WordPress.org
Get WordPress

Plugin Directory

Changeset 3376388


Ignore:
Timestamp:
10/10/2025 04:06:02 PM (6 months ago)
Author:
Harmonic_Design
Message:

update to 1.6.1

Location:
hdforms
Files:
22 added
3 edited

Legend:

Unmodified
Added
Removed

  • hdforms/trunk/includes/functions.php

    r3312721 r3376388  
    728728        $upload_dir = wp_upload_dir();
    729729        $upload_dir = $upload_dir['basedir'] . '/hdforms/';
    730         // make sure the start of the dir is the hdf upload dir
    731         if (substr($dir, 0, strlen($upload_dir)) == $upload_dir) {
     730
     731        $real_path = realpath($upload_dir) . $dir;
     732
     733        // Check if the actual parsed path is still within the HDForms upload dir
     734        if ($real_path && strpos($real_path, $upload_dir) === 0) {
    732735            return true;
    733736        } else {

  • hdforms/trunk/index.php

    r3312721 r3376388  
    66    * Author: Harmonic Design
    77    * Author URI: https://harmonicdesign.ca/
    8     * Version: 1.6
     8    * Version: 1.6.1
    99*/
    1010
    … …  
    1414
    1515if (!defined('HDF_PLUGIN_VERSION')) {
    16     define('HDF_PLUGIN_VERSION', 20250618);
     16    define('HDF_PLUGIN_VERSION', 20251010);
    1717}
    1818

  • hdforms/trunk/readme.txt

    r3312721 r3376388  
    33Tags: hdforms, form, form builder, contact, contact form, hdf, hd form, hdform, contact builder, contact form builder, send contact form
    44Requires at least: 5.2.0
    5 Tested up to: 6.7.2
    6 Stable tag: 1.6
     5Tested up to: 6.8.3
     6Stable tag: 1.6.1
    77Requires PHP: 7.0
    88License: GPLv2 or later
    … …  
    9999
    100100== Changelog ==
     101= 1.6.1 =
     102* Oct 10 2025
     103* Security update for file uploads
     104
    101105= 1.6 =
    102106* June 16 2025
    … …  
    152156
    153157== Upgrade Notice ==
    154 *  Critical Bug Fix
     158* Security update for file uploads
Note: See TracChangeset for help on using the changeset viewer.