Skip to content

Commit 36a8f50

Browse files
ajaydsouzaajaydsouza
committed
Update Top 10 4.2.3 deployment files
1 parent f1749c2 commit 36a8f50

19 files changed

Lines changed: 423 additions & 500 deletions

‎languages/top-10-en_US.mo‎

31 Bytes
Binary file not shown.

‎languages/top-10-en_US.po‎

Lines changed: 244 additions & 449 deletions
Large diffs are not rendered by default.

‎languages/top-10.pot‎

Lines changed: 94 additions & 23 deletions
Large diffs are not rendered by default.

‎readme.txt‎

Lines changed: 19 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,9 +2,9 @@
22
Tags: popular posts, post views, page views, most viewed posts, popular posts widget, trending posts, post views counter, multisite, block, shortcode
33
Contributors: webberzone, ajay
44
Donate link: https://wzn.io/donate-wz
5-
Stable tag: 4.2.2
5+
Stable tag: 4.2.3
66
Requires at least: 6.6
7-
Tested up to: 6.9
7+
Tested up to: 7.0
88
Requires PHP: 7.4
99
License: GPLv2 or later
1010

@@ -156,6 +156,20 @@ The Patchstack team help validate, triage and handle any security vulnerabilitie
156156

157157
== Changelog ==
158158

159+
= 4.2.3 =
160+
161+
* Security:
162+
* Hardened Settings API and metabox output escaping.
163+
164+
* Improvements:
165+
* Updated Freemius SDK to version 2.13.1.
166+
* Updated Settings API assets and Tom Select handling.
167+
* Refreshed translations and generated assets.
168+
169+
* Fixes:
170+
* Fixed metabox screen handling when `get_current_screen()` is unavailable.
171+
* Fixed admin notices package tags.
172+
159173
= 4.2.2 =
160174

161175
* Modifications:
@@ -209,5 +223,8 @@ Release post: [https://webberzone.com/announcements/top-10-v4-2-0/](https://webb
209223

210224
== Upgrade Notice ==
211225

226+
= 4.2.3 =
227+
Security hardening, Settings API updates, and bug fixes.
228+
212229
= 4.2.2 =
213230
Bugs squashed from previous releases.

‎top-10.php‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
* Plugin Name: WebberZone Top 10
1515
* Plugin URI: https://webberzone.com/plugins/top-10/
1616
* Description: Count daily and total visits per post and display the most popular posts based on the number of views
17-
* Version: 4.2.2
17+
* Version: 4.2.3
1818
* Author: WebberZone
1919
* Author URI: https://webberzone.com
2020
* License: GPL-2.0+
@@ -36,7 +36,7 @@
3636
* @since 3.1.0
3737
*/
3838
if ( ! defined( 'TOP_TEN_VERSION' ) ) {
39-
define( 'TOP_TEN_VERSION', '4.2.2' );
39+
define( 'TOP_TEN_VERSION', '4.2.3' );
4040
}
4141

4242
/**

‎vendor/freemius/assets/js/pricing/freemius-pricing.js‎

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎vendor/freemius/includes/class-freemius.php‎

Lines changed: 2 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -6558,10 +6558,7 @@ private function maybe_schedule_sync_cron() {
65586558
$next_schedule = $this->next_sync_cron();
65596559

65606560
// The event is properly scheduled, so no need to reschedule it.
6561-
if (
6562-
is_numeric( $next_schedule ) &&
6563-
$next_schedule > time()
6564-
) {
6561+
if ( is_numeric( $next_schedule ) ) {
65656562
return;
65666563
}
65676564

@@ -7098,7 +7095,6 @@ private function add_sticky_optin_admin_notice() {
70987095
*/
70997096
function _enqueue_connect_essentials() {
71007097
wp_enqueue_script( 'jquery' );
7101-
wp_enqueue_script( 'json2' );
71027098

