Commit Graph

23845 Commits

Author SHA1 Message Date
Boone Gorges 9aed168b89 Taxonomy: More specific cap check when processing category data on post save.
Ports [37691] to the 3.7 branch.

Props dlh.
Fixes #36379.
Built from https://develop.svn.wordpress.org/branches/3.7@37788


git-svn-id: http://core.svn.wordpress.org/branches/3.7@37753 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:25:40 +00:00
Dominik Schilling 7b14133f66 Customize: Make sure that preview and return URLs are URLs.
Merge of [37527] to the 3.7 branch.
Built from https://develop.svn.wordpress.org/branches/3.7@37780


git-svn-id: http://core.svn.wordpress.org/branches/3.7@37745 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:22:34 +00:00
Jeremy Felt 5e739be4f6 Admin: Allow for the consistent filtering of `auth_redirect_scheme`
Merge of [37651] to the 3.7 branch.

See #37047.

Built from https://develop.svn.wordpress.org/branches/3.7@37766


git-svn-id: http://core.svn.wordpress.org/branches/3.7@37731 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:14:10 +00:00
Dominik Schilling 5543fabff3 Bump 3.7 branch to 3.7.14.
Built from https://develop.svn.wordpress.org/branches/3.7@37392


git-svn-id: http://core.svn.wordpress.org/branches/3.7@37358 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-05-06 18:16:17 +00:00
Nikolay Bachiyski b3887842de External Libaries: missed SWF file changes from [37368]
Built from https://develop.svn.wordpress.org/branches/3.7@37369


git-svn-id: http://core.svn.wordpress.org/branches/3.7@37335 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-05-06 17:51:08 +00:00
Nikolay Bachiyski f5195ba547 External Libraries: Disable Flash backend for Plupload
Built from https://develop.svn.wordpress.org/branches/3.7@37368


git-svn-id: http://core.svn.wordpress.org/branches/3.7@37334 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-05-06 17:36:10 +00:00
Nikolay Bachiyski 3d1fc411a1 Taxonomies: make sure taxonomy functions work correctly with taxonomy names with special characters
The codex says that taxonomy names "should only contain lowercase letters and the underscore character", but that's not enforced. It's too late to enforce it, since some plugins haven't been following it and the official phpdoc doesn't mention this restriction.

Merge of [37133] to the 3.7 branch.

Built from https://develop.svn.wordpress.org/branches/3.7@37142


git-svn-id: http://core.svn.wordpress.org/branches/3.7@37109 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 17:43:08 +00:00
Jeremy Felt d38dbe39a7 Multisite: Improve escaping in network settings.
Merge of [37124] to the 3.7 branch.

Built from https://develop.svn.wordpress.org/branches/3.7@37132


git-svn-id: http://core.svn.wordpress.org/branches/3.7@37099 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 16:07:17 +00:00
Dominik Schilling fa21da538e HTTP: Improve detection of valid IP addresses.
Merge of [37115] to the 3.7 branch.
Built from https://develop.svn.wordpress.org/branches/3.7@37123


git-svn-id: http://core.svn.wordpress.org/branches/3.7@37090 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 15:54:08 +00:00
Dominik Schilling 8523aeed0b Multisite: Validate new email address confirmations.
Merge of [37103] to the 3.7 branch.
Built from https://develop.svn.wordpress.org/branches/3.7@37111


git-svn-id: http://core.svn.wordpress.org/branches/3.7@37078 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 14:51:31 +00:00
Nikolay Bachiyski 9bf06fa83b Snoopy: use escapeshellarg instead of escapeshellcmd
We are escaping arguments, not commands, so we'd better use the semantically correct function, even though they are similar.

Merges [37094] to the 3.7 branch.

