WordPress.org
Get WordPress

Plugin Directory

Changeset 1433446


Ignore:
Timestamp:
06/09/2016 02:26:28 AM (10 years ago)
Author:
websitezcom
Message:

More secure fix

Location:
wp-mobile-detector
Files:
2 edited
92 copied

Legend:

Unmodified
Added
Removed

  • wp-mobile-detector/tags/3.8/readme.txt

    r1429481 r1433446  
    55Requires at least: 2.7
    66Tested up to: 4.5.2
    7 Stable tag: 3.7
     7Stable tag: 3.8
    88
    99WP Mobile Detector automatically detects standard and advanced mobile devices and displays a compatible wordpress mobile theme.
    … …  
    7979== Changelog ==
    8080
     81= 3.8 =
     82
     83+ Improved exploit fix.
     84
    8185= 3.7 =
    8286

  • wp-mobile-detector/tags/3.8/resize.php

    r1429397 r1433446  
    2626        exit();
    2727    }else{
    28         $acceptable_extensions = ['png','gif','jpg','jpeg','jif','jfif','svg'];
     28        $acceptable_extensions = ['png','gif','jpg','jpeg','jif','jfif'];
    2929        $info = pathinfo($_REQUEST['src']);
    30         // Check file extension
    31         if(in_array($info['extension'],$acceptable_extensions)){
     30        $type = exif_imagetype($_REQUEST['src']);
     31        // Check file extension & file signature
     32        if(in_array($info['extension'],$acceptable_extensions) && ($type === 1 || $type === 2 || $type === 3)){
    3233            file_put_contents($path, file_get_contents($_REQUEST['src']));
    3334            if(file_exists(dirname(__FILE__)."/libs/image/PHP5/easyphpthumbnail.class.php")){

  • wp-mobile-detector/trunk/readme.txt

    r1429481 r1433446  
    55Requires at least: 2.7
    66Tested up to: 4.5.2
    7 Stable tag: 3.7
     7Stable tag: 3.8
    88
    99WP Mobile Detector automatically detects standard and advanced mobile devices and displays a compatible wordpress mobile theme.
    … …  
    7979== Changelog ==
    8080
     81= 3.8 =
     82
     83+ Improved exploit fix.
     84
    8185= 3.7 =
    8286

  • wp-mobile-detector/trunk/resize.php

    r1429397 r1433446  
    2626        exit();
    2727    }else{
    28         $acceptable_extensions = ['png','gif','jpg','jpeg','jif','jfif','svg'];
     28        $acceptable_extensions = ['png','gif','jpg','jpeg','jif','jfif'];
    2929        $info = pathinfo($_REQUEST['src']);
    30         // Check file extension
    31         if(in_array($info['extension'],$acceptable_extensions)){
     30        $type = exif_imagetype($_REQUEST['src']);
     31        // Check file extension & file signature
     32        if(in_array($info['extension'],$acceptable_extensions) && ($type === 1 || $type === 2 || $type === 3)){
    3233            file_put_contents($path, file_get_contents($_REQUEST['src']));
    3334            if(file_exists(dirname(__FILE__)."/libs/image/PHP5/easyphpthumbnail.class.php")){
Note: See TracChangeset for help on using the changeset viewer.