From b2bb7b0023e4aa5f74f2977a44e889e354184635 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Tautvidas=20Sipavi=C4=8Dius?= <t.9b5as@gmail.com>
Date: Wed, 23 Jan 2019 11:32:40 +0200
Subject: [PATCH] Add mising ABSPATH checks to prevent execution on direct file
 access

---
 lib/Config/PopulatorData/Templates/AppWelcome.php           | 5 +++--
 lib/Config/PopulatorData/Templates/Avocado.php              | 3 ++-
 lib/Config/PopulatorData/Templates/BookStoreWithCoupon.php  | 3 ++-
 lib/Config/PopulatorData/Templates/Charity.php              | 3 ++-
 lib/Config/PopulatorData/Templates/ClearNews.php            | 3 ++-
 lib/Config/PopulatorData/Templates/Coffee.php               | 5 +++--
 lib/Config/PopulatorData/Templates/DogFood.php              | 3 ++-
 lib/Config/PopulatorData/Templates/Drone.php                | 3 ++-
 lib/Config/PopulatorData/Templates/Faith.php                | 5 +++--
 lib/Config/PopulatorData/Templates/FashionBlogA.php         | 3 ++-
 lib/Config/PopulatorData/Templates/FashionShop.php          | 3 ++-
 lib/Config/PopulatorData/Templates/FashionStore.php         | 3 ++-
 lib/Config/PopulatorData/Templates/FestivalEvent.php        | 5 +++--
 lib/Config/PopulatorData/Templates/Fitness.php              | 3 ++-
 lib/Config/PopulatorData/Templates/FlowersWithCoupon.php    | 3 ++-
 lib/Config/PopulatorData/Templates/FoodBox.php              | 4 ++--
 lib/Config/PopulatorData/Templates/GiftWelcome.php          | 5 +++--
 lib/Config/PopulatorData/Templates/Hotels.php               | 3 ++-
 lib/Config/PopulatorData/Templates/IndustryConference.php   | 3 ++-
 lib/Config/PopulatorData/Templates/KidsClothing.php         | 3 ++-
 lib/Config/PopulatorData/Templates/LifestyleBlogA.php       | 3 ++-
 lib/Config/PopulatorData/Templates/LifestyleBlogB.php       | 3 ++-
 lib/Config/PopulatorData/Templates/Minimal.php              | 3 ++-
 lib/Config/PopulatorData/Templates/ModularStyleStories.php  | 3 ++-
 lib/Config/PopulatorData/Templates/NewsDay.php              | 5 +++--
 lib/Config/PopulatorData/Templates/NewspaperTraditional.php | 3 ++-
 lib/Config/PopulatorData/Templates/NotSoMedium.php          | 3 ++-
 lib/Config/PopulatorData/Templates/Phone.php                | 3 ++-
 lib/Config/PopulatorData/Templates/PieceOfCake.php          | 5 +++--
 lib/Config/PopulatorData/Templates/Retro.php                | 3 ++-
 lib/Config/PopulatorData/Templates/ScienceWeekly.php        | 2 +-
 lib/Config/PopulatorData/Templates/Shoes.php                | 4 ++--
 lib/Config/PopulatorData/Templates/Sunglasses.php           | 1 -
 lib/Config/PopulatorData/Templates/TakeAHike.php            | 2 +-
 34 files changed, 71 insertions(+), 43 deletions(-)

diff --git a/lib/Config/PopulatorData/Templates/AppWelcome.php b/lib/Config/PopulatorData/Templates/AppWelcome.php
index 80ffb382a3..589339c10e 100644
--- a/lib/Config/PopulatorData/Templates/AppWelcome.php
+++ b/lib/Config/PopulatorData/Templates/AppWelcome.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class AppWelcome {
 
   private $template_image_url;
@@ -412,4 +413,4 @@ class AppWelcome {
     return $this->template_image_url . '/app-welcome-email.jpg';
   }
 
