Changeset 3049746

Timestamp:

03/12/2024 12:17:07 PM (5 months ago)

Author:

bobbingwide

Message:

oik v4.10.2 contains a security fix.
plus previously unreleased changes for oik v4.10.1.

Location:

oik/trunk

Files:

• bobbnotwp.inc_ (modified) (1 diff)
• changelog.txt (modified) (2 diffs)
• includes/bw_metadata.php (modified) (2 diffs)
• includes/bw_register.php (modified) (2 diffs)
• libs/bobbfunc.php (modified) (2 diffs)
• libs/oik_plugins.php (modified) (2 diffs)
• oik.php (modified) (2 diffs)
• readme.txt (modified) (3 diffs)
• shortcodes/oik-codes.php (modified) (1 diff)
• shortcodes/oik-contact-form.php (modified) (4 diffs)

oik/trunk/bobbnotwp.inc_

@@ -114 +114 @@
 if ( !function_exists( "esc_attr" ) ) {
 function esc_attr( $text ) { return( $text ); } 
+
+
+
+
 }
 

oik/trunk/changelog.txt

@@ -37 +37 @@
 
 == Upgrade Notice ==
+
+
+
+
+
+
 = 4.9.2 = 
 Upgrade for support for PHP 8.1 and PHP 8.2
@@ -481 +487 @@
 
 == Changelog ==
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
 = 4.9.2 = 
 * Changed: Support PHP 8.1 and PHP 8.2 #220

oik/trunk/includes/bw_metadata.php

@@ -1 @@
-<?php // (C) Copyright Bobbing Wide 2012-2017, 2023
+<?php // (C) Copyright Bobbing Wide 2012-2017,
 /**
  * Logic to create metaboxes for each of the custom fields defined for a particular post type
@@ -432 +432 @@
   stag( 'table', "form-table" );
   foreach ( $fields as $field ) {
-    $data = $bw_fields[$field];
+    $data = ;
     //bw_trace2( $field );
-    $metabox_field = bw_check_metabox_field( $data );
+    $metabox_field = bw_check_metabox_field( $data );
     if ( $metabox_field ) {
       $multiple = bw_array_get( $data['#args'], "#multiple", false );

oik/trunk/includes/bw_register.php

@@ -1 @@
-<?php // (C) Copyright Bobbing Wide 2012-2017,2020
+<?php // (C) Copyright Bobbing Wide 2012-2017,2020
 
 /**
@@ -206 +206 @@
   unset( $post_type_args['cap'] ) ;
   // bw_trace2( $post_type_args, "post_type_args");
-  register_post_type( $post_type, $post_type_args );
+  $post_type_object = register_post_type( $post_type, $post_type_args );
+  //bw_trace2( $post_type_object, 'post_type_object', false, BW_TRACE_VERBOSE );
 }
 

oik/trunk/libs/bobbfunc.php

@@ -1 @@
-<?php // (C) Copyright Bobbing Wide 2009-2023
+<?php // (C) Copyright Bobbing Wide 2009-202
 if ( !defined( "BOBBFUNC_INCLUDED" ) ) {
-define( "BOBBFUNC_INCLUDED", "3.4.3" );
+define( "BOBBFUNC_INCLUDED", "3." );
 
 /**
@@ -260 +260 @@
   $link .= kv( "class", $class ); 
   $link .= kv( "id", $id ); 
-  $link .= kv( "href", $url ); 
+  $link .= kv( "href", 
   if ( !is_null( $alt ) ) {
         if ( $alt != $linktori ) {

oik/trunk/libs/oik_plugins.php

@@ -1 @@
-<?php // (C) Copyright Bobbing Wide 2012-2023
+<?php // (C) Copyright Bobbing Wide 2012-202
 if ( !defined( "OIK_PLUGINS_INCLUDED" ) ) {
-    define( "OIK_PLUGINS_INCLUDED", "0.3.4" );
+    define( "OIK_PLUGINS_INCLUDED", "0.3." );
 
