WordPress-C
/
WordPress
mirror of https://github.com/WordPress/WordPress.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
28,602 Commits 50 Branches 749 Tags 982 MiB
Commit Graph

28602 Commits

Author SHA1 Message Date
Dion Hulse 3c4befe52b WPDB: Check that `AUTH_SALT` is not empty, Fix a PHP notice when `AUTH_SALT` is undefined. 
Props jsonfry, mkomar, pento.
Merges [42119] and [42120] to the 4.1 branch.
Fixes #42431 and #42401 for 4.1.

Built from https://develop.svn.wordpress.org/branches/4.1@42237


git-svn-id: http://core.svn.wordpress.org/branches/4.1@42066 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-11-27 01:13:21 +00:00
John Blackbourn 194c36fa91 General: Remove the version number from the readme file in the 4.1 branch. 
See #42386

Built from https://develop.svn.wordpress.org/branches/4.1@42095


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41924 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-10-31 17:47:25 +00:00
Gary Pendergast 1466683d48 Bump 4.1 branch to version 4.1.20. 
Built from https://develop.svn.wordpress.org/branches/4.1@42076


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41905 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-10-31 13:43:26 +00:00
Gary Pendergast 16391a9641 Database: Restore numbered placeholders in `wpdb::prepare()`. 
[41496] removed support for numbered placeholders in queries send through `wpdb::prepare()`, which, despite being undocumented, were quite commonly used.

This change restores support for numbered placeholders (as well as a subset of placeholder formatting), while also adding extra checks to ensure the correct number of arguments are being passed to `wpdb::prepare()`, given the number of placeholders.

Merges [41662], [42056] to the 4.2 branch.
See #41925.


Built from https://develop.svn.wordpress.org/branches/4.1@42064


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41893 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-10-31 12:53:27 +00:00
Dominik Schilling b2a9df1c79 Users: Use correct escaping function for URLs. 
Merge of [41522] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@41530


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41363 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 21:39:26 +00:00
Aaron Campbell 6b3afa9678 Bump 4.1 branch to version 4.1.19. 
Built from https://develop.svn.wordpress.org/branches/4.1@41517


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41350 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 20:07:25 +00:00
Aaron Campbell 89333247c9 Database: Hardening to bring `wpdb::prepare()` inline with documentation. 
`wpdb::prepare()` supports %s, %d, and %F as placeholders in the query string. Any other non-escaped % will be escaped.

Merges [41496] to 4.1 branch.


Built from https://develop.svn.wordpress.org/branches/4.1@41504


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41337 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 18:33:25 +00:00
Aaron Campbell 68b9288c14 Database: Don’t trigger `_doing_it_wrong()` for null values in `wpdb::prepare()`. 
While `wpdb::prepare()` does not support null values (see #12819) they still appear in the wild like in the WordPress Importer and other plugins.

Merges [41483] to 4.1 branch.


Built from https://develop.svn.wordpress.org/branches/4.1@41491


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41324 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 16:26:18 +00:00
Aaron Campbell 688d186ddd Database: Hardening for `wpdb::prepare()` 
Previously if you passed an array of values for placeholders, additional values could be passed as well. Now additional values will be ignored.

Merges [41470] to 4.1 branch.


Built from https://develop.svn.wordpress.org/branches/4.1@41478


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41311 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 15:03:53 +00:00
John Blackbourn 6c7de13e11 Filesystem API: Ensure filenames are valid before attempting to unzip them to ensure malformed file paths don't cause issues. 
Merges [41457] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@41465


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41298 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 14:44:20 +00:00
John Blackbourn dc11b33974 General: Add missing URL-encoding and add extra hardening to plugin and template names when they're displayed in the admin area. 
Merges [41434] with changes to the 4.1 branch.

