Commit Graph

23882 Commits

Author SHA1 Message Date
Andrew Nacin
9071065085 package.json bump.
git-svn-id: https://develop.svn.wordpress.org/branches/3.7@30478 602fd350-edb4-49c9-b593-d223f7449a82
2014-11-20 16:32:44 +00:00
Andrew Nacin
ec07253532 3.7.5 version bumps.
git-svn-id: https://develop.svn.wordpress.org/branches/3.7@30472 602fd350-edb4-49c9-b593-d223f7449a82
2014-11-20 16:25:15 +00:00
Andrew Nacin
c54aff3e05 Prevent high resource usage when hashing large passwords. props mdawaffe, pento
Merges [30466] to the 3.7 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@30470 602fd350-edb4-49c9-b593-d223f7449a82
2014-11-20 16:07:26 +00:00
Andrew Nacin
128edc8243 Validate image data.
Merges [30458] to the 3.7 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@30465 602fd350-edb4-49c9-b593-d223f7449a82
2014-11-20 15:59:21 +00:00
Andrew Nacin
b375d0b503 Anchor texturize to shortcodes to improve regex efficiency.
Merges [30452] to the 3.7 branch.

props miqrogroove.
see #29557 for segfault issues.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@30456 602fd350-edb4-49c9-b593-d223f7449a82
2014-11-20 14:39:12 +00:00
Andrew Nacin
0634a58d37 Skip tests that were fixed in a later release. see #30284.
git-svn-id: https://develop.svn.wordpress.org/branches/3.7@30454 602fd350-edb4-49c9-b593-d223f7449a82
2014-11-20 14:33:13 +00:00
Andrew Nacin
175be18765 Better validation of the URL used in core HTTP requests.
Merges [30443] to the 3.7 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@30447 602fd350-edb4-49c9-b593-d223f7449a82
2014-11-20 14:02:04 +00:00
Andrew Nacin
b83ce5e674 Press This: Ensure the error message is printed. props johnbillion
Merges [30438] to the 3.7 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@30442 602fd350-edb4-49c9-b593-d223f7449a82
2014-11-20 13:59:18 +00:00
Andrew Nacin
4e0279a92c Invalidate password keys when a user's email changes.
Merges [30430] to the 3.7 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@30434 602fd350-edb4-49c9-b593-d223f7449a82
2014-11-20 13:42:08 +00:00
Andrew Nacin
10634dbc79 Fix typo in style filter. props miqrogroove
Merges [30425] to the 3.7 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@30429 602fd350-edb4-49c9-b593-d223f7449a82
2014-11-20 13:16:05 +00:00
Andrew Nacin
b8d5a81735 Form validation for password resets.
Merges [30417] to the 3.7 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@30421 602fd350-edb4-49c9-b593-d223f7449a82
2014-11-20 12:24:40 +00:00
Andrew Nacin
3ec30b3293 Use hash_equals() for old md5 hashes.
Merges [30412] to the 3.7 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@30416 602fd350-edb4-49c9-b593-d223f7449a82
2014-11-20 12:05:39 +00:00
Andrew Nacin
377c2e7d10 Password resets: Use network_site_url() for form actions.
Merges [29631] to the 3.7 branch.

props mdawaffe.
fixes #29156.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@29640 602fd350-edb4-49c9-b593-d223f7449a82
2014-08-27 03:05:11 +00:00
Andrew Nacin
c21c12ea80 3.7.4
git-svn-id: https://develop.svn.wordpress.org/branches/3.7@29413 602fd350-edb4-49c9-b593-d223f7449a82
2014-08-06 18:26:53 +00:00
Andrew Nacin
69e892e150 Use delimiters when building nonce hashes. Part two of [29388].
git-svn-id: https://develop.svn.wordpress.org/branches/3.7@29410 602fd350-edb4-49c9-b593-d223f7449a82
2014-08-06 17:58:44 +00:00
Andrew Nacin
2223742b71 Ignore entities in XML-RPC requests.
Merges [29404] to the 3.7 branch.

props mdawaffe, nacin.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@29407 602fd350-edb4-49c9-b593-d223f7449a82
2014-08-06 17:50:10 +00:00
Andrew Nacin
ceec588ccd Escape late in get_avatar().
Merges [29397] to the 3.7 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@29400 602fd350-edb4-49c9-b593-d223f7449a82
2014-08-06 07:50:59 +00:00
Andrew Nacin
45f88680d5 Don't pass around the password reset key.
Merges [29327] and [29381] to the 3.7 branch.

