Changeset 3366824
- Timestamp:
- 09/24/2025 12:33:24 AM (6 months ago)
- Location:
- ghostgate/trunk
- Files:
-
- 8 edited
-
ghostgate.php (modified) (2 diffs)
-
inc/admin-ui.php (modified) (2 diffs)
-
inc/feature-login-slug.php (modified) (2 diffs)
-
inc/session-manager.php (modified) (1 diff)
-
inc/template-functions.php (modified) (1 diff)
-
inc/two-factor-auth.php (modified) (1 diff)
-
languages/ghostgate.pot (modified) (1 diff)
-
readme.txt (modified) (2 diffs)
Legend:
- Unmodified
- Added
- Removed
-
ghostgate/trunk/ghostgate.php
r3365790 r3366824 4 4 * Plugin URI: https://arce-experience.com/product/ 5 5 * Description: ログインURLを隠して、2FA認証やDoS遮断も可能なWordPress専用セキュリティ強化ツールです。WordPress Login Hardening Plugin. 6 * Version: 1.3. 16 * Version: 1.3.2 7 7 * Author: ジー(Code GEE) 8 8 * Author URI: https://arce-experience.com/developer/ … … 18 18 19 19 // 定数定義 20 define('GHOSTGATE_VERSION', '1.3. 1');20 define('GHOSTGATE_VERSION', '1.3.2'); 21 21 define('GHOSTGATE_PATH', plugin_dir_path(__FILE__)); 22 22 define('GHOSTGATE_URL', plugin_dir_url(__FILE__)); -
ghostgate/trunk/inc/admin-ui.php
r3365790 r3366824 3552 3552 $base_url . 'js/ghost-script-adminui.js', 3553 3553 [], 3554 defined('GHOSTGATE_VERSION') ? GHOSTGATE_VERSION : '1.3. 1',3554 defined('GHOSTGATE_VERSION') ? GHOSTGATE_VERSION : '1.3.2', 3555 3555 true 3556 3556 ); … … 3561 3561 $base_url . 'css/ghost-style-adminui.css', 3562 3562 [], 3563 defined('GHOSTGATE_VERSION') ? GHOSTGATE_VERSION : '1.3. 1'3563 defined('GHOSTGATE_VERSION') ? GHOSTGATE_VERSION : '1.3.2' 3564 3564 ); 3565 3565 } -
ghostgate/trunk/inc/feature-login-slug.php
r3365790 r3366824 114 114 ghostgate_log( "認証成功: IP={$ip}", 'info' ); 115 115 116 // ▼▼ これを追加(wp-login.php が期待するグローバルを用意)▼▼ 117 global $user_login, $error, $errors, $interim_login, $login_link_separator, $pagenow; 118 if (!isset($user_login)) $user_login = ''; 119 if (!isset($error)) $error = ''; 120 if (!isset($errors) || !($errors instanceof WP_Error)) $errors = new WP_Error(); 121 if (!isset($interim_login)) $interim_login = false; 122 if (!isset($login_link_separator)) $login_link_separator = ' | '; 123 $pagenow = 'wp-login.php'; // 一部コードが参照するため念のため 124 // ▲▲ ここまで ▲▲ 125 126 116 127 require ABSPATH . 'wp-login.php'; 117 128 exit; … … 321 332 $handle = 'ghostgate-disable-remember'; 322 333 $src = GHOSTGATE_URL . 'assets/js/ghost-disable-remember.js'; 323 $ver = defined( 'GHOSTGATE_VERSION' ) ? GHOSTGATE_VERSION : '1.3. 1';334 $ver = defined( 'GHOSTGATE_VERSION' ) ? GHOSTGATE_VERSION : '1.3.2'; 324 335 325 336 // セッションが残っていた場合のクリア処理(ログアウト後の安全対策) -
ghostgate/trunk/inc/session-manager.php
r3365790 r3366824 94 94 $handle = 'ghostgate-session-tracker'; 95 95 $src = GHOSTGATE_URL . 'assets/js/ghost-session-tracker.js'; 96 $ver = defined( 'GHOSTGATE_VERSION' ) ? GHOSTGATE_VERSION : '1.3. 1';96 $ver = defined( 'GHOSTGATE_VERSION' ) ? GHOSTGATE_VERSION : '1.3.2'; 97 97 98 98 // UIは秒、JSにはmsで渡す。未設定時は5秒。 -
ghostgate/trunk/inc/template-functions.php
r3365790 r3366824 44 44 $style_handle = 'ghostgate-code-style'; 45 45 $style_url = GHOSTGATE_URL . 'assets/css/ghost-style.css'; 46 $version = defined('GHOSTGATE_VERSION') ? GHOSTGATE_VERSION : '1.3. 1';46 $version = defined('GHOSTGATE_VERSION') ? GHOSTGATE_VERSION : '1.3.2'; 47 47 48 48 // JS注入 -
ghostgate/trunk/inc/two-factor-auth.php
r3365790 r3366824 143 143 plugins_url( '../assets/css/ghost-style-2fa.css', __FILE__ ), 144 144 array(), 145 defined( 'GHOSTGATE_VERSION' ) ? GHOSTGATE_VERSION : '1.3. 1'145 defined( 'GHOSTGATE_VERSION' ) ? GHOSTGATE_VERSION : '1.3.2' 146 146 ); 147 147 } -
ghostgate/trunk/languages/ghostgate.pot
r3365790 r3366824 3 3 msgid "" 4 4 msgstr "" 5 "Project-Id-Version: GhostGate 1.3. 1\n"5 "Project-Id-Version: GhostGate 1.3.2\n" 6 6 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/ghostgate\n" 7 7 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n" -
ghostgate/trunk/readme.txt
r3365790 r3366824 5 5 Tested up to: 6.8 6 6 Requires PHP: 7.4 7 Stable tag: 1.3. 17 Stable tag: 1.3.2 8 8 License: GPLv2 or later 9 9 License URI: https://www.gnu.org/licenses/gpl-2.0.html … … 70 70 71 71 == Changelog == 72 = 1.3.2 - 2025-09-24 = 73 * Fix – Resolved “Undefined variable $user_login / $errors” warnings on the login screen when using the custom login slug or pre-login code screen. The plugin now pre-initializes wp-login.php globals and sets `$pagenow` before loading the core login template. 74 * Fix – Prevented potential “headers already sent” issues by ensuring no output occurs before redirects or the core login inclusion in the 2FA/login slug flow. 75 * Improvement – Hardened login flow compatibility with core by preparing required globals when the plugin takes over the authentication path. 76 * Improvement – Minor internal refactors around request path normalization and IP detection to reduce edge cases in server environments. 77 * Dev – No database changes. Backward compatible with 1.3.1. 78 72 79 = 1.3.0 - 2025-09-22 = 73 80 * Security: Strengthened “Hide wp-json structure” — allowlist now stores **only actually registered routes** (including regex routes) and never breaks parameterized patterns.
Note: See TracChangeset
for help on using the changeset viewer.