See #13377

Built from https://develop.svn.wordpress.org/branches/4.1@41446


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41279 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 13:39:24 +00:00
Dominik Schilling acc424ed10 TinyMCE: Improve the previews for shortcodes. 
Merge of [41395] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@41442


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41275 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 12:44:54 +00:00
Dominik Schilling 8c8a907ba3 Users: Provide a fallback for incorrect HTTP referrers. 
Merge of [41398] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@41424


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41257 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 11:14:59 +00:00
Dominik Schilling 900cd482a4 Editor: Prevent adding `javascript:` and `data:` URLs through the inline link dialog. 
Merge of [41393] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@41407


git-svn-id: http://core.svn.wordpress.org/branches/4.1@41240 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-09-19 10:19:51 +00:00
Aaron Campbell 9eb95c11ff Bump 4.1 branch to version 4.1.18. 
Built from https://develop.svn.wordpress.org/branches/4.1@40754


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40612 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 21:53:24 +00:00
Pascal Birchler f4aa87318c Media: Simplify upload error message construction. 
Merges [40736] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@40743


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40601 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 18:04:19 +00:00
Aaron Campbell 1a65464490 Add nonce for updating file system credentials. 
Merges [40723] to 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@40730


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40588 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 14:56:48 +00:00
Dominik Schilling f1dd14eb48 Customize: Ignore invalid customization sessions. 
Merge of [40704] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@40711


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40574 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 12:20:25 +00:00
Pascal Birchler 03ff944f46 Adjust post meta checks 
Merges [40692] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@40699


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40562 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 08:53:19 +00:00
Pascal Birchler c17688406b Whitelist post arguments in XML-RPC 
Merges [40677] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@40684


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40547 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-05-16 08:26:26 +00:00
Pascal Birchler d4a45dc58d Bump 4.1 branch to version 4.1.17. 
Built from https://develop.svn.wordpress.org/branches/4.1@40493


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40369 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-04-20 16:27:26 +00:00
Pascal Birchler d0682377ef Fix broken audio/video functions when sanitizing ID3 data 
This fixes a bug where running `wp_kses_post_deep()` on all the ID3
tag data corrupted blob data.

See #40075, #40085.

Merges [40400] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@40466


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40342 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-04-17 13:29:25 +00:00
James Nylen d19df5f1e4 Bump 4.1 branch to version 4.1.16. 
Built from https://develop.svn.wordpress.org/branches/4.1@40208


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40147 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 16:35:25 +00:00
Aaron Campbell 0d1be6d9ca Strip control characters before validating redirect. 
Merges [40183] to 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@40190


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40129 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 13:45:27 +00:00
Aaron Campbell a0922a8e99 Plugins: Add file check to plugin deletions. 
Merges [40169] to 4.1 branch.


Built from https://develop.svn.wordpress.org/branches/4.1@40176


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40115 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 13:03:54 +00:00
Dominik Schilling c5c1dce809 Embeds: URL encode YouTube video IDs for broader compatibility. 
Merge of [40160] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@40167


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40106 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 12:08:26 +00:00
Jeremy Felt 2702705876 Validate video and audio metadata. 
Merge of [40148] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@40155


git-svn-id: http://core.svn.wordpress.org/branches/4.1@40094 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-03-06 08:10:27 +00:00
Aaron Campbell c0abe8d804 Bump 4.1 branch to version 4.1.15. 
Built from https://develop.svn.wordpress.org/branches/4.1@40002


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39939 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-26 18:26:25 +00:00
John Blackbourn 64094ebb31 Posts, Post Types: When using Excerpt mode on the Posts list table, ensure the excerpt output matches what was manually entered into the Excerpt field. 
Merges [39956] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@39985


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39922 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-26 14:18:24 +00:00
Dominik Schilling 474af50d38 Press This: Do not show Categories & Tags UI for users who cannot assign terms to posts anyways. 
Merge of [39968] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39976


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39913 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-26 14:13:55 +00:00
Dominik Schilling 0a69a201ad Query: Ensure that queries work correctly with post type names with special characters. 
Merge of [39952] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39962


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39899 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-26 13:52:26 +00:00
Aaron Campbell edd582c69e Bump 4.1 branch to version 4.1.14. 
Built from https://develop.svn.wordpress.org/branches/4.1@39866


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39803 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 16:58:53 +00:00
Joe McGill 8dd8485f19 Media: Fix exif_imagetype check in wp_get_image_mime 
This is a follow up to [39831].

Merges [39850] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@39857


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39794 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 16:44:24 +00:00
Joe McGill 6fd71daf13 Media: Improve image filetype checking. 
This adds a new function `wp_get_image_mime()` which is used by
`wp_check_filetype_and_ext()` to validate image files using
`exif_imagetype()` if available instead of `getimagesize()`.

`getimagesize()` is less performant than `exif_imagetype()` and is
dependent on GD. If `exif_imagetype()` is not available, it falls back to
`getimagesize()` as before.

If `wp_check_filetype_and_ext()` can't validate the filetype, we now return
`false` for ext/MIME values.

