WordPress.org
Get WordPress

Plugin Directory

Changeset 1107222


Ignore:
Timestamp:
03/06/2015 10:36:26 PM (11 years ago)
Author:
jquindlen
Message:

0.9.13

  • Updated: Replaced depreciated calls to wpdb::escape() with esc_sql() instead
  • Updated: Step 2 of "Reporting an Issue" now correctly uses $user_info->display_name instead of $user_info->user_login
Location:
wpbugtracktor
Files:
203 added
8 edited

Legend:

Unmodified
Added
Removed

  • wpbugtracktor/trunk/nbproject/private/private.xml

    r1103408 r1107222  
    44    <editor-bookmarks xmlns="http://www.netbeans.org/ns/editor-bookmarks/2" lastBookmarkId="0"/>
    55    <open-files xmlns="http://www.netbeans.org/ns/projectui-open-files/2">
    6         <group>
    7             <file>file:/D:/PORTABLES/EasyPHP-5.3.3/www/wordpress2/wp-content/plugins/wpbugtracktor/php/installer/installer.php</file>
    8         </group>
     6        <group/>
    97    </open-files>
    108</project-private>

  • wpbugtracktor/trunk/php/admin/adminajax.php

    r1044192 r1107222  
    2929        if ( isset( $_POST['iDisplayStart'] ) && $_POST['iDisplayLength'] != '-1' )
    3030        {
    31                 $sLimit = "LIMIT ".$wpdb->escape( $_POST['iDisplayStart'] ).", ".$wpdb->escape( $_POST['iDisplayLength'] );
     31                $sLimit = "LIMIT ".esc_sql( $_POST['iDisplayStart'] ).", ".esc_sql( $_POST['iDisplayLength'] );
    3232        }
    3333
    … …  
    4444                        {
    4545                                $sOrder .= $aColumns[ intval( $_POST['iSortCol_'.$i] ) ]."
    46                                         ".$wpdb->escape( $_POST['sSortDir_'.$i] ) .", ";
     46                                        ".esc_sql( $_POST['sSortDir_'.$i] ) .", ";
    4747                        }
    4848                }
    … …  
    6868                for ( $i=0 ; $i<count($aColumns) ; $i++ )
    6969                {
    70                         $sWhere .= $aColumns[$i]." LIKE '%".$wpdb->escape( $_POST['sSearch'] )."%' OR ";
     70                        $sWhere .= $aColumns[$i]." LIKE '%".esc_sql( $_POST['sSearch'] )."%' OR ";
    7171                }
    7272                $sWhere = substr_replace( $sWhere, "", -3 );
    … …  
    8787                                $sWhere .= " AND ";
    8888                        }
    89                         $sWhere .= $aColumns[$i]." LIKE '%".$wpdb->escape($_POST['sSearch_'.$i])."%' ";
     89                        $sWhere .= $aColumns[$i]." LIKE '%".esc_sql($_POST['sSearch_'.$i])."%' ";
    9090                }
    9191        }
    … …  
    318318        wpBugTracktorCheckAdminPermissions();
    319319
    320         $value = $wpdb->escape($_POST['value']);
     320        $value = esc_sql($_POST['value']);
    321321        $col = intval($_POST['column']);
    322322        $row_raw = $_POST['row_id'];
    … …  
    512512        @$wpbt_primkey = intval($_POST['wpbt_primkey']);
    513513        $wpbt_projectid = intval($_POST['projectid']);
    514         $wpbt_title = $wpdb->escape($_POST['title']);
    515         $wpbt_desc = $wpdb->escape($_POST['desc']);
     514        $wpbt_title = esc_sql($_POST['title']);
     515        $wpbt_desc = esc_sql($_POST['desc']);
    516516
    517517        if(@!isset($_POST['wpbt_primkey'])) {
    … …  
    545545
    546546        @$wpbt_primkey = $_POST['wpbt_primkey'];
    547         $wpbt_version = $wpdb->escape($_POST['wpbt_version']);
    548         $wpbt_codename = $wpdb->escape($_POST['wpbt_codename']);
    549         $wpbt_desc = $wpdb->escape($_POST['wpbt_desc']);
     547        $wpbt_version = esc_sql($_POST['wpbt_version']);
     548        $wpbt_codename = esc_sql($_POST['wpbt_codename']);
     549        $wpbt_desc = esc_sql($_POST['wpbt_desc']);
    550550        $wpbt_project = intval($_POST['wpbt_project']);
    551551        $wpbt_isreleased = intval($_POST['wpbt_isreleased']);
    552         $wpbt_startdate = $wpdb->escape($_POST['wpbt_startdate']);
    553         $wpbt_releasedate = $wpdb->escape($_POST['wpbt_releasedate']);
     552        $wpbt_startdate = esc_sql($_POST['wpbt_startdate']);
     553        $wpbt_releasedate = esc_sql($_POST['wpbt_releasedate']);
    554554
    555555        if(@!isset($_POST['wpbt_primkey'])) {
    … …  
    667667        wpBugTracktorCheckAdminPermissions();
    668668
    669         @$wpBugTracktorPublish = $wpdb->escape($_POST['wpBugTracktorPublish']);
     669        @$wpBugTracktorPublish = esc_sql($_POST['wpBugTracktorPublish']);
    670670        @$wpBugTracktorPublishPageId = intval($_POST['wpBugTracktorPublishPageId']);
    671671

