garfield/wpscan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Adds DFs

Browse Source
This commit is contained in:
erwanlr
2019-03-30 07:20:14 +00:00
parent 1baa3e23b2
commit 07b3826806
509 changed files with 82506 additions and 48 deletions
Download Patch File Download Diff File Expand all files Collapse all files

474
spec/fixtures/dynamic_finders/plugin_version/alo-easymail/change_log/changelog.txt vendored Normal file
View File

@@ -0,0 +1,474 @@
ALO EasyMail Newsletter Changelog
=================================
= 2.12.1 =
* Fixed: replace [] declarations with old array() to be compliant with php 5.2
* Fixed: force width of recipient list modal
= 2.12.0 =
* Added: a filter ('alo_easymail_subscription_form_is_enabled') to disable the subscription form from page and widget at all, useful if using other tools to collect subscribers
* Updated: the newsletter report is loaded as a page, not as a modal
* Updated: the tracking pixel is loaded from a REST url (WP >= 4.4), not from the php file inside plugin
* Fixed: to include files use ABSPATH instead of relative path
* Fixed: hide the modal of recipient list on page load to avoid that it appears for some seconds
* Fixed: remove a php warning
= 2.11.1 =
* Fixed: remove a php warning
= 2.11.0 =
* Added: [GDPR] added "re-permission" campaign newsletter: each recipient is deactivated and he/she must click the confirmation-link to reactivate his/her subscription
* Added: [GDPR] added confirmation-link placeholders for "re-permission" newsletters
* Added: [GDPR] new placeholders for Privacy Page url
* Added: [GDPR] add Privacy Page link in all bundled newsletter themes
* Updated: some newsletter theme functions are pluggable
= 2.10.1 =
* Fixed: remove error on php < 5.4
= 2.10.0 =
* Added: [GDPR] the privacy policy text inside subscription form now has a checkbox
* Added: [GDPR] added a draft of suggesting text for the site privacy policy
* Added: [GDPR] now the unsubscribed emails are stored always as MD5 string
* Added: [GDPR] add newsletter data to personal data export/eraser
* Fixed: better WPML integration - thanks to [dgwatkins](https://github.com/groucho75/alo-easymail/pull/16)
= 2.9.8 =
* Added: 2 text options for subscription page: "click to unsubscribe" and "subscription deleted" messages
* Added: a filter for recipient number in newsletter report
* Added: a couple of sample functions in attachment mu-plugins
* Updated: move the "preview in newsletter theme" button inside theme metabox
* Fixed: a warning on plugin activation/deactivation
* Fixed: a warning in options page
= 2.9.7 =
* Fixed: the subscribe button now is properly escaped
* Fixed: now the title attribute in [CUSTOM-LINK] placeholder is properly replaced
= 2.9.6 =
* Added: new newsletter themes based on [Cerberus responsive template](https://github.com/TedGoas/Cerberus)
* Added: new [SITE-LOGO] placeholder
* Updated: dashboard widget that loads news from developer site
* Updated: in newsletter edit now it's possible to not select a post for placeholder
* Deleted: a admin help pointer about bounces
= 2.9.5 =
* Updated: now encrypting the unsubscribed emails is an option, default is clear text
= 2.9.4 =
* Updated: add only-date format for archive shortcode: [ALO-EASYMAIL-ARCHIVE li_format=date]
* Updated: now unsubscribed emails are stored in md5, not plain yet
* Updated: added max-width css rule for images in bundled newsletter themes
* Updated: added some css classes to messages in subscription page
* Fixed: a warning about Polylang function check
= 2.9.3 =
* Fixed: a CSRF issue
= 2.9.2 =
* Fixed: now right param is passed to action hook on profile optin save
* Fixed: properly escape a query var in report page
= 2.9.1 =
* Fixed: the bounce manual check now should work properly
= 2.9.0 =
* Updated: the cron-based bounce management is removed, now it works only manually
= 2.8.2 =
* Fixed: a CRSF/XSS vulnerability
= 2.8.1 =
* Fixed: update sanitization of html options that removed html instead of keep it
= 2.8.0 =
