WordPress.org
Get WordPress

Plugin Directory

Changeset 1649274


Ignore:
Timestamp:
05/01/2017 11:49:55 PM (9 years ago)
Author:
feedsapi
Message:

Security update, tagged version 2.5.1

Location:
rss-post-importer
Files:
3 edited
1 copied

Legend:

Unmodified
Added
Removed

  • rss-post-importer/tags/2.5.1

    r1649254 r1649274  
    66  Description: This plugin lets you set up an import posts from one or several rss-feeds and save them as posts on your site, simple and flexible.
    77  Author: feedsapi
    8   Version: 2.5.0
     8  Version: 2.5.1
    99  Author URI: https://www.feedsapi.org/
    1010  License: GPLv2 or later
    … …  
    3333
    3434if (!defined('RSS_PI_VERSION')) {
    35     define('RSS_PI_VERSION', '2.5.0');
     35    define('RSS_PI_VERSION', '2.5.1');
    3636}
    3737

  • rss-post-importer/trunk/app/classes/admin/class-rss-pi-stats.php

    r1337944 r1649274  
    3434                isset($_POST["rss_till_date"]))
    3535            {
    36                 $start_time = strtotime($_POST["rss_from_date"]);
    37                 $end_time = strtotime($_POST["rss_till_date"]);
     36                $start_time = strtotime(sanitize_text_field($_POST["rss_from_date"]));
     37                $end_time = strtotime(sanitize_text_field($_POST["rss_till_date"]));
    3838            } else {
    39                
    40                
     39
     40
    4141                $date_today           = date("Y-m-d");// current date
    4242                $date_today_unix      = strtotime($date_today);
    4343                $date_seven_days_unix = strtotime(date("Y-m-d", strtotime($date_today)) . " -7 day");
    44                
     44
    4545                // for last seven days stats
    4646                $start_time = $date_seven_days_unix;
    4747                $end_time = $date_today_unix;
    48                
     48
    4949                /*Old Code working according to first post*/
    5050                //$start_time = get_the_time("U", $oldest_post);
    5151                //$end_time = get_the_time("U", $newest_post);
    52                
     52
    5353            }
    5454
    … …  
    119119        /*
    120120         * Prints the line chart between two dates
    121          * param $start_time : timestamp 
    122          * param $end_time : timestamp 
     121         * param $start_time : timestamp
     122         * param $end_time : timestamp
    123123         */
    124124        function get_line_chart_data_between($start_time, $end_time) {
    … …  
    288288
    289289            ?>
    290             var data_pie_chart = google.visualization.arrayToDataTable([ 
     290            var data_pie_chart = google.visualization.arrayToDataTable([
    291291            <?php
    292292            echo "['Feed', 'Posts imported'], \n";
    … …  
    431431
    432432        function show_date_pickers() {
     433            $from_date = $_POST['rss_from_date'] || '';
     434            $till_date = $_POST['rss_till_date'] || '';
     435
     436            $from_date = sanitize_text_field($from_date);
     437            $till_date = sanitize_text_field($till_date);
     438
     439            $from_date = (bool)strtotime($from_date) ? $from_date : '';
     440            $till_date = (bool)strtotime($from_date) ? $till_date : '';
     441
    433442            ?>
    434443            <div class="rss_pi_stats_date">
    435444                <div class="rss_filter_heading">Filter results:</div>
    436445                <hr>
    437                 <label>From: <input type="text" id="from_date" name="rss_from_date" value="<?php echo (isset($_POST["rss_from_date"])) ? $_POST["rss_from_date"] : ""; ?>" /> </label>
    438                 <label>Till: <input type="text" id="till_date" name="rss_till_date" value="<?php echo (isset($_POST["rss_till_date"])) ? $_POST["rss_till_date"] : ""; ?>" /> </label>
     446                <label>From: <input type="text" id="from_date" name="rss_from_date" value="<?php echo $from_date; ?>" /> </label>
     447                <label>Till: <input type="text" id="till_date" name="rss_till_date" value="<?php echo $till_date; ?>" /> </label>
    439448                <input type="submit" id="submit-rss_filter_stats" name="rss_filter_stats" class="button button-primary button-large " value="Filter">
    440449                <br>

  • rss-post-importer/trunk/index.php

    r1647420 r1649274  
    66  Description: This plugin lets you set up an import posts from one or several rss-feeds and save them as posts on your site, simple and flexible.
    77  Author: feedsapi
    8   Version: 2.5.0
     8  Version: 2.5.1
    99  Author URI: https://www.feedsapi.org/
    1010  License: GPLv2 or later
    … …  
    3333
    3434if (!defined('RSS_PI_VERSION')) {
    35     define('RSS_PI_VERSION', '2.5.0');
     35    define('RSS_PI_VERSION', '2.5.1');
    3636}
    3737

  • rss-post-importer/trunk/readme.txt

    r1647386 r1649274  
    55Requires at least: 3.5
    66Tested up to: 4.7.4
    7 Stable tag: 2.5.0
     7Stable tag: 2.5.1
    88License: GPLv2 or later
    99License URI: http://www.gnu.org/licenses/gpl-2.0.html
    … …  
    129129== Change Log ==
    130130
     131= Version 2.5.1 =
     132 * Important security update
     133
    131134= Version 2.5.0 =
    132135 * Security update
Note: See TracChangeset for help on using the changeset viewer.