  • wpbugtracktor/trunk/php/admin/adminpages.php

    r1050391 r1107222  
    117117       
    118118        if(@isset($_POST['wpbt_new_project_prefix']) && @isset($_POST['wpbt_new_project_title']) && @isset($_POST['wpbt_new_project_description'])) {
    119             $prefix = $wpdb->escape($_POST['wpbt_new_project_prefix']);
    120             $title = $wpdb->escape($_POST['wpbt_new_project_title']);
    121             $description = $wpdb->escape($_POST['wpbt_new_project_description']);
    122             $owner_id = $wpdb->escape($_POST['wpbt_new_project_owner_id']);
     119            $prefix = esc_sql($_POST['wpbt_new_project_prefix']);
     120            $title = esc_sql($_POST['wpbt_new_project_title']);
     121            $description = esc_sql($_POST['wpbt_new_project_description']);
     122            $owner_id = esc_sql($_POST['wpbt_new_project_owner_id']);
    123123            $sql = "INSERT INTO `{$wpdb->prefix}wpbugtracktor_projects` (`primkey`, `title`, `description`, `project_prefix`, `owner_id`, `users_assigned`) VALUES (NULL, '{$title}', '{$description}', '{$prefix}', '{$owner_id}', '1');";
    124124            $wpdb->query($sql);

  • wpbugtracktor/trunk/php/admin/publicajax.php

    r1043814 r1107222  
    1111        global $wpdb, $current_user;
    1212
    13         @$title = $wpdb->escape($_POST['wpBugTracktorReportFormTitle']);
    14         @$description = $wpdb->escape($_POST['wpBugTracktorReportFormDescription']);
     13        @$title = esc_sql($_POST['wpBugTracktorReportFormTitle']);
     14        @$description = esc_sql($_POST['wpBugTracktorReportFormDescription']);
    1515        @$type = intval($_POST['wpBugTracktorReportIssueType']);
    1616
    … …  
    2424        }
    2525
    26         $reporter_email = $wpdb->escape($_POST['wpBugTracktorReportFormEmail']);
     26        $reporter_email = esc_sql($_POST['wpBugTracktorReportFormEmail']);
    2727
    2828        // IP ADDRESS
    2929        if ( @isset($_SERVER["REMOTE_ADDR"]) )    {
    30             $reporter_ip = $wpdb->escape($_SERVER["REMOTE_ADDR"]);
     30            $reporter_ip = esc_sql($_SERVER["REMOTE_ADDR"]);
    3131        } else if ( @isset($_SERVER["HTTP_X_FORWARDED_FOR"]) )    {
    32             $reporter_ip = $wpdb->escape($_SERVER["HTTP_X_FORWARDED_FOR"]);
     32            $reporter_ip = esc_sql($_SERVER["HTTP_X_FORWARDED_FOR"]);
    3333        } else if ( @isset($_SERVER["HTTP_CLIENT_IP"]) )    {
    34             $reporter_ip = $wpdb->escape($_SERVER["HTTP_CLIENT_IP"]);
     34            $reporter_ip = esc_sql($_SERVER["HTTP_CLIENT_IP"]);
    3535        } else {
    3636            $reporter_ip = __('Unknown IP Address', 'wpbugtracktor');
    … …  
    4747
    4848        if(@isset($_POST['wpBugTracktorReportSeverity'])) {
    49             $severity_priority = $wpdb->escape($_POST['wpBugTracktorReportSeverity']);
     49            $severity_priority = esc_sql($_POST['wpBugTracktorReportSeverity']);
    5050        } else {
    5151            $severity_priority = 0;
    … …  
    6161            wpBugTracktorCheckAdminPermissions();
    6262            $target_fix_for_milestone_id = intval($_POST['wpBugTracktorReportMilestone']);
    63             $tags = $wpdb->escape($_POST['wpBugTracktorReportTags']);   
     63            $tags = esc_sql($_POST['wpBugTracktorReportTags']);   
    6464        } else {
    6565            $target_fix_for_milestone_id = 0;

  • wpbugtracktor/trunk/php/issues/issues.php

    r1081728 r1107222  
    622622            if($issues[0]['reporter_id']!=0) {
    623623                $user_info = get_userdata($issues[0]['reporter_id']);
    624                 $username = $user_info->user_login;
     624                $username = $user_info->display_name;
    625625            } else {
    626626                $username = __('Guest', 'wpbugtracktor');