props mdawaffe.
fixes #29060.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@29396 602fd350-edb4-49c9-b593-d223f7449a82
2014-08-06 06:39:30 +00:00
Andrew Nacin
c4789a8878 Disable external entities in ID3.
Merges [29378] to the 3.7 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@29392 602fd350-edb4-49c9-b593-d223f7449a82
2014-08-06 05:57:41 +00:00
Andrew Nacin
8336f4689c Constant time for wp_verify_nonce().
Merges [29384] to the 3.7 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@29388 602fd350-edb4-49c9-b593-d223f7449a82
2014-08-06 05:44:39 +00:00
Andrew Nacin
398f3df8b6 3.7.4-alpha
git-svn-id: https://develop.svn.wordpress.org/branches/3.7@29387 602fd350-edb4-49c9-b593-d223f7449a82
2014-08-06 05:43:12 +00:00
Andrew Nacin
2e42c426e9 3.7.3
git-svn-id: https://develop.svn.wordpress.org/branches/3.7@28119 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-14 19:05:12 +00:00
Andrew Nacin
8ec3e80b3d Avoid stomping of bulk postdata inside the bulk_edit_posts() loop.
Merges [28113] to the 3.7 branch.

Reverts [27992] which did not fix it for authors and comment/ping status.

props dd32, DrewAPicture.
fixes #27792.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@28115 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-14 08:12:42 +00:00
Andrew Nacin
756b91efe2 3.7.3-RC1
git-svn-id: https://develop.svn.wordpress.org/branches/3.7@28078 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-11 17:29:53 +00:00
Andrew Nacin
d0e1cc7c6d Recover auto-drafts lost via Quick Draft.
Merges [28075] from the 3.8 to the 3.7 branch. See [28074].

fixes #27734.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@28077 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-11 17:28:30 +00:00
Andrew Nacin
1f066e31be Ensure edit_post() promotes an auto-draft to draft. Fixes Quick Draft.
Merges [28073] from the 3.8 branch to the 3.7 branch.

props dd32.
see #27734.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@28074 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-11 04:37:21 +00:00
Andrew Nacin
fd31221714 3.7.2
git-svn-id: https://develop.svn.wordpress.org/branches/3.7@28056 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-08 18:13:00 +00:00
Andrew Nacin
c5c7691c85 Harden HMAC verification. props duck_. [28053] for 3.7.
git-svn-id: https://develop.svn.wordpress.org/branches/3.7@28055 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-08 18:07:28 +00:00
Andrew Nacin
781e7ac168 3.7.2-RC1
git-svn-id: https://develop.svn.wordpress.org/branches/3.7@27993 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-07 19:39:41 +00:00
Andrew Nacin
7dcfefa424 Avoid stomping of bulk postdata inside the bulk_edit_posts() loop.
Merges [27990] to the 3.7 branch.

props kovshenin.
see [27964], see #27452.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@27992 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-07 19:36:01 +00:00
Andrew Nacin
5a2231e357 Better checks for contributors when saving posts.
Merges [27976] from the 3.8 branch to the 3.7 branch.

props dd32, kovshenin, plocha.
fixes #27452.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@27977 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-06 22:16:19 +00:00
Dion Hulse
50ecd33572 Background Updates: Fix a PHP Warning caused by a Upgrader instance being passed into the Theme & Plugin $extra_stats parameter.
Background Updates: Fix two variable typos in r27905

Merges [27906],	[27928]	to the 3.7 branch.
Fixes #27633.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@27930 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-03 05:46:28 +00:00
Andrew Nacin
f9032b5d7a Background Updates: Record plugin & theme update statistics like we do for core updates.
Pass plugin/theme update objects into the Background updater for consistency with core & translations.