71037099
fs_enqueue_local_script( 'postmessage', 'nojquery.ba-postmessage.js' );
71047100
fs_enqueue_local_script( 'fs-postmessage', 'postmessage.js' );
@@ -17436,7 +17432,7 @@ function setup_network_account(
1743617432
FS_User_Lock::instance()->unlock();
1743717433
}
1743817434

17439-
if ( 1 < count( $installs ) ) {
17435+
if ( 1 < count( $installs ) || fs_is_network_admin() ) {
1744017436
// Only network level opt-in can have more than one install.
1744117437
$is_network_level_opt_in = true;
1744217438
}

‎vendor/freemius/includes/class-fs-plugin-updater.php‎

Lines changed: 24 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -540,9 +540,32 @@ function pre_set_site_transient_update_plugins_filter( $transient_data ) {
540540
return $transient_data;
541541
}
542542

543+
// Alias.
544+
$basename = $this->_fs->premium_plugin_basename();
545+
543546
global $wp_current_filter;
544547

545-
if ( ! empty( $wp_current_filter ) && in_array( 'upgrader_process_complete', $wp_current_filter ) ) {
548+
/**
549+
* During bulk updates, avoid re-injecting update data for the plugin itself once it has already been updated.
550+
*
551+
* If the custom package is re-added to the transient after the plugin update, WordPress may detect the package again and incorrectly report "The plugin is at the latest version" for a pending update, since the custom package version matches the currently installed version.
552+
*
553+
* Behavior differs depending on how the bulk update is triggered. Please refer to the inline comments for each flow below for details.
554+
*/
555+
if (
556+
! empty( $wp_current_filter ) && (
557+
/**
558+
* update-core.php and other upgrader pages:
559+
* The `upgrader_process_complete` action fires only once after all updates have finished. In this case, it is the current action (`$wp_current_filter[0]`), while `self::$_upgrade_basename` may contain any plugin basename.
560+
*/
561+
'upgrader_process_complete' === $wp_current_filter[0] ||
562+
/**
563+
* AJAX bulk updates (e.g., from the Plugins page):
564+
* The `upgrader_process_complete` action fires multiple times — once for each plugin after it finishes updating. In this flow, it is not the current action (`$wp_current_filter[0]`) because it is triggered from another action. Instead, we compare `self::$_upgrade_basename` with the basename of the plugin currently being updated, since the `upgrader_process_complete` action runs separately for each plugin.
565+
*/
566+
( in_array( 'upgrader_process_complete', $wp_current_filter ) && self::$_upgrade_basename === $basename )
567+
)
568+
) {
546569
return $transient_data;
547570
}
548571

@@ -566,9 +589,6 @@ function pre_set_site_transient_update_plugins_filter( $transient_data ) {
566589
}
567590
}
568591

569-
// Alias.
570-
$basename = $this->_fs->premium_plugin_basename();
571-
572592
if ( is_object( $this->_update_details ) ) {
573593
if ( isset( $transient_data->no_update ) ) {
574594
unset( $transient_data->no_update[ $basename ] );

‎vendor/freemius/includes/fs-essential-functions.php‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,9 @@
1010
* @license https://www.gnu.org/licenses/gpl-3.0.html GNU General Public License Version 3
1111
* @since 1.1.5
1212
*/
13+
if ( ! defined( 'ABSPATH' ) ) {
14+
exit;
15+
}
1316

1417
if ( ! function_exists( 'fs_normalize_path' ) ) {
1518
if ( function_exists( 'wp_normalize_path' ) ) {

‎vendor/freemius/includes/managers/class-fs-contact-form-manager.php‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ public function get_standalone_link( Freemius $fs ) {
7777
$query_params = $this->get_query_params( $fs );
7878

7979
$query_params['is_standalone'] = 'true';
80-
$query_params['parent_url'] = admin_url( add_query_arg( null, null ) );
80+
$query_params['parent_url'] = admin_url( add_query_arg( '', '' ) );
8181

8282
return WP_FS__ADDRESS . '/contact/?' . http_build_query( $query_params );
8383
}

0 commit comments

Comments
 (0)