 /**
@@ -466 +466 @@
 function bw_update_option( $field, $value=NULL, $options="bw_options" ) {
   $bw_options = get_option( $options );
+
+
+
   $bw_options[ $field ] = $value;
   bw_trace2( $bw_options, 'options', true, BW_TRACE_VERBOSE );

oik/trunk/oik.php

@@ -4 +4 @@
 Plugin URI: https://www.oik-plugins.com/oik-plugins/oik
 Description: OIK Information Kit - Over 80 lazy smart shortcodes for displaying WordPress content
-Version: 4.10.0
+Version: 4.10.
 Author: bobbingwide
 Author URI: https://bobbingwide.com/about-bobbing-wide
@@ -12 +12 @@
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
 
-    Copyright 2010-2023 Bobbing Wide (email : herb@bobbingwide.com )
+    Copyright 2010-202 Bobbing Wide (email : herb@bobbingwide.com )
 
     This program is free software; you can redistribute it and/or modify

oik/trunk/readme.txt

@@ -4 +4 @@
 Tags: blocks, shortcodes, shortcode, advanced
 Requires at least: 5.0.3
-Tested up to: 6.4.1
-Stable tag: 4.10.0
+Tested up to: 6.4.
+Stable tag: 4.10.
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -107 +107 @@
 
 == Upgrade Notice ==
-= 4.10.0 = 
-Update for improved basic spam checking on the contact form.
+= 4.10.2 = 
+Update for a security fix to prevent JavaScript in URLs #224
+ 
+= 4.10.1 = 
+Update for basic spam checking on the contact form subject, and support for PHP 8.3 
 
 == Changelog ==
-= 4.10.0 = 
-* Changed: Support PHP 8.1 and PHP 8.2 #220
-* Changed: Improve bw_basic_spam_check() #221
-* Changed: Update PHPUnit tests for WordPress 6.4 changes #222
-* Tested: With WordPress 6.4.1 and WordPress Multisite
-* Tested: With Gutenberg 16.9.0
-* Tested: With PHP 8.1 and PHP 8.2
+= 4.10.2 = 
+* Fixed: Escape the URL in links. #224  Props: Wordfence. Vulnerability Researcher: Francesco Carlucci
+
+= 4.10.1 = 
+* Changed: Support PHP 8.3 #220
+* Changed: Spam check subject for #221
+* Tested: With WordPress 6.4.3 and WordPress Multisite
+* Tested: With PHP 8.3
 * Tested: With PHPUnit 9.6
 
@@ -176 +180 @@
 * WordPress
 * WordPress Multisite
-* PHP 8.1 & PHP 8.2
+* PHP 8.1
 * PHPUnit 9.6
 

oik/trunk/shortcodes/oik-codes.php

@@ -682 +682 @@
   BW_::br();
   bw_lazy_sc_syntax( "oik" );
-  oik__example();
+  if ( function_exists( "oik__example")) {
+      oik__example();
+  }
 }
 

oik/trunk/shortcodes/oik-contact-form.php

@@ -273 +273 @@
 
     //bw_trace2();
-    $fields_to_check = [ "comment_author", "comment_author_email", "comment_content" ];
+    $fields_to_check = [ "comment_author", "comment_author_email", "comment_content" ];
     foreach ( $fields_to_check as $field ) {
         $content=bw_array_get( $fields, $field, '' );
@@ -307 +307 @@
  * Return the query_string to pass to Akismet given the fields in $fields and $_SERVER
  * 
- * @link http://akismet.com/development/api/#comment-check
+ * @link http://akismet.com/development/api/#comment-check
  * blog (required) -The front page or home URL of the instance making the request. 
  *                  For a blog or wiki this would be the front page. Note: Must be a full URI, including http://.
@@ -317 +317 @@
  * comment_type - May be blank, comment, trackback, pingback, or a made up value like "registration".
  * comment_author - Name submitted with the comment
- * Use "viagra-test-123" to always get a spam response
+ * Use  to always get a spam response
  * comment_author_email - Email address submitted with the comment
+
  * comment_author_url - URL submitted with comment
  * comment_content - The content that was submitted. 
@@ -385 +386 @@
         $fields['comment_author_url'] = null;
         $fields['comment_type'] = 'oik-contact-form';
+
+
         $send = bw_akismet_check( $fields );
         if ( $send ) {