Built from https://develop.svn.wordpress.org/branches/3.7@37102


git-svn-id: http://core.svn.wordpress.org/branches/3.7@37069 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 14:16:09 +00:00
Dominik Schilling c7fa2a8205 Bump 3.7 branch to 3.7.13.
Built from https://develop.svn.wordpress.org/branches/3.7@36462


git-svn-id: http://core.svn.wordpress.org/branches/3.7@36429 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-02-02 17:30:30 +00:00
Dominik Schilling 6cc57297e7 Better validation of the URL used in HTTP redirects.
Merges [36444] to the 3.7 branch.
Built from https://develop.svn.wordpress.org/branches/3.7@36454


git-svn-id: http://core.svn.wordpress.org/branches/3.7@36421 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-02-02 17:01:36 +00:00
Dominik Schilling 44221ce713 HTTP: `0.1.2.3` is not a valid IP.
Merges [36435] to the 3.7 branch.
Built from https://develop.svn.wordpress.org/branches/3.7@36443


git-svn-id: http://core.svn.wordpress.org/branches/3.7@36410 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-02-02 13:06:19 +00:00
Dominik Schilling fdcacfe365 Bump 3.7 branch to 3.7.12.
Built from https://develop.svn.wordpress.org/branches/3.7@36203


git-svn-id: http://core.svn.wordpress.org/branches/3.7@36170 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-01-06 18:52:08 +00:00
Aaron Jorbin 336af0d5f0 Theme: Escape error messages
[36185] for 3.7 branch

Built from https://develop.svn.wordpress.org/branches/3.7@36193


git-svn-id: http://core.svn.wordpress.org/branches/3.7@36160 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-01-06 17:30:09 +00:00
Dion Hulse 6ffe93ee09 Background Updates: Remove the 7am/7pm background update check.
This changeset is a more basic version of [36180], clearing the extra now redundant schedule.
As the functionality for this was introduced in 3.9, [28129] has been backported to 3.7/3.8, allowing the API TTL to be respected by those versions.

See #27772.
Fixes #35323.

Built from https://develop.svn.wordpress.org/trunk@36184


git-svn-id: http://core.svn.wordpress.org/branches/3.7@36151 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-01-06 13:24:33 +00:00
Dion Hulse 6bd412f2fc Update Akismet externals
git-svn-id: http://core.svn.wordpress.org/branches/3.7@35107 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-10-13 17:19:01 +00:00
Dominik Schilling cdfc66db4d Finish bumping the 3.7 branch to 3.7.11.
Built from https://develop.svn.wordpress.org/branches/3.7@34191


git-svn-id: http://core.svn.wordpress.org/branches/3.7@34159 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-15 14:51:13 +00:00
Helen Hou-Sandí 297e946ba6 Bump 3.7 branch to 3.7.11.
Built from https://develop.svn.wordpress.org/branches/3.7@34187


git-svn-id: http://core.svn.wordpress.org/branches/3.7@34155 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-15 14:30:10 +00:00
Dominik Schilling 79809190ac XMLRPC: Don't allow private posts to be sticky.
Merge of [33325], [33612], and [34135] to the 3.7 branch.

See #20662.
Built from https://develop.svn.wordpress.org/branches/3.7@34157


git-svn-id: http://core.svn.wordpress.org/branches/3.7@34125 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-14 23:03:17 +00:00
Nikolay Bachiyski 82dac61d61 Shortcodes: don't allow unclosed HTML elements in attributes
Merges [34134] for 3.7 branch

Built from https://develop.svn.wordpress.org/branches/3.7@34150


git-svn-id: http://core.svn.wordpress.org/branches/3.7@34118 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-14 22:50:08 +00:00
Nikolay Bachiyski 24a1b34acc List tables: escape user e-mails
Merges [34133] for 3.7 branch

Built from https://develop.svn.wordpress.org/branches/3.7@34143


git-svn-id: http://core.svn.wordpress.org/branches/3.7@34111 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-14 22:45:19 +00:00
Gary Pendergast d56d0b0e2c WPDB: `get_table_from_query()` didn't find table names with hyphens in them.
Merge of [33718] to the 3.8 branch.

Props dustinbolton, pento.

See #33470.


Built from https://develop.svn.wordpress.org/branches/3.7@33997


git-svn-id: http://core.svn.wordpress.org/branches/3.7@33966 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-10 07:20:08 +00:00
Gary Pendergast 1b2e6cfa1d Capabilities: Fall back to the `edit_posts` capability for orphaned comments.
Merge of the `capabilities.php` part of [33614] to the 3.7 branch.

Props pento, dd32.

Fixes #33154.


Built from https://develop.svn.wordpress.org/branches/3.7@33977


git-svn-id: http://core.svn.wordpress.org/branches/3.7@33946 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-09 06:29:09 +00:00
Dominik Schilling 1f59bf6469 Bump 3.7 branch to version 3.7.10.
Built from https://develop.svn.wordpress.org/branches/3.7@33577


git-svn-id: http://core.svn.wordpress.org/branches/3.7@33544 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 11:53:08 +00:00
Dion Hulse b9e407b164 Fix `do_shortcode('<[shortcode]')` edge case.
Props miqrogroove.