  • wpbugtracktor/trunk/php/settings/settings.php

    r873209 r1107222  
    133133                            $wpBugTracktorOptions = get_option($this->adminOptionsName);
    134134                            if (isset($_POST['mainpage'])) {
    135                                     $wpBugTracktorOptions['mainpage'] = $wpdb->escape($_POST['mainpage']);
     135                                    $wpBugTracktorOptions['mainpage'] = esc_sql($_POST['mainpage']);
    136136                            }
    137137                            if (isset($_POST['permission_to_report_issues'])) {
    138                                     $wpBugTracktorOptions['permission_to_report_issues'] = $wpdb->escape($_POST['permission_to_report_issues']);
     138                                    $wpBugTracktorOptions['permission_to_report_issues'] = esc_sql($_POST['permission_to_report_issues']);
    139139                            }   
    140140                            if (isset($_POST['permission_to_comment'])) {
    141                                     $wpBugTracktorOptions['permission_to_comment'] = $wpdb->escape($_POST['permission_to_comment']);
     141                                    $wpBugTracktorOptions['permission_to_comment'] = esc_sql($_POST['permission_to_comment']);
    142142                            }                               
    143143
    144144                            if (isset($_POST['admin_capability'])) {
    145145                                    global $wp_roles;
    146                                     $wpBugTracktorOptions['admin_capability'] = $wpdb->escape($_POST['admin_capability']);
     146                                    $wpBugTracktorOptions['admin_capability'] = esc_sql($_POST['admin_capability']);
    147147                                    if($wpBugTracktorOptions['admin_capability']=='administrator') {
    148148                                        $wp_roles->remove_cap( 'editor', 'manage_wpbugtracktor' );
    … …  
    171171                           
    172172                            if(@isset($_POST['wpBugTracktorStatus'])) { // Update options
    173                                 $wpBugTracktorOptions['wpBugTracktorStatus'] = $wpdb->escape($_POST['wpBugTracktorStatus']);
     173                                $wpBugTracktorOptions['wpBugTracktorStatus'] = esc_sql($_POST['wpBugTracktorStatus']);
    174174                            }                           
    175175

  • wpbugtracktor/trunk/readme.txt

    r1103408 r1107222  
    55Requires at least: 3.5.0
    66Tested up to: 4.2
    7 Stable tag: 0.9.12
     7Stable tag: 0.9.13
    88
    9 The best native bug tracking and issue management system for Wordpress.
     9An ajax powered native bug tracking and issue management system for Wordpress.
    1010
    1111== Description ==
    … …  
    5050== Changelog ==
    5151
     52= 0.9.13 =
     53* Updated: Replaced depreciated calls to wpdb::escape() with esc_sql() instead
     54* Updated: Step 2 of "Reporting an Issue" now correctly uses $user_info->display_name instead of $user_info->user_login
     55
    5256= 0.9.12 =
    53  * Hebrew (עִבְרִית) translation provided by http://atar4u.com/
     57* Added: Hebrew (עִבְרִית) translation provided by http://atar4u.com/
    5458
    5559= 0.9.11 =

  • wpbugtracktor/trunk/wpbugtracktor.php

    r1103408 r1107222  
    44Plugin URI: http://indiedevbundle.com/app/idb-ultimate-wordpress-bundle/#idbbugtracker
    55Description: IDB Bug Tracker is a free, open source, and full featured bug tracking and issue management system built atop of Wordpress.
    6 Version: 0.9.12
     6Version: 0.9.13
    77Author: IndieDevBundle.com
    88Author URI: http://indiedevbundle.com/app/idb-ultimate-wordpress-bundle/#idbbugtracker
    … …  
    3333
    3434/* Global variables: */
    35 $wpscbt_version = '0.9.12';
    36 $wpscbt_version_int = 009012; // Mm_p__ which is 1 digit for Major, 2 for minor, and 3 digits for patch updates, so version 2.0.14 would be 200014
     35$wpscbt_version = '0.9.13';
     36$wpscbt_version_int = 009013; // Mm_p__ which is 1 digit for Major, 2 for minor, and 3 digits for patch updates, so version 2.0.14 would be 200014
    3737
    3838if(session_id() == '') {
    … …  
    5252require_once(WP_PLUGIN_DIR . '/wpbugtracktor/php/actions/actions.php');
    5353require_once(WP_PLUGIN_DIR . '/wpbugtracktor/php/settings/settings.php');
    54 $wpBugTracktorSettings = new wpBugTracktorSettings(); // Initialize settings.  One the first run, this will set options
     54$wpBugTracktorSettings = new wpBugTracktorSettings(); // Initialize settings.  On the first run, this will set options
    5555require_once(WP_PLUGIN_DIR . '/wpbugtracktor/php/projects/projects.php');
    5656require_once(WP_PLUGIN_DIR . '/wpbugtracktor/php/milestones/milestones.php');
Note: See TracChangeset for help on using the changeset viewer.