Merges [39831] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@39838


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39776 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 13:18:53 +00:00
Dominik Schilling 4167b5b2cf Updates: Translate plugin data on the Updates screen. 
Merge of [39808] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39826


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39764 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 11:42:50 +00:00
Dominik Schilling cf41259781 Themes: Fix markup for theme name fallbacks. 
Merge of [39807] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@39815


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39753 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 11:12:20 +00:00
Jeremy Felt 335301e8f6 Multisite: Use `wp_rand()` in signup key creation. 
Merges [39795] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@39802


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39740 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 05:35:19 +00:00
Dion Hulse e68653dd45 Update PHPMailer to 5.2.22. 
The full list of changes is available here:
https://github.com/PHPMailer/PHPMailer/compare/v5.2.21...v5.2.22

Merges [39759] to the 4.1 branch.
Fixes #37210 for 4.1.

Built from https://develop.svn.wordpress.org/branches/4.1@39790


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39728 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 05:25:51 +00:00
Jeremy Felt dc033d7009 Mail: Disable wp-mail.php when `mailserver_url` is mail.example.com. 
Merges [39772] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@39779


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39717 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 05:19:50 +00:00
Aaron Campbell be45faec74 Add nonce for widget accessibility mode. 
Props vortfu.

See #23328.

Merges [39765] to 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@39767


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39705 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-11 01:50:26 +00:00
Dion Hulse e754067ae9 Mail: Upgrade PHPMailer to 5.2.21. 
Merges [39645], [36083], [33142], [33124] to the 4.1 branch.
See #37210.

Built from https://develop.svn.wordpress.org/branches/4.1@39727


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39667 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-06 22:06:24 +00:00
Joe McGill 9ee6a9ad66 Media: Improved media titles when created from filename. 
Preserves spaces and generally creates more accurate, cleaner titles from filenames of uploaded media.

Merge of [38615] to the 4.1 branch.

Fixes #37989.

Built from https://develop.svn.wordpress.org/branches/4.1@39715


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39655 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-06 22:01:26 +00:00
Dion Hulse dc2355312d General: Update copyright year to 2017 in license.txt. 
Props Nikschavan.
Merges [39659] to the 4.1 branch.
Fixes #39433.

Built from https://develop.svn.wordpress.org/branches/4.1@39703


git-svn-id: http://core.svn.wordpress.org/branches/4.1@39643 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2017-01-06 21:35:24 +00:00
Jeremy Felt 9a9ecd5c32 Bump 4.1 branch to 4.1.13. 
Built from https://develop.svn.wordpress.org/branches/4.1@38554


git-svn-id: http://core.svn.wordpress.org/branches/4.1@38497 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-09-07 15:00:58 +00:00
Jeremy Felt 98ead2d8bb Media: Sanitize upload filename. 
Merge of [38538] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@38544


git-svn-id: http://core.svn.wordpress.org/branches/4.1@38487 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-09-07 13:59:54 +00:00
Pascal Birchler 0be5d63999 Upgrade/Install: Sanitize file name in `File_Upload_Upgrader`. 
Merge of [38524] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@38530


git-svn-id: http://core.svn.wordpress.org/branches/4.1@38471 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-09-06 17:57:23 +00:00
Boone Gorges 3d28255a66 Bump 4.1 branch to 4.1.12. 
Built from https://develop.svn.wordpress.org/branches/4.1@37832


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37797 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 16:39:24 +00:00
Joe McGill 8bb91d40a2 Media: Improve handling of extensionless filenames. 
Merge of [37756] to the 4.1 branch.

See #37111.
Built from https://develop.svn.wordpress.org/branches/4.1@37818


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37783 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 14:57:40 +00:00
Nikolay Bachiyski 7fcd5f5219 Admin: escape URL-encoded permalinks 
Merge of [37801] to the 4.1 branch.

Built from https://develop.svn.wordpress.org/branches/4.1@37815


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37780 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 14:56:22 +00:00
Rachel Baker 7e883711c3 Revisions: Change the capability needed to view revision diffs to `edit_post`. 
Merge of [37779] to the 4.1 branch.
Built from https://develop.svn.wordpress.org/branches/4.1@37800


git-svn-id: http://core.svn.wordpress.org/branches/4.1@37765 1a063a9b-81f0-0310-95a4-ce76da25c4cd
 2016-06-21 14:46:22 +00:00