Merges [33499] to the 3.7 branch.
See #33116.

Built from https://develop.svn.wordpress.org/branches/3.7@33568


git-svn-id: http://core.svn.wordpress.org/branches/3.7@33535 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 07:19:08 +00:00
Dominik Schilling 14f73e7ec1 Comments: IDs are integers.
Merge of [33555] to the 3.7 branch.
Built from https://develop.svn.wordpress.org/branches/3.7@33561


git-svn-id: http://core.svn.wordpress.org/branches/3.7@33528 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 05:00:22 +00:00
Dominik Schilling 42ff9b3d89 Themes: Fix some broken links in the legacy theme preview.
Merge of [33549] to the 3.7 branch.
Built from https://develop.svn.wordpress.org/branches/3.7@33554


git-svn-id: http://core.svn.wordpress.org/branches/3.7@33521 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 04:58:12 +00:00
Dominik Schilling 54da7d4786 Heartbeat: Ensure post locks are released.
Merge of [33542] to the 3.7 branch.
Built from https://develop.svn.wordpress.org/branches/3.7@33548


git-svn-id: http://core.svn.wordpress.org/branches/3.7@33515 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 04:56:22 +00:00
Dominik Schilling da5b65f8ee Nav menus: Consistent titles in widgets.
Merge of [33529] to the 3.7 branch.
Built from https://develop.svn.wordpress.org/branches/3.7@33534


git-svn-id: http://core.svn.wordpress.org/branches/3.7@33501 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-03 20:59:07 +00:00
Andrew Ozz 2e7a937153 Backport r33469 and r33470 to 3.7.
See #33106.
Built from https://develop.svn.wordpress.org/branches/3.7@33525


git-svn-id: http://core.svn.wordpress.org/branches/3.7@33492 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-07-31 01:46:08 +00:00
Gary Pendergast 630d4c7c8e Bump 3.7 branch to version 3.7.9.
Built from https://develop.svn.wordpress.org/branches/3.7@33400


git-svn-id: http://core.svn.wordpress.org/branches/3.7@33368 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-07-23 11:10:08 +00:00
Gary Pendergast fa946535d7 Shortcodes: Improve the reliablity of shortcodes inside HTML tags.
Merge of [33359] to the 3.7 branch.

Props miqrogroove.

See #15694.


Built from https://develop.svn.wordpress.org/branches/3.7@33389


git-svn-id: http://core.svn.wordpress.org/branches/3.7@33357 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-07-23 05:15:08 +00:00
Gary Pendergast 8a6a7d323e Capabilities: When creating an auto-draft, ensure that the current user still has permission to do so.
Partial merge of [33357] to the 3.7 branch.


Built from https://develop.svn.wordpress.org/branches/3.7@33379


git-svn-id: http://core.svn.wordpress.org/branches/3.7@33350 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-07-23 04:27:09 +00:00
Dominik Schilling 1cef8c9e5a 3.7.8 version bumps.
Built from https://develop.svn.wordpress.org/branches/3.7@32439


git-svn-id: http://core.svn.wordpress.org/branches/3.7@32409 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 23:35:08 +00:00
Michael Adams 2b1b2ebaf2 Upgrade: `$wpdb->get_col_length()` sanity check: bail on unexpected return value.
Merges [32429] for the 3.7 branch.

See #32165.

Built from https://develop.svn.wordpress.org/branches/3.7@32435


git-svn-id: http://core.svn.wordpress.org/branches/3.7@32405 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 23:15:09 +00:00
Michael Adams a021bbe537 Upgrade: Ensure unintelligible DB schemas don't result in content loss.
Merge of [32417] to the 3.7 branch.

See #32165.

Props ocean90.

Built from https://develop.svn.wordpress.org/branches/3.7@32423


git-svn-id: http://core.svn.wordpress.org/branches/3.7@32393 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 21:53:34 +00:00
John Blackbourn a8bf70c382 WPDB: Allow queries to reference tables in the dbname.tablename format, and allow table names to contain any valid character, rather than just ASCII.
Merge of [32368] to the 3.7 branch.

