From 8f7b0be8b05355d45ce62ca99697c38a35472968 Mon Sep 17 00:00:00 2001 From: itthinx Date: Tue, 20 Oct 2015 20:42:07 +0200 Subject: [PATCH] increased version to 1.8.1; added missing esc_url() --- groups.php | 4 ++-- lib/admin/groups-admin-capabilities-add.php | 4 ++-- lib/admin/groups-admin-capabilities-edit.php | 4 ++-- lib/admin/groups-admin-capabilities-remove.php | 6 +++--- lib/admin/groups-admin-groups-add.php | 4 ++-- lib/admin/groups-admin-groups-edit.php | 4 ++-- lib/admin/groups-admin-groups-remove.php | 6 +++--- readme.txt | 9 ++++++--- 8 files changed, 22 insertions(+), 19 deletions(-) diff --git a/groups.php b/groups.php index 6cf33e6..3587b3a 100644 --- a/groups.php +++ b/groups.php @@ -21,7 +21,7 @@ * Plugin Name: Groups * Plugin URI: http://www.itthinx.com/plugins/groups * Description: Groups provides group-based user membership management, group-based capabilities and content access control. - * Version: 1.8.0 + * Version: 1.8.1 * Author: itthinx * Author URI: http://www.itthinx.com * Donate-Link: http://www.itthinx.com @@ -30,7 +30,7 @@ if ( !defined( 'ABSPATH' ) ) { exit; } -define( 'GROUPS_CORE_VERSION', '1.8.0' ); +define( 'GROUPS_CORE_VERSION', '1.8.1' ); define( 'GROUPS_FILE', __FILE__ ); if ( !defined( 'GROUPS_CORE_DIR' ) ) { define( 'GROUPS_CORE_DIR', untrailingslashit( plugin_dir_path( __FILE__ ) ) ); diff --git a/lib/admin/groups-admin-capabilities-add.php b/lib/admin/groups-admin-capabilities-add.php index 743cb82..7366151 100644 --- a/lib/admin/groups-admin-capabilities-add.php +++ b/lib/admin/groups-admin-capabilities-add.php @@ -52,7 +52,7 @@ function groups_admin_capabilities_add() { '' . '' . Groups_Admin::render_messages() . - '
' . + '' . '
' . '
' . @@ -69,7 +69,7 @@ function groups_admin_capabilities_add() { wp_nonce_field( 'capabilities-add', GROUPS_ADMIN_GROUPS_NONCE, true, false ) . '' . '' . - '' . __( 'Cancel', GROUPS_PLUGIN_DOMAIN ) . '' . + '' . __( 'Cancel', GROUPS_PLUGIN_DOMAIN ) . '' . '
' . '
' . // .capability.new '
' . diff --git a/lib/admin/groups-admin-capabilities-edit.php b/lib/admin/groups-admin-capabilities-edit.php index 9b14fe5..08a6757 100644 --- a/lib/admin/groups-admin-capabilities-edit.php +++ b/lib/admin/groups-admin-capabilities-edit.php @@ -60,7 +60,7 @@ function groups_admin_capabilities_edit( $capability_id ) { Groups_Admin::render_messages() . - '
' . + '' . '
' . '' . @@ -78,7 +78,7 @@ function groups_admin_capabilities_edit( $capability_id ) { wp_nonce_field( 'capabilities-edit', GROUPS_ADMIN_GROUPS_NONCE, true, false ) . '' . '' . - '' . __( 'Cancel', GROUPS_PLUGIN_DOMAIN ) . '' . + '' . __( 'Cancel', GROUPS_PLUGIN_DOMAIN ) . '' . '
' . '' . // .capability.edit '
' . diff --git a/lib/admin/groups-admin-capabilities-remove.php b/lib/admin/groups-admin-capabilities-remove.php index d127528..23f6139 100644 --- a/lib/admin/groups-admin-capabilities-remove.php +++ b/lib/admin/groups-admin-capabilities-remove.php @@ -54,7 +54,7 @@ function groups_admin_capabilities_remove( $capability_id ) { __( 'Remove a capability', GROUPS_PLUGIN_DOMAIN ) . '' . '' . - '
' . + '' . '
' . '' . '
' . '' . // .capability.remove '
