WordPress.org
Get WordPress

Plugin Directory

Changeset 3257145


Ignore:
Timestamp:
03/17/2025 01:04:51 PM (13 months ago)
Author:
blueglassinteractive
Message:

v 2.7.12

Location:
job-postings
Files:
554 added
3 edited

Legend:

Unmodified
Added
Removed

  • job-postings/trunk/include/class-job-get-uploaded-file.php

    r3020217 r3257145  
    3939            // Secure file directory
    4040            $filedir = apply_filters('job-postings/uploaded-files-path', JOBPOSTINGSFILESDIR);
    41 
    42             $file =  $filedir . $filename;
    43             $file = urldecode( $file );
    44 
    45             if (!$filedir || !is_file($file)) {
     41           
     42            // Sanitize filename to prevent directory traversal
     43            $filename = basename(sanitize_file_name($filename)); // Remove any directory components and sanitize filename
     44           
     45            $file = $filedir . $filename;
     46            $file = urldecode($file);
     47           
     48            // Verify the file is within allowed directory
     49            $real_file = realpath($file);
     50            $real_dir = realpath($filedir);
     51           
     52            if (!$filedir || !$real_file || !$real_dir ||
     53                strpos($real_file, $real_dir) !== 0 ||
     54                !is_file($real_file)) {
    4655                status_header(404);
    4756                die('404 — File not found.');

  • job-postings/trunk/job-postings.php

    r3183891 r3257145  
    11<?php
    22/*
    3 Plugin Name: Jobs for Wordpress
     3Plugin Name: Job Postings
    44Plugin URI: https://wordpress.org/plugins/job-postings/
    55Description: WordPress plugin that make it easy to add job postings to your company’s website in a structured way.
    66Author: BlueGlass
    7 Version: 2.7.11
     7Version: 2.7.12
    88Author URI: http://blueglass.ch/
    99Text Domain: job-postings
    1010Domain Path: /languages
     11License: GPLv2 or later
     12License URI: http://www.gnu.org/licenses/gpl-2.0.html
     13
    1114*/
    1215
    … …  
    1417if( ! defined( 'ABSPATH' ) ) exit; // Exit if accessed directly
    1518
    16 define('JOBPOSTINGSVERSION', '2.7.11');
     19define('JOBPOSTINGSVERSION', '2.7.12');
    1720define('JOBPOSTINGSPATH', plugin_dir_path( __FILE__ ));
    1821define('JOBPOSTINGSURL', plugin_dir_url(__FILE__));

  • job-postings/trunk/readme.txt

    r3183891 r3257145  
    1 === Jobs for WordPress ===
     1=== Job Postings ===
    22Contributors: blueglassinteractive, cfoellmann
    33Tags: jobs, recruiter, employment, career, vacancy
    44Requires at least: 5.0
    5 Tested up to: 6.4.3
    6 Stable tag: 2.7.11
     5Tested up to: 6.7.2
     6Stable tag: 2.7.12
    77License: GPLv2 or later
    88License URI: http://www.gnu.org/licenses/gpl-2.0.html
    … …  
    1212
    1313== Description ==
    14 Jobs for WordPress is a powerfull WordPress plugin that make it easy to add job postings to your company’s website in a structured way. While you can comfortably create and manage job postings in a very user-friendly way, they are also automatically structured with schema.org. Thus, they are technically easy to read for Google and have a high chance of being displayed and ranked well in search results and you can save on expensive postings on job platforms.
     14Job Postings is a powerfull WordPress plugin that make it easy to add job postings to your company’s website in a structured way. While you can comfortably create and manage job postings in a very user-friendly way, they are also automatically structured with schema.org. Thus, they are technically easy to read for Google and have a high chance of being displayed and ranked well in search results and you can save on expensive postings on job platforms.
    1515
    1616
    … …  
    4141== Changelog ==
    4242
     43= 2.7.12 =
     44* Fix for Authenticated (Subscriber+) Arbitrary File Read
     45
    4346= 2.7.11 =
    4447* Hot fix for HTML escape in confirmation
    … …  
    670673
    671674= 1.5.0 =
    672 * As we integrated "Apply now" editor, on all job entries page disapears the applicant data preview (name, email, phone, etc), because of structure change. This field's there now related to the new "Apply now" editor. On entry details page all the data still in place, no worries :)
     675* As we integrated "Apply now" editor, on all job entries page disapears the applicant data preview (name, email, phone, etc), because of structure change. This field's there now related to the new "Apply now" editor.
    673676
    674677= 1.3.0 =
Note: See TracChangeset for help on using the changeset viewer.