WordPress.org
Get WordPress

Plugin Directory

Changeset 2918111


Ignore:
Timestamp:
05/27/2023 03:25:43 PM (3 years ago)
Author:
zuda
Message:

enhanced security update by Planet Zuda in conjunction with AI

Location:
redirect-editor/trunk
Files:
3 edited

Legend:

Unmodified
Added
Removed

  • redirect-editor/trunk/form.php

    r2918031 r2918111  
     1<?php if ( ! defined( 'ABSPATH' ) ) {
     2    exit;
     3}
     4?>
     5
    16<div id="banner">
    27    <div class='wrap'>

  • redirect-editor/trunk/readme.txt

    r2918031 r2918111  
    5656It adds in some protection from certain SEO software that has flaws which we patched.
    5757== Screenshots ==
     58== 3.0.2 ==
     59Security enhanced in conjunction with Planet Zuda and AI
    5860== 3.0.1 ==
    5961sped up load time using AI on the existing code

  • redirect-editor/trunk/redirect-editor.php

    r2918031 r2918111  
    33/*
    44Plugin Name: Search Engine Optimization Redirect Editor
    5 Version: 3.0.1
     5Version: 3.0.2
    66Plugin URI: https://planetzuda.com
    77Description: If you need to redirect whether for search engine optimization purposes or otherwise you can use our app to  redirect to any page. We provide a direct link to your xml sitemap which you can submit to search engines manually.  We  protect you against popular SEO plugins that damage your rankings by making your sitemap invisible to Google's bots by telling them to not index it, which is a free and automatically applied feature. More search features are coming. Our redirect editor is extremely useful and highly secure, which has been tested in bug bounties by white hat hackers, including our security and seo company.
    … …  
    2626Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
    2727*/
     28if ( ! defined( 'ABSPATH' ) ) {
     29    exit;
     30}
    2831$redirectEditorPlugin = new Redirect_Editor_Plugin();
    2932
    … …  
    248251        ]);
    249252
    250         require_once ('form.php');
     253        require_once(plugin_dir_path(__FILE__) . 'form.php');
    251254    }
    252255
    … …  
    306309
    307310        // run if we're actually processing data for the redirect_editor. Researchers we secured this, if you do find a flaw, please let us know. Also we did not write the original code. We made a security update, adopted it, fixed it, released security update.
    308         if (current_user_can('manage_options')) {
     311        if (current_user_can('manage_options') && is_user_logged_in()) {
    309312            if (! isset($_POST['function']) || $_POST['function'] != $this->_redirectEditorSaveActionFunctionName) {
    310313                if (isset($_POST['function']) && $_POST['function'] == $this->_redirectEditorSaveExperimentalActionName) {
    311314                    if ($this->checkNonce($this->_redirectEditorSaveExperimentalActionNonceName, $this->_redirectEditorSaveExperimentalActionName)) {
    312                         print 'Sorry, your nonce did not verify.';
    313                         exit();
     315                        wp_die('failed, that nonce was incorrect.');
     316                       
    314317                    } else {
    315318                        $this->save_experimental();
    316319                    }
    317320                }
    318                 // edirect-editor-activate
    319321                if (isset($_POST['function']) && $_POST['function'] == $this->_redirectEditorActivateActionName) {
    320322                    if ($this->checkNonce($this->_redirectEditorActivateActionNonceName, $this->_redirectEditorActivateActionName)) {
    321                         print 'Sorry, your nonce did not verify.';
    322                         exit();
     323                        wp_die('Sorry, your nonce did not verify.');
     324                   
    323325                    } else {
    324326                        $this->activate();
    … …  
    329331
    330332            if ($this->checkNonce($this->_redirectEditorSaveActionNonceName, $this->_redirectEditorSaveActionName)) {
    331                 print 'Sorry, your nonce did not verify.';
    332                 exit();
     333                wp_die('Sorry, your nonce did not verify.');
     334     
    333335            } else {
    334336                if (isset($_POST['redirects'])) {
Note: See TracChangeset for help on using the changeset viewer.