Merges [27905] to the 3.7 branch.

props dd32.
fixes #27633.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@27924 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-03 04:02:35 +00:00
Andrew Nacin
774bc7d2de Update Plupload Silverlight binary to 1.5.8 in the 3.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/3.7@27921 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-03 03:37:12 +00:00
Andrew Nacin
32da6d025a Remove links_recently_updated_time (hardening).
Merges [27917] from the 3.8 branch to 3.7 branch.

see #27649.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@27919 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-03 03:22:37 +00:00
Andrew Nacin
e89f76e150 Prefix the notoptions cache key in the multisite site-options group with $wpdb->siteid to avoid collisions.
Merges [26304] (and [26305]) from 3.8 to the 3.7 branch.

props wonderboymusic.
fixes #25883.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@27888 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-01 04:06:27 +00:00
Andrew Nacin
52c8975ba6 Fix a regression in wp_mkdir_p() where the $mode of the parent folder is not correctly applied to all created paths.
Merges [26449] and [26927] from 3.8.x to the 3.7 branch.

props dd32.
fixes #25822.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@27887 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-01 04:01:10 +00:00
Andrew Nacin
a2b79e3f77 Cron: Fix a case where a cache inconsistency can cause wp_clear_scheduled_hook() to enter an infinite loop.
Merges [26782] from 3.8 to the 3.7 branch.

props dd32.
fixes #25773.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@27886 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-01 03:39:35 +00:00
Andrew Nacin
5366d9505e Core Updates: Fix a case where options (db_version specifically) can end up with stale values in the cache after a update is performed.
Merges [26448] and [26734] from 3.8 to the 3.7 branch.

props dd32.
fixes #26173.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@27885 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-01 03:35:23 +00:00
Andrew Nacin
6ed90e31ac Updates: When a failed Background Update occurs, only show the failed update nag if the user hasn't yet updated if it was an early abort.
Merges [26186] from 3.8 to the 3.7 branch.

props SergeyBiryukov.
fixes #25887.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@27884 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-01 03:30:13 +00:00
Andrew Nacin
ec663e1bfc Core Upgrader success statistics: Pass the version of WordPress we're upgrading from, as well as the version being upgraded to.
Merges [26016] and [26017] from 3.8 to the 3.7 branch.

fixes #25772.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@27883 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-01 03:28:09 +00:00
Andrew Nacin
d4365c437f When checking filesystem permissions for core updates, only check the permissions of the files which we need to alter.
Merges [26014] from 3.8 to the 3.7 branch.

fixes #25771.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@27882 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-01 03:08:47 +00:00
Andrew Nacin
8bdd3fd056 Background Updates: Fix a PHP fatal error which could be encountered on some systems when using FTP.
Merges [26148] from 3.8 to the 3.7 branch.

props dd32.
fixes #25817.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@27881 602fd350-edb4-49c9-b593-d223f7449a82
2014-04-01 02:57:52 +00:00
Andrew Nacin
75f1989c76 Forward pingback IP during pingback verification.
Merges [27872] to the 3.7 branch.

props tellyworth, nacin.
fixes #27613.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@27878 602fd350-edb4-49c9-b593-d223f7449a82
2014-03-31 21:35:42 +00:00
Andrew Nacin
6e3eb4ef4a Default Themes: Update POT files for the 3.7 branch.
git-svn-id: https://develop.svn.wordpress.org/branches/3.7@27590 602fd350-edb4-49c9-b593-d223f7449a82
2014-03-18 19:19:42 +00:00
Andrew Nacin
14d02c30c1 Update the 3.7 branch's version numbers. fixes #25985.
git-svn-id: https://develop.svn.wordpress.org/branches/3.7@26546 602fd350-edb4-49c9-b593-d223f7449a82
2013-12-02 23:15:42 +00:00
Dion Hulse
78edae3e56 Background Updates: Spread them over the hour. Props Pento. Merges r26149 to the 3.7 branch. Fixes #25833 for 3.7.
git-svn-id: https://develop.svn.wordpress.org/branches/3.7@26450 602fd350-edb4-49c9-b593-d223f7449a82
2013-11-28 02:35:00 +00:00
Andrew Nacin
b9839649ee PHP4 compatibility for files loaded before we bail. fixes #25760.
Merges [25986] to the 3.7 branch.


git-svn-id: https://develop.svn.wordpress.org/branches/3.7@25987 602fd350-edb4-49c9-b593-d223f7449a82
2013-10-29 20:07:04 +00:00
Andrew Nacin
aab9d3dec0 Final count of bug fixes in 3.7.1 is 10.
git-svn-id: https://develop.svn.wordpress.org/branches/3.7@25984 602fd350-edb4-49c9-b593-d223f7449a82
2013-10-29 18:15:14 +00:00
Andrew Nacin
b0f19b0c50 3.7.1
git-svn-id: https://develop.svn.wordpress.org/branches/3.7@25982 602fd350-edb4-49c9-b593-d223f7449a82
2013-10-29 17:19:29 +00:00