* Added: stop collecting subscriber IP addresses, there is an option to enable/disable it
* Updated: autosave of the preview-newsletter-in-theme to avoid issues if autosave disabled (e.g. by qTranslate-x)
* Updated: removed the iframe screencast in help tab and replaced with a link
* Updated: report popup size now is dynamic and is adjusted according to screen size
* Fixed: now required custom fields don't give errors and don't block the add new user dashboard form
= 2.7.0 =
* Added: export subscribers of a single mailing list
* Added: an option to remove subscribers when the related users are deleted
* Added: list of clicked urls in newsletter report
* Fixed: cache recipient counts to save resources especially on newsletter list screen
* Fixed: a CRSF/XSS vulnerability in options page, credits to Mohsen Lotfi (fox_one_fox_one)
* Fixed: a type in English strings: 'e-email' now become 'e-mail'
* Fixed: the preview-newsletter-in-theme now show the most recent between autosaved and saved versions
* Updated: the deprecated $wpdb->escape()
* Updated: css in subscriber list page
* Updated: now dashicon icon in the admin bar and dashboard side menu, settings label in admin bar
= 2.6.01 =
* Fixed: a CRSF/XSS vulnerability: [more info](https://packetstormsecurity.com/files/133594/)
* Fixed: a short php open tag
* Updated: some improvements to WPML integration (more tests needed)
= 2.6.00 =
* Updated: refactoring of php files to clean and organize the code in a better way, including several minor fixes
* Updated: the widget constructor in PHP5 style
* Updated: the tracking script does not load WP theme but only environment
* Updated: some improvement in dashboard css of plugin screens
* Updated: the [LATEST-POSTS] placeholder now has loaded by default
* Added: the checkbox type in custom field
* Added: filter 'alo_easymail_clean_no_activated_after'
* Fixed: the custom field validation in user profile
* Fixed: the size in recipient list modal
* Fixed: a bug of the inline edit buttons in subscriber table
* Removed: the "predomain" language file
= 2.5.06 =
* Added: the Name field now can be disabled in subscription form.
= 2.5.05 =
* Added: an option to enable/disable tracking pixel in newsletters
* Fixed: wp_create_user() now does not add email to unsubscribed table
* Added: compatibility with qTranslate-forks plugins: zTranslate, qTranslate Plus, qTranslate X
* Added: email recipients now have the 'name <email>' format in TO field in newsletters and activation emails
= 2.5.04 =
* Fixed: on database table creation now the plugin follows the guidelines for the character set and collation - thanks to [cfinnberg](https://github.com/cfinnberg)
* Updated: ads banners in plugin admin pages
= 2.5.03 =
* Added: a multilingual hook filter: 'alo_easymail_multilang_translate_text'
= 2.5.02 =
* Fixed: a bug about Close button in recipient list modal
= 2.5.01 =
* Fixed: now subscriber ip address is not always null
* Fixed: a missing alt attribute in an img tag
= 2.5 =
* Added: a /mu-plugins folder containing custom hooks, the alo-easymail_custom-hooks.php is now deprecated
* Added: a hook: 'alo_easymail_bounce_email_unsubscribed'
* Fixed: some missing alt attribute in image tags
* Some fixes and improvements by Wojtek Szałkiewicz
* New post placeholders by Wojtek Szałkiewicz: /mu-plugins/alo-easymail_multiple-posts-placeholder.php
= 2.4.18 =
* Added: bounce management (thanks to: https://github.com/cfortune/PHP-Bounce-Handler)
* Added: compatibility with Polylang (multilingual plugin)
* Updated: the script that creates the newsletter plain text (thanks to Thomas Heinen)
* Updated: the priority of cron schedule filter now is very low so it could works also if other plugins break the schedule array
* Updated: some javascript code to be compatible with jquery 1.9
* Fixed: the ajax admin url used in frontend should work if FORCE_SSL_ADMIN is enabled and admin side is not https
= 2.4.17 =
* Fixed: now the "send a test newsletter" email goes out properly.
