WordPress.org
Get WordPress

Plugin Directory

Changeset 3171873


Ignore:
Timestamp:
10/19/2024 10:07:44 AM (18 months ago)
Author:
wp-buy
Message:

Fix security issue related to restore_defaults action inside admin panel

Location:
wp-content-copy-protector
Files:
30 added
3 edited

Legend:

Unmodified
Added
Removed

  • wp-content-copy-protector/trunk/admin-core.php

    r2954531 r3171873  
    1010add_action('admin_footer','alert_message');
    1111
    12 if ( isset( $_POST['Restore_defaults'] ) )
     12if(isset($_POST["Restore_defaults"]) && (isset($_POST["_Restore_defaults"]) && wp_verify_nonce( $_POST[ '_Restore_defaults' ], 'Restore_defaults_nonce' )))
    1313{
    1414    update_option("wccp_settings" , "");
    … …  
    1717}
    1818
    19 if(isset($_POST["Save_settings"]) && (isset($_POST["make_this_form_verified_nonce"]) && wp_verify_nonce( $_POST[ 'make_this_form_verified_nonce' ], 'make_form_nonce_action' )))
     19if(isset($_POST["Save_settings"]) && (isset($_POST["_Save_settings"]) && wp_verify_nonce( $_POST[ '_Save_settings' ], 'Save_settings_nonce' )))
    2020{
    2121    //----------------------------------------------------list the options array values
    … …  
    174174<form method="POST">
    175175<input type="hidden" value="update" name="action">
    176 <?php wp_nonce_field('make_form_nonce_action','make_this_form_verified_nonce'); ?>
     176<?php wp_nonce_field('Save_settings_nonce','_Save_settings'); ?>
     177<?php wp_nonce_field('Restore_defaults_nonce','_Restore_defaults'); ?>
    177178<div class="simpleTabs">
    178179<ul class="simpleTabsNavigation">

  • wp-content-copy-protector/trunk/preventer-index.php

    r3132004 r3171873  
    44Plugin URI: http://wordpress.org/plugins/w-p-content-copy-protector/
    55Description: This wp plugin protect the posts content from being copied by any other web site author , you dont want your content to spread without your permission!!
    6 Version: 3.5.9
     6Version: 3.6.1
    77Author: wp-buy
    88Text Domain: wp-content-copy-protector

  • wp-content-copy-protector/trunk/readme.txt

    r3132031 r3171873  
    55License URI: http://www.gnu.org/licenses/gpl-2.0.html
    66Requires at least: 4.8
    7 Tested up to: 6.6.1
    8 Stable tag: 3.5.9
     7Tested up to: 6.6.2
     8Stable tag: 3.6.1
    99
    1010This WP plugin protects posts from being copied (content copy protection). Keep your content safe from unauthorized distribution!
    … …  
    9999
    100100== Changelog ==
     101= 3.6.1 =
     102<ul>
     103<li>Fix security issue related to restore_defaults action inside admin panel</li>
     104<li>Checking with wordpress version 6.6.2</li>
     105</ul>
    101106= 3.5.9 =
    102107<ul>
Note: See TracChangeset for help on using the changeset viewer.