-}
\ No newline at end of file
+}
diff --git a/lib/Config/PopulatorData/Templates/Avocado.php b/lib/Config/PopulatorData/Templates/Avocado.php
index f0f5a9aa02..0b56997c95 100644
--- a/lib/Config/PopulatorData/Templates/Avocado.php
+++ b/lib/Config/PopulatorData/Templates/Avocado.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class Avocado {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/BookStoreWithCoupon.php b/lib/Config/PopulatorData/Templates/BookStoreWithCoupon.php
index 43cab0c770..de88b74c68 100644
--- a/lib/Config/PopulatorData/Templates/BookStoreWithCoupon.php
+++ b/lib/Config/PopulatorData/Templates/BookStoreWithCoupon.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class BookStoreWithCoupon {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/Charity.php b/lib/Config/PopulatorData/Templates/Charity.php
index a5a244f960..66b5f7c2de 100644
--- a/lib/Config/PopulatorData/Templates/Charity.php
+++ b/lib/Config/PopulatorData/Templates/Charity.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class Charity {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/ClearNews.php b/lib/Config/PopulatorData/Templates/ClearNews.php
index 373420a17e..d09fc7c9bc 100644
--- a/lib/Config/PopulatorData/Templates/ClearNews.php
+++ b/lib/Config/PopulatorData/Templates/ClearNews.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class ClearNews {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/Coffee.php b/lib/Config/PopulatorData/Templates/Coffee.php
index 33dd486c7f..5b1681b7aa 100644
--- a/lib/Config/PopulatorData/Templates/Coffee.php
+++ b/lib/Config/PopulatorData/Templates/Coffee.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class Coffee {
 
   private $template_image_url;
@@ -999,4 +1000,4 @@ class Coffee {
     );
   }
 
-}
\ No newline at end of file
+}
diff --git a/lib/Config/PopulatorData/Templates/DogFood.php b/lib/Config/PopulatorData/Templates/DogFood.php
index 6a99750ac3..ea09640408 100644
--- a/lib/Config/PopulatorData/Templates/DogFood.php
+++ b/lib/Config/PopulatorData/Templates/DogFood.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class DogFood {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/Drone.php b/lib/Config/PopulatorData/Templates/Drone.php
index 80e6e5564d..04c9d68871 100644
--- a/lib/Config/PopulatorData/Templates/Drone.php
+++ b/lib/Config/PopulatorData/Templates/Drone.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class Drone {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/Faith.php b/lib/Config/PopulatorData/Templates/Faith.php
index 024602956a..47412edec1 100644
--- a/lib/Config/PopulatorData/Templates/Faith.php
+++ b/lib/Config/PopulatorData/Templates/Faith.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class Faith {
 
   private $template_image_url;
@@ -9,7 +10,7 @@ class Faith {
 
   function __construct($assets_url) {
      $this->template_image_url = 'https://ps.w.org/mailpoet/assets/newsletter-templates/faith';
-    $this->social_icon_url = $assets_url . '/img/newsletter_editor/social-icons';
+     $this->social_icon_url = $assets_url . '/img/newsletter_editor/social-icons';
   }
 
   function get() {
diff --git a/lib/Config/PopulatorData/Templates/FashionBlogA.php b/lib/Config/PopulatorData/Templates/FashionBlogA.php
index e0c2017dc1..e6b2b196be 100644
--- a/lib/Config/PopulatorData/Templates/FashionBlogA.php
+++ b/lib/Config/PopulatorData/Templates/FashionBlogA.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class FashionBlogA {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/FashionShop.php b/lib/Config/PopulatorData/Templates/FashionShop.php
index 93aac79ca9..eed3d9aa9c 100644
--- a/lib/Config/PopulatorData/Templates/FashionShop.php
+++ b/lib/Config/PopulatorData/Templates/FashionShop.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class FashionShop {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/FashionStore.php b/lib/Config/PopulatorData/Templates/FashionStore.php
index 89fda8632e..1509d97989 100644
--- a/lib/Config/PopulatorData/Templates/FashionStore.php
+++ b/lib/Config/PopulatorData/Templates/FashionStore.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class FashionStore {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/FestivalEvent.php b/lib/Config/PopulatorData/Templates/FestivalEvent.php
index fc9ef57ead..222db84358 100644
--- a/lib/Config/PopulatorData/Templates/FestivalEvent.php
+++ b/lib/Config/PopulatorData/Templates/FestivalEvent.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class FestivalEvent {
 
   private $template_image_url;
@@ -521,4 +522,4 @@ class FestivalEvent {
     return $this->template_image_url . '/festival-event.jpg';
   }
 