= 2.4.16 =
* Updated: jQuery.noConflict() in backend javascript, to decrease opportunity of issues and conflicts
= 2.4.15 =
* Added: preview in newsletter theme
* Updated: the recipient list now is loaded in a jquery modal, not in a thickbox (no more hack to load javascript into thickbox, so a lot of javascript issues with other plugins should be avoided)
* Added: some hook filters: 'alo_easymail_get_userid_by_subscriber'
= 2.4.14 =
* Fixed: newsletters were sent only to one mailing list though more lists were chosen, now send to all selected lists
* Updated: some limits in batch sending settings
* Added: yes/no texts in report
* Added: some hook filters: 'alo_easymail_widget_ok_class', 'alo_easymail_widget_error_class', 'alo_easymail_placeholders_title_easymail_post_vars'
= 2.4.13 =
* Added: new capabilities for newsletter post type and new permission settings
* Added: [USER-EMAIL] placeholder
* Added: now recipient object has subscriber custom fields as properties
* Added: there is automatically a placehoolder for each custom field (e.g. 'cf_country' => [USER-CF_COUNTRY])
* Added: some filters ('alo_easymail_recipient_in_queue', 'alo_easymail_ip_address')
* Fixed: a divide-by-0 warning in a rate calculation
= 2.4.12 =
* Updated: the sending engine in cron batch, so maybe reduced the opportunity of multiple emails to same recipients
* Added: new [CUSTOM-LINK] placeholder
* Added: filter to add attachments in newsletter ('alo_easymail_newsletter_attachments')
* Added: in subscriber list screen now avatars are shown/hidden as set up in main WP option
* Added: in subscriber list screen now you can delete subscribers and unsubscribe their emails
* Added: you can export the list of emails of who unsubscribed the newsletter
* Fixed: the include link for PHP Simple HTML DOM (optional and deprecated)
* Fixed: edit button text in unsubscription page is under plugin textdomain
= 2.4.11 =
* Fixed: PHP Simple HTML DOM Parser (added in 2.4.10) is now disabled because it causes some issues in newsletter content: so now all links in newsletters now are not trackable (instead the links generated by placeholdes like [POST-TITLE] or [SITE-LINK] are always trackable)
* Added: the 'alo_easymail_ajaxloop_recipient_limit' filter to customise limit of recipients per time during ajax list generation
= 2.4.10 =
* Added: role filter for registered user recipients
* Added: some debug info about wp cron in batch sending settings
* Added: the 'alo_easymail_newsletter_headers' filter to customise newsletter headers
* Added: check for newsletter themes also in 'wp-content/alo-easymail-themes'
* Fixed: a potential issue on definition of batch interval
* Fixed: now all links in newsletters now really made trackable (using PHP Simple HTML DOM Parser)
= 2.4.9 =
* Added: option to append campaign vars to newsletter links (e.g. Google Analytics)
* Added: all links in newsletters now are made trackable
* Added: the IP address of subscribers now is stored on subscription
* Added: when a new subscriber submits the widget form with success, the form fields will be cleaned
* Added: in case of empty excerpt, the [POST-EXCERPT] placeholder uses the beginning of post content (only WP 3.3+)
* Added: new action hook on subscriber activation ('alo_easymail_subscriber_activated')
* Added: in report now the list of clicked links is shown
* Updated: all the .MO language files from [http://code.google.com/p/alo-easymail/](http://code.google.com/p/alo-easymail/)
* Fixed: in subscriber list screen now the pagination is set up using WP screen options (top right menu)
* Fixed: the issue with a big number of subscribers, in newsletter screen the countings are cached (faster loading of page)
* Fixed: plugin url and path now use the correct functions, useful for ssl enabled sites (thanks to Hansjörg Schwarz)
* Fixed: a bug in mailing list dropdown in subscriber list screen
* Fixed: now the plugin css file in child theme is properly loaded (thanks to obiweb)
= 2.4.8 =
* Fixed: XSS vulnerabilities
* Fixed: name "unikey" in activation email
* Fixed: some php warnings
* Added: some help pointers in admin (WP 3.3)
= 2.4.7 =
* Updated: now the batch interval is 5 minutes and the maximum number of emails per batch is 30
* Fixed: activation link is properly encoded when email address has "+" char
* Fixed: [USER-UNSUBSCRIBE] now is properly replaced in English
* Added: some more help info in cron batch tab in settings page
* Added: category filter in [LATEST-POSTS] in custom hooks file
= 2.4.6 =
* Fixed: a bug that causes an infinite loop of the mail engine on the same recipient if the email is not correct (thanks to david of dot4all.it)
= 2.4.5 =
* Fixed: XSS vulnerabilities
* Added: _nonce fields in subcription form and unsubscription page
= 2.4.4 =
* Fixed: XSS vulnerabilities
* Fixed: submitted email addresses with "+" char is properly encoded
= 2.4.3 =
* Fixed: files now formatted with \n as the line ending (Unix line endings)
* Fixed: on plugin uninstallation now the unsubscribed table is deleted
* Updated: the [DATE] placeholder now is based on get_option('date_format')
* Updated: mb_detect_encoding no more used so mbstring module is not required
= 2.4.2 =
* Fixed: when an admin edits a subscriber inline, the "last activity" is not updated
* Fixed: if newsletters are not published on blog, there is not the "preview" link in edit screen messages
* Fixed: on registration, if a new user does not subscribe, the email is now added to unsubscribed db table
= 2.4.1 =
* Fixed: a serious bug in db table installation/upgrade so errors on subscriptions
* Added: a list of placeholders in newsletter content editor
= 2.4 =
* Added: a new db table to store unsubscribed emails
* Added: last_activity column in subscriber db table
* Added: custom fields (thanks to eqhes!)
