WordPress.org
Get WordPress

Plugin Directory

Changeset 3175140


Ignore:
Timestamp:
10/24/2024 04:33:04 PM (17 months ago)
Author:
suiteplugins
Message:

Committing 1.1.1 to trunk

Location:
gallery-for-ultimate-member/trunk
Files:
3 edited

Legend:

Unmodified
Added
Removed

  • gallery-for-ultimate-member/trunk/gallery-for-ultimate-member.php

    r3170401 r3175140  
    44 * Plugin URI: https://suiteplugins.com/
    55 * Description: Allow your user to upload photos from their Ultimate Member profile
    6  * Version: 1.1.0
     6 * Version: 1.1.1
    77 * Requires at least: 5.2
    88 * Requires PHP:      5.4

  • gallery-for-ultimate-member/trunk/includes/um-gallery-ajax.php

    r3170401 r3175140  
    329329                    }
    330330                   
    331                     // Check if the file type is allowed
    332                     if ( ! in_array( $file['type'], $allowed_file_types ) ) {
     331                    $file_info = wp_check_filetype_and_ext( $file['tmp_name'], $file['name'] );
     332                    if ( ! $file_info['ext'] || ! $file_info['type'] || ! in_array( $file_info['type'], $allowed_file_types ) ) {
    333333                        wp_send_json_error( array( 'message' => 'File type not allowed.' ) );
    334334                    }
     335
    335336                    $album_id   = isset( $_POST['album_id'] ) ? absint( $_POST['album_id'] ) : 0;
    336337                    $tmp_file   = $file['tmp_name'];

  • gallery-for-ultimate-member/trunk/readme.txt

    r3170401 r3175140  
    66Requires PHP: 5.4
    77Tested up to: 6.6.2
    8 Stable tag: 1.1.0
     8Stable tag: 1.1.1
    99License: GPLv2 or later
    1010License URI: http://www.gnu.org/licenses/gpl-2.0.html
    … …  
    115115== Changelog ==
    116116
     117= 1.1.1 =
     118Fixed: Improved file upload security
     119
    117120= 1.1.0 =
    118121Fixed: Reported Security issue with file uploads
Note: See TracChangeset for help on using the changeset viewer.