WordPress.org
Get WordPress

Plugin Directory

Changeset 3348393


Ignore:
Timestamp:
08/22/2025 01:22:00 AM (7 months ago)
Author:
ArtistScope
Message:

Security fix

Location:
wp-copysafe-web/trunk
Files:
3 edited

Legend:

Unmodified
Added
Removed

  • wp-copysafe-web/trunk/function.php

    r3121744 r3348393  
    66function wpcsw_ajaxprocess()
    77{
     8    if( ! current_user_can('manage_options')) {
     9        wp_send_json_error();
     10    }
     11
    812    if ($_POST["fucname"] == "check_upload_nonce")
    913    {

  • wp-copysafe-web/trunk/readme.txt

    r3347839 r3348393  
    66Requires at least: 5.0
    77Tested up to: 6.8
    8 Stable tag: 4.2
     8Stable tag: 4.3
    99License: GPLv2 or later
    1010License URI: http://www.gnu.org/licenses/gpl-2.0.html
    … …  
    9898== Changelog ==
    9999
     100= 4.3 =
     101* Security fix related to logged-in users.
     102
    100103= 4.2 =
    101104* Security fix and compatibility check for WP 6.8.

  • wp-copysafe-web/trunk/wp-copysafe-web.php

    r3328683 r3348393  
    77Author: ArtistScope
    88Text Domain: wp-copysafe-web
    9 Version: 4.2
     9Version: 4.3
    1010License: GPLv2
    1111Author URI: https://artistscope.com/
    … …  
    410410function wpcsw_ajax_action() {
    411411    add_filter('upload_dir', 'wpcsw_upload_dir');
     412
     413    $response = [];
    412414   
    413415    // check ajax nonce
    414416    //check_ajax_referer( __FILE__ );
    415417    if (current_user_can('upload_files')) {
    416         $response = [];
    417418        // handle file upload
    418419        $id = media_handle_upload(
Note: See TracChangeset for help on using the changeset viewer.