? intval($args['id']) : false; 
+        $format = isset($args['format']) ? sanitize_text_field($args['format']) : false; 
+
+        if (false === $id)
+        {
+          return false; 
+        }
+ 
         // Get path to file
         $current_file = get_attached_file($id);
@@ -667 +664 @@
         $filetime = filemtime($current_file);
 
+        if (false === $format)
+        {
+          $format = get_option( 'date_format' ) . ' ' . get_option( 'time_format' );
+        }
+
         if (false !== $filetime) {
             // do date conversion
-            return date($format, $filetime);
+            return wp_date($format, $filetime);
         }
 

enable-media-replace/tags/4.1.7/enable-media-replace.php

@@ -2 +2 @@
 /**
  * Plugin Name: Enable Media Replace
- * Plugin URI: https://shortpixel.com
+ * Plugin URI: https://wordpress.org/plugins/enable-media-replace/
  * Description: Enable replacing media files by uploading a new file in the "Edit Media" section of the WordPress Media Library.
- * Version: 4.1.6
+ * Version: 4.1.7
  * Author: ShortPixel
  * Author URI: https://shortpixel.com
@@ -26 +26 @@
  */
 
-define( 'EMR_VERSION', '4.1.6' );
+define( 'EMR_VERSION', '4.1.7' );
 
 if ( ! defined( 'ABSPATH' ) ) {

enable-media-replace/tags/4.1.7/readme.txt

@@ -6 +6 @@
 Tested up to: 6.8
 Requires PHP: 5.6
-Stable tag: 4.1.6
+Stable tag: 4.1.7
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -80 +80 @@
 
 == Changelog ==
+
+= 4.1.7 =
+
+Release date: October 2, 2025
+* Fix: A potential "Cross-Site Scripting" vulnerability has been patched, responsibly disclosed by the WordFence team;
+* Fix: Corrected a few text typos.
 
 = 4.1.6 =

enable-media-replace/trunk/classes/ViewController.php

@@ -115 +115 @@
                     break;
                     case self::ERROR_DIRECTORY_SECURITY:
-                        $message = __('Specificed directory is outside the upload directory. This is not allowed for security reasons', 'enable-media-replace');
+                        $message = __('Specified directory is outside the upload directory. This is not allowed for security reasons', 'enable-media-replace');
                         $path = isset($errorData['path']) ? $errorData['path'] : false;
                         $basedir = isset($errorData['basedir']) ? $errorData['basedir'] : false;
@@ -125 +125 @@
                     break;
                     case self::ERROR_DIRECTORY_NOTEXIST:
-                        $message = __('Specificed new directory does not exist. Path must be a relative path from the upload directory and exist', 'enable-media-replace');
+                        $message = __('Specified new directory does not exist. Path must be a relative path from the upload directory and exist', 'enable-media-replace');
                     break;
 

enable-media-replace/trunk/classes/emr-plugin.php

@@ -643 +643 @@
    * @todo Note this returns the wrong date, ie. server date not corrected for timezone. Function could be removed altogether, not sure about purpose.
    */
-    public function get_modified_date($atts)
-    {
-        $id=0;
-        $format= '';
-
-        extract(shortcode_atts(array(
-        'id' => '',
-        'format' => get_option('date_format') . " " . get_option('time_format'),
-        ), $atts));
-
-        if ($id == '') {
-            return false;
-        }
-
+    public function get_modified_date($args)
+    {
+
+        $id = isset($args['id']) ? intval($args['id']) : false; 
+        $format = isset($args['format']) ? sanitize_text_field($args['format']) : false; 
+
+        if (false === $id)
+        {
+          return false; 
+        }
+ 
         // Get path to file
         $current_file = get_attached_file($id);
@@ -667 +664 @@
         $filetime = filemtime($current_file);
 
+        if (false === $format)
+        {
+          $format = get_option( 'date_format' ) . ' ' . get_option( 'time_format' );
+        }
+
         if (false !== $filetime) {
             // do date conversion
-            return date($format, $filetime);
+            return wp_date($format, $filetime);
         }
 

enable-media-replace/trunk/enable-media-replace.php

@@ -2 +2 @@
 /**
  * Plugin Name: Enable Media Replace
- * Plugin URI: https://shortpixel.com
+ * Plugin URI: https://wordpress.org/plugins/enable-media-replace/
  * Description: Enable replacing media files by uploading a new file in the "Edit Media" section of the WordPress Media Library.
- * Version: 4.1.6
+ * Version: 4.1.7
  * Author: ShortPixel
  * Author URI: https://shortpixel.com
@@ -26 +26 @@
  */
 
-define( 'EMR_VERSION', '4.1.6' );
+define( 'EMR_VERSION', '4.1.7' );
 
 if ( ! defined( 'ABSPATH' ) ) {

enable-media-replace/trunk/readme.txt

@@ -6 +6 @@
 Tested up to: 6.8
 Requires PHP: 5.6
-Stable tag: 4.1.6
+Stable tag: 4.1.7
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -80 +80 @@
 
 == Changelog ==
+
+= 4.1.7 =
+
+Release date: October 2, 2025
+* Fix: A potential "Cross-Site Scripting" vulnerability has been patched, responsibly disclosed by the WordFence team;
+* Fix: Corrected a few text typos.
 
 = 4.1.6 =