Props pento, willstedt for the initial patch.

See #32090.

Built from https://develop.svn.wordpress.org/branches/3.7@32416


git-svn-id: http://core.svn.wordpress.org/branches/3.7@32386 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 21:14:10 +00:00
Aaron Jorbin f702a97f8c When upgrading WordPress remove genericons example.html files
[32385] for 3.7 branch

Props @dd32, @boonebgorges, @johnjamesjacoby, @drewapicture, @jorbin


Built from https://develop.svn.wordpress.org/branches/3.7@32411


git-svn-id: http://core.svn.wordpress.org/branches/3.7@32381 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 20:50:09 +00:00
Dominik Schilling 8cb1387688 WPDB: When sanity checking query character sets, there's no need to check queries that don't return user data.
Merges [32374] to the 3.7 branch.

props pento.
fixes #32104.
Built from https://develop.svn.wordpress.org/branches/3.7@32407


git-svn-id: http://core.svn.wordpress.org/branches/3.7@32377 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 20:08:09 +00:00
Helen Hou-Sandí 0697563967 The UTF-8 regex can occasionally fail on very low memory machines. Reduce the amount of memory it uses.
Merges [32375] to the 3.7 branch.

props pento.
fixes #32204.

Built from https://develop.svn.wordpress.org/branches/3.7@32400


git-svn-id: http://core.svn.wordpress.org/branches/3.7@32370 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 19:44:19 +00:00
Michael Adams 15a2afed1e Upgrade: Fix typo in [32391]/3.7.
See #32165.

Built from https://develop.svn.wordpress.org/branches/3.7@32395


git-svn-id: http://core.svn.wordpress.org/branches/3.7@32365 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 19:41:09 +00:00
Michael Adams 18fcca2916 WPDB: When checking that a string can be sent to MySQL, we shouldn't use `mb_convert_encoding()`, as it behaves differently to MySQL's character encoding conversion.
Merge of [32364] to the 3.7 branch.

Props mdawaffe, pento, nbachiyski, jorbin, johnjamesjacoby, jeremyfelt.

See #32165.

Built from https://develop.svn.wordpress.org/branches/3.7@32391


git-svn-id: http://core.svn.wordpress.org/branches/3.7@32361 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 19:17:09 +00:00
Michael Adams cd63ed5102 3.7:
- WPDB: Sanity check that any strings being stored in the DB are not too long to store correctly.
- When upgrading, remove any suspicious comments.

Built from https://develop.svn.wordpress.org/branches/3.7@32318


git-svn-id: http://core.svn.wordpress.org/branches/3.7@32289 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-27 18:35:09 +00:00
Gary Pendergast 82c855cce0 3.7 branch is now 3.7.8.
Built from https://develop.svn.wordpress.org/branches/3.7@32305


git-svn-id: http://core.svn.wordpress.org/branches/3.7@32276 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-27 14:13:09 +00:00
Helen Hou-Sandí 23f7dc02fe The 3.7 branch is now 3.7.7.
Built from https://develop.svn.wordpress.org/branches/3.7@32286


git-svn-id: http://core.svn.wordpress.org/branches/3.7@32257 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-23 21:36:10 +00:00
Gary Pendergast 2e7a66f15f WPDB: When sanity checking a string by sending it to MySQL for conversion checks, the incorrect data structure was being returned from wpdb::strip_invalid_text(), causing all write queries to fail for some character sets when the query contained non-ASCII characters.
Merge of [32261] to the 3.7 branch.

See #32051.


Built from https://develop.svn.wordpress.org/branches/3.7@32275


git-svn-id: http://core.svn.wordpress.org/branches/3.7@32246 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-23 11:56:10 +00:00
Gary Pendergast 8490921af3 WPDB: When deciding if a query needs extra sanity checking based on collation, return early when we can. Merges [32232] and [32233] to the 3.7 branch.
See #32029.


Built from https://develop.svn.wordpress.org/branches/3.7@32241


git-svn-id: http://core.svn.wordpress.org/branches/3.7@32212 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-21 07:06:10 +00:00
Gary Pendergast 4935ef466c Bump 3.7 branch 3.7.6.
Built from https://develop.svn.wordpress.org/branches/3.7@32213


git-svn-id: http://core.svn.wordpress.org/branches/3.7@32187 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-20 17:33:09 +00:00