* Added: clickable palceholders (post url, read online, site url) in newsletters are now tracked
* Updated: smartupdater.js v.3.2
* Updated: help screens and toolbar now use WP 3.3 API
* Fixed: newsletter themes are now utf-8
* Fixed: when on blog 'alo_easymail_newsletter_content' filter now is applied only to newsletters
= 2.3 =
* Added: support for newsletter themes in .php (thanks to eqhes!)
* Added: recipients of previous newsletters can be archived, for best query performances
* Added: KEY indexes in plugin database tables, for best query performances
* Added: [USER-NAME] and [USER-FIRST-NAME] work in newsletter title
* Added: pagination of recipients in report screen
* Added: an option to publish or not newsletters online
* Added: auto-deletion of post meta when Duplicate Post plugin copies newsletters
* Updated: glob() function for list theme files
* Updated: not using GLOB_BRACE param in glob(), for compatibilty
* Fixed: permission settings properly maintained when plugin de/re-activated
* Fixed: add a default text when auto-generated alternative plain text is empty
= 2.2.1 =
* Fixed: now query that gets recipients in queue should be very faster
= 2.2 =
* Added: compatibility with WPML (WordPress Multilingual Plugin)
* Fixed: now html theme loaded also when recipient is a registered user
* Fixed: now translation of text in html theme file
* Added: 'updates from plugin developer' in dashboard only for administrators
* Fixed: alo_easymail_print_archive() and [ALO-EASYMAIL-ARCHIVE] print newsletter properly localised
= 2.1.3 =
* Fixed: now the list of recipients is properly created when including registered users
* Fixed: unwanted redirect to dashboard using IE when saving subscriber in inline edit
* Fixed: the theme dropdown select in newsletter edit screen now saves properly
* Fixed: a better replacement in theme files about theme folder url from relative to absolute
* Fixed: improvements in newsletter text-plain version (thanks to sanderbontje!)
* Fixed: missing escape of form button text
* Added: when importing csv the exiting emails can be assigned to other lists
* Added: sender email is customisable in activation mail too (thanks to Matthias!)
= 2.1.2 =
* Added: option for alternative js library for recipient list (PeriodicalUpdater.js)
* Added: an admin notice if plugin db tables are missing
* Added: new filters for thumb and gallery placeholders (thanks to iwan!)
* Added: "enter" key disabled on edit-inline subscriber fields
* Added: a filter for args of 'register_post_type' newsletter
= 2.1.1 =
* Added: inline-edit in admin list of subscribers
* Added: script checks to avoid fatal error if post thumbnail is not supported
* Fixed: alo_em_get_recipients_in_queue() should work better
= 2.1 =
* Added: newsletter themes using html files in plugin or theme folder (thanks to iwan, again!)
* Added: placeholders for newsletter content
* Added: an option to create list or recipients without ajax
* Added: 'Newsletter' settings tab
* Updated: smartupdater.js v.3.1
= 2.0.3 =
* Fixed: now loading "registration.php", it solves a bug about creation of recipients' list and batch sending
* Fixed: "load_plugin_textdomain" now runs properly before "register_post_type"
* New css in Settings screen, more like WP style (thanks to iwan!)
= 2.0.2 =
* Added: option to load only plugin js on creation list of recipients thickbox
* Fixed: some bugs
= 2.0.1 =
* Fixed: some bugs
= 2.0 =
* Re-written the code about creation, editing and sending of newsletters
* Now Newsletter is custom post type
* Ajax long polling engine to create list of recipients
* New database plugin tables to decrease memory usage
* Solved the bug about sending to a large numeber or recipients (multiple/missing sendings)
* Added action and filter hooks, useful for developers
= 1.8.7 =
* Added: some css samples in alo-easymail.css
* Added: a couple of options to use or not text filters and shortcodes in newsletter text
* Added: when a user changes email or name, the subscription is updated too
* Added: css classes in form for registered and not-registered users
* Fixed: add-link thickbox in editor on WP 3.1
* Fixed: when plugin re-activated, no update of subscription page's texts
* Fixed: users with only "send_easymail_newsletter" capability view properly the sending page
* Fixed: now admin-bar works and newsletter submenu depends on user role
* Fixed: deleted size attributes from form inputs
= 1.8.6 =
* Added: Direct subscription without activation e-mail now available
* Added: Time interval between emails of same batch
* Added: Debug newsletters: send all emails to author or write them into a log file
* Fixed: ALO_em_get_recipients_registered() gets properly members (definitely, I hope)
* Fixed: checkboxes properly work in Settings
* Added: "open in a new window" button in report thickbox