' . @@ -153,7 +153,7 @@ function groups_admin_capabilities_bulk_remove() { $output .= ''; } $output .= ''; - $output .= '' . __( 'Cancel', GROUPS_PLUGIN_DOMAIN ) . ''; + $output .= '' . __( 'Cancel', GROUPS_PLUGIN_DOMAIN ) . ''; $output .= ''; $output .= ''; diff --git a/lib/admin/groups-admin-groups-add.php b/lib/admin/groups-admin-groups-add.php index 878eea6..f7f38bb 100644 --- a/lib/admin/groups-admin-groups-add.php +++ b/lib/admin/groups-admin-groups-add.php @@ -63,7 +63,7 @@ function groups_admin_groups_add() { $output .= Groups_Admin::render_messages(); - $output .= '
'; + $output .= ''; $output .= '
'; $output .= '
'; @@ -118,7 +118,7 @@ function groups_admin_groups_add() { $output .= wp_nonce_field( 'groups-add', GROUPS_ADMIN_GROUPS_NONCE, true, false ); $output .= ''; $output .= ''; - $output .= '' . __( 'Cancel', GROUPS_PLUGIN_DOMAIN ) . ''; + $output .= '' . __( 'Cancel', GROUPS_PLUGIN_DOMAIN ) . ''; $output .= '
'; $output .= '
'; // .group.new $output .= '
'; diff --git a/lib/admin/groups-admin-groups-edit.php b/lib/admin/groups-admin-groups-edit.php index 0865fcd..60c52b9 100644 --- a/lib/admin/groups-admin-groups-edit.php +++ b/lib/admin/groups-admin-groups-edit.php @@ -72,7 +72,7 @@ function groups_admin_groups_edit( $group_id ) { $output .= Groups_Admin::render_messages(); - $output .= '
'; + $output .= ''; $output .= '
'; $output .= ''; @@ -157,7 +157,7 @@ function groups_admin_groups_edit( $group_id ) { $output .= wp_nonce_field( 'groups-edit', GROUPS_ADMIN_GROUPS_NONCE, true, false ); $output .= ''; $output .= ''; - $output .= '' . __( 'Cancel', GROUPS_PLUGIN_DOMAIN ) . ''; + $output .= '' . __( 'Cancel', GROUPS_PLUGIN_DOMAIN ) . ''; $output .= '
'; $output .= ''; // .group.edit $output .= '
'; diff --git a/lib/admin/groups-admin-groups-remove.php b/lib/admin/groups-admin-groups-remove.php index efc9700..8bf9c6d 100644 --- a/lib/admin/groups-admin-groups-remove.php +++ b/lib/admin/groups-admin-groups-remove.php @@ -54,7 +54,7 @@ function groups_admin_groups_remove( $group_id ) { __( 'Remove a group', GROUPS_PLUGIN_DOMAIN ) . '' . '' . - '
' . + '' . '
' . '' . '
' . '' . // .group.remove '
' . @@ -157,7 +157,7 @@ function groups_admin_groups_bulk_remove() { $output .= ''; } $output .= ''; - $output .= '' . __( 'Cancel', GROUPS_PLUGIN_DOMAIN ) . ''; + $output .= '' . __( 'Cancel', GROUPS_PLUGIN_DOMAIN ) . ''; $output .= ''; $output .= ''; diff --git a/readme.txt b/readme.txt index 32c5337..ac12b08 100644 --- a/readme.txt +++ b/readme.txt @@ -4,7 +4,7 @@ Donate link: http://www.itthinx.com/plugins/groups Tags: access, access control, capability, capabilities, content, download, downloads, file, file access, files, group, groups, member, members, membership, memberships, paypal, permission, permissions, subscription, subscriptions, woocommerce Requires at least: 4.0 Tested up to: 4.3.1 -Stable tag: 1.8.0 +Stable tag: 1.8.1 License: GPLv3 Groups is an efficient and powerful solution, providing group-based user membership management, group-based capabilities and content access control. @@ -181,6 +181,9 @@ See also [Groups](http://www.itthinx.com/plugins/groups/) == Changelog == += 1.8.1 = +* Fixed potential XSS vulnerabilities related to the unescaped use of the $_SERVER['REQUEST_URI'] in some forms. + = 1.8.0 = * WordPress 4.3.1 compatibility tested. * Add-ons section added. @@ -487,5 +490,5 @@ Some installations wouldn't work correctly, showing no capabilities and making i == Upgrade Notice == -= 1.8.0 = -This release has been tested with WordPress 4.3.1 and includes a section for recommended add-ons. += 1.8.1 = +Security Release : This release fixes potential XSS vulnerabilities.