WordPress.org
Get WordPress

Plugin Directory

Changeset 3053314


Ignore:
Timestamp:
03/18/2024 10:05:58 AM (2 years ago)
Author:
pieregister
Message:

3.8.3.3

Location:
pie-register/trunk
Files:
4 edited

Legend:

Unmodified
Added
Removed

  • pie-register/trunk/classes/base.php

    r3047826 r3053314  
    25622562                        $temp_file_name = sanitize_file_name("file_".abs( crc32( wp_generate_password( rand(7,12) ) ."_".time() ) )."_".$form_id.".".$extension);
    25632563                        $temp_file_url  = $upload_dir['baseurl']."/piereg_users_files/".$user_id."/"."pie_".$field_slug."/".$temp_file_name;
     2564
    25642565                        // Allowed Mime Types in WordPress
     2566                        $allowed_mime_types = get_allowed_mime_types();
     2567                        $valid_mime_type = wp_check_filetype($temp_file_name,$allowed_mime_types);
     2568
     2569                        // Validate file extension type
    25652570                        $validate_file_ext_type = wp_check_filetype_and_ext( $temp_file_url, $temp_file_name );
    2566                         if ( ( $validate_file_ext_type['ext'] !== false ) && ( $validate_file_ext_type['type'] !== false) )
     2571                       
     2572                        if ( ( $valid_mime_type['type'] !== false ) && ( $validate_file_ext_type['ext'] !== false ) && ( $validate_file_ext_type['type'] !== false) )
    25672573                        {
    25682574                            if(!move_uploaded_file($_FILES[$field_slug]['tmp_name'],$temp_dir."/".$temp_file_name)){
    … …  
    26012607                    $temp_file_name = sanitize_file_name("file_".abs( crc32( wp_generate_password( rand(7,12) ) ."_".time() ) )."_".$form_id.".".$extension);
    26022608                    $temp_file_url  = $upload_dir['baseurl']."/piereg_users_files/".$user_id."/"."pie_".$field_slug."/".$temp_file_name;
     2609                   
    26032610                    // Allowed Mime Types in WordPress
     2611                    $allowed_mime_types = get_allowed_mime_types();
     2612                    $valid_mime_type = wp_check_filetype($temp_file_name,$allowed_mime_types);
     2613
     2614                    // Validate file extension type
    26042615                    $validate_file_ext_type = wp_check_filetype_and_ext( $temp_file_url, $temp_file_name );
    2605                     if ( ( $validate_file_ext_type['ext'] !== false ) && ( $validate_file_ext_type['type'] !== false) )
     2616                   
     2617                    if ( ( $valid_mime_type['type'] !== false ) && ( $validate_file_ext_type['ext'] !== false ) && ( $validate_file_ext_type['type'] !== false) )
    26062618                    {
    26072619                        if(!move_uploaded_file($_FILES[$field_slug]['tmp_name'],$temp_dir."/".$temp_file_name)){

  • pie-register/trunk/classes/profile_admin.php

    r3047826 r3053314  
    820820                    $temp_file_name = sanitize_file_name("file_".crc32($user_id."_".$extension."_".time()).".".$extension);
    821821                    $temp_file_url  = $upload_dir['baseurl']."/piereg_users_files/".$user_id."/".$field_slug."/".$temp_file_name;
     822
    822823                    // Allowed Mime Types in WordPress
     824                    $allowed_mime_types = get_allowed_mime_types();
     825                    $valid_mime_type = wp_check_filetype($temp_file_name,$allowed_mime_types);
     826
     827                    // Validate file extension type
    823828                    $validate_file_ext_type = wp_check_filetype_and_ext( $temp_file_url, $temp_file_name );
    824                     if ( ( $validate_file_ext_type['ext'] !== false ) && ( $validate_file_ext_type['type'] !== false) )
     829                   
     830                    if ( ( $valid_mime_type['type'] !== false ) && ( $validate_file_ext_type['ext'] !== false ) && ( $validate_file_ext_type['type'] !== false) )
    825831                    {
    826832                        if(!move_uploaded_file($_FILES[$field_slug]['tmp_name'],$temp_dir."/".$temp_file_name) && $required){
    … …  
    846852                $temp_file_name = sanitize_file_name("file_".crc32($user_id."_".$extension."_".time()).".".$extension);
    847853                $temp_file_url  = $upload_dir['baseurl']."/piereg_users_files/".$user_id."/".$field_slug."/".$temp_file_name;
     854               
    848855                // Allowed Mime Types in WordPress
     856                $allowed_mime_types = get_allowed_mime_types();
     857                $valid_mime_type = wp_check_filetype($temp_file_name,$allowed_mime_types);
     858
     859                // Validate file extension type
    849860                $validate_file_ext_type = wp_check_filetype_and_ext( $temp_file_url, $temp_file_name );
    850                 if ( ( $validate_file_ext_type['ext'] !== false ) && ( $validate_file_ext_type['type'] !== false) )
     861               
     862                if ( ( $valid_mime_type['type'] !== false ) && ( $validate_file_ext_type['ext'] !== false ) && ( $validate_file_ext_type['type'] !== false) )
    851863                {
    852864                    if(!move_uploaded_file($_FILES[$field_slug]['tmp_name'],$temp_dir."/".$temp_file_name) && $required){

  • pie-register/trunk/pie-register.php

    r3047826 r3053314  
    55Plugin URI: https://pieregister.com/
    66Description: Create custom user registration forms, drag & drop form builder, send invitation codes, add conditional logic, 2-step authentication, assign user roles, accept payments and more!
    7 Version: 3.8.3.2
     7Version: 3.8.3.3
    88Author: Pie Register
    99Author URI: https://pieregister.com/

  • pie-register/trunk/readme.txt

    r3047826 r3053314  
    66Tested up to: 6.4
    77Requires PHP: 5.6
    8 Stable tag: 3.8.3.2
     8Stable tag: 3.8.3.3
    99License: GNU Version 2 or Any Later Version
    1010License URI: https://www.gnu.org/licenses/gpl-3.0.html
    … …  
    232232
    233233== CHANGELOG ==
     234### 3.8.3.3
     235
     236*Released Date 18th March 2024*
     237
     238* Fixed: File type and extension validations to the file upload field.
     239
    234240### 3.8.3.2
    235241
Note: See TracChangeset for help on using the changeset viewer.