* Added: alert and help about timeout to increase
= 1.8.5 =
* Added: Customisation of available languages
* Added: New options on importation: lists, languages
* Added: Policy claim at widget/page bottom
* Added: newsletter menu in Admin bar (WP 3.1)
* Added: [POST-TITLE] shows the post title in reports
* Added: css classes and ids in forms
* Added: contextual help and credit banners in back-end
* Fixed: now compatible with WP_CONTENT_URL and WP_PLUGIN_DIR
* Fixed: ALO_em_get_recipients_registered() gets properly members
* Fixed: custom English texts should work when English is the only available language
= 1.8.4 =
* Added: Native multilanguage functionality in back-end and front-end
* Added: Full integration with qTranslate multilanguage plugin
* Added: "post-title" tag now works in newsletter subject
* Added: sender's name option
* Added: activation edit bulk action in subscriber manage page
* Updated: no file extension check on csv importation
* Updated: the subscription page is deleted only if complete uninstall is required
* Fixed: registered user importation on multisite (thanks to RavanH)
* FIxed: "user-name" and "user-first-name" tags now should work properly
= 1.8.3 =
* Fixed: the newsletter content-type
* Fixed: some escape/stripslashes
= 1.8.2 =
* Added: newsletter templates
* Added: embed css file for styling plugin
* Added: subscribers exportation
* Added: an option about max sendings per batch
* Added: an option to choose the subscription page
* Fixed: newsletter datetimes now use GMT blog datetime
* Fixed: alert on subscription if email address is already subscribed
* Fixed: remove -br- in content when rendering an html table
* Fixed: all plugin paths and urls
* Updated: now newsletter transfer encoding is 8bit
* Updated: send multipart newsletters (html and text) to make them less spamish
* Updated: new tab layout on sending page
= 1.8.1 =
* Fixed: the "updating..." msg should not get stuck anymore
* Fixed: in subscription page the list form appears only if there is at least a list
* Fixed: the csv importation system should work better
* The subscription page generated on installation now is titled simply "Newsletter"
= 1.8 =
* Added: mailing lists
* Added: subscription choice on registration form
* Added: tracking system when subscribers open newsletter
* Added: subscribers importation from existing members or from a csv file
* Added: use capabilities and not user_level, so better permission managing
* Added: an option to show subscription page
* Added: dashboard widget and favorite menu link
* Updated: a better formatting in admin side
* Fixed: now admin can modify subscription on user profile page
* Fixed: now easymail page and its option are properly deleted on deactivation
* Fixed: encode entities in newsletter header and subject
* Fixed: a lot of php warnings and wp notices
= 1.7 =
* Added: internationalization (with .mo and .po files)
* Added: tabs navigation in options page
* Fixed: forced collation on db tables installation
* Fixed: optin/optout texts move from widget options to main option page
= 1.6.1 =
* Fixed: now unsubscribe link is printed
* Added: the mail charset is not UTF-8 but the same of the blog
= 1.6 =
* Added: a configurable cron batch to send newsletter in scheduled sendings
* Added: a report with delivery summary for each newsletter
* Added: a bit of ajax in the widget
* Added: the subscription form in the newsletter page
* Added: an option to choose sender email address
* Added: css classes to format texts, to be specified in theme css
* Added: a link to the post in the [POST-TITLE] tag
* Added: address list and tamplate are now usermeta and not blog option
* Fixed: WP is_email() function instead of ereg()
* Fixed: the unsubscribe link now uses 'home' option instead of 'siteurl' option
= 1.5 =
* Added: not-registered visitors can subscribe the newsletter
* Updated: Greg's widget (see 0.9.3 Reloaded) to collect pubblic subscriptions
* Added: a admin page to manage subscribers
* Added: the result page opens in a popup with report of each recipients
* Added: a [POST-CONTENT] tag
= 0.9.3 Reloaded by GREG LAMBERT =
* THANKS to Greg for the following important features:
* Added: widget to manage user subscription
* Added: optin/out option to the user's profile
* Added an option to allow editors to send email
* Added: a [USER-FIRST-NAME] tag
* Fixed: a couple of warning messages where indexes were not defined
* Tested on WP 2.9.1
= 0.9.3 =
* Fixed: delete line breaks in tag POST-EXCERPT
* Tested with WP 2.9
= 0.9.2 =
* Added: using wp_mail() function instead of mail()
* Added: saving emails' list for next sending
= 0.9.1 =
* Updated: tinymce's media buttons compatible with WP v.2.8.4
* Fixed: correct stripslashing when updating content in option page
= 0.9 =
* First release