-}
\ No newline at end of file
+}
diff --git a/lib/Config/PopulatorData/Templates/Fitness.php b/lib/Config/PopulatorData/Templates/Fitness.php
index 1014338539..fc0c1c4745 100644
--- a/lib/Config/PopulatorData/Templates/Fitness.php
+++ b/lib/Config/PopulatorData/Templates/Fitness.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class Fitness {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/FlowersWithCoupon.php b/lib/Config/PopulatorData/Templates/FlowersWithCoupon.php
index 3cd5cd1355..085a2aaa10 100644
--- a/lib/Config/PopulatorData/Templates/FlowersWithCoupon.php
+++ b/lib/Config/PopulatorData/Templates/FlowersWithCoupon.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class FlowersWithCoupon {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/FoodBox.php b/lib/Config/PopulatorData/Templates/FoodBox.php
index 75e3387d7a..6efa2619e3 100644
--- a/lib/Config/PopulatorData/Templates/FoodBox.php
+++ b/lib/Config/PopulatorData/Templates/FoodBox.php
@@ -1,7 +1,7 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
 
 class FoodBox {
 
@@ -754,4 +754,4 @@ class FoodBox {
     return $this->template_image_url . '/welcome-to-foodbox.jpg';
   }
 
-}
\ No newline at end of file
+}
diff --git a/lib/Config/PopulatorData/Templates/GiftWelcome.php b/lib/Config/PopulatorData/Templates/GiftWelcome.php
index b159385c6c..3a8c1a0163 100644
--- a/lib/Config/PopulatorData/Templates/GiftWelcome.php
+++ b/lib/Config/PopulatorData/Templates/GiftWelcome.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class GiftWelcome {
 
   private $template_image_url;
@@ -345,4 +346,4 @@ class GiftWelcome {
   }
 
 
-}
\ No newline at end of file
+}
diff --git a/lib/Config/PopulatorData/Templates/Hotels.php b/lib/Config/PopulatorData/Templates/Hotels.php
index d6ac00f397..f82f548b53 100644
--- a/lib/Config/PopulatorData/Templates/Hotels.php
+++ b/lib/Config/PopulatorData/Templates/Hotels.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class Hotels {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/IndustryConference.php b/lib/Config/PopulatorData/Templates/IndustryConference.php
index fab587b36e..dca45813f2 100644
--- a/lib/Config/PopulatorData/Templates/IndustryConference.php
+++ b/lib/Config/PopulatorData/Templates/IndustryConference.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class IndustryConference {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/KidsClothing.php b/lib/Config/PopulatorData/Templates/KidsClothing.php
index f6a38d9eab..b5cab64db0 100644
--- a/lib/Config/PopulatorData/Templates/KidsClothing.php
+++ b/lib/Config/PopulatorData/Templates/KidsClothing.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class KidsClothing {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/LifestyleBlogA.php b/lib/Config/PopulatorData/Templates/LifestyleBlogA.php
index 4befd00abc..024ad58777 100644
--- a/lib/Config/PopulatorData/Templates/LifestyleBlogA.php
+++ b/lib/Config/PopulatorData/Templates/LifestyleBlogA.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class LifestyleBlogA {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/LifestyleBlogB.php b/lib/Config/PopulatorData/Templates/LifestyleBlogB.php
index 5be3a2e08f..6453384202 100644
--- a/lib/Config/PopulatorData/Templates/LifestyleBlogB.php
+++ b/lib/Config/PopulatorData/Templates/LifestyleBlogB.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class LifestyleBlogB {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/Minimal.php b/lib/Config/PopulatorData/Templates/Minimal.php
index 119d19a4d0..5a9ea3987e 100644
--- a/lib/Config/PopulatorData/Templates/Minimal.php
+++ b/lib/Config/PopulatorData/Templates/Minimal.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class Minimal {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/ModularStyleStories.php b/lib/Config/PopulatorData/Templates/ModularStyleStories.php
index f88f4673fa..bb11698e8f 100644
--- a/lib/Config/PopulatorData/Templates/ModularStyleStories.php
+++ b/lib/Config/PopulatorData/Templates/ModularStyleStories.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class ModularStyleStories {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/NewsDay.php b/lib/Config/PopulatorData/Templates/NewsDay.php
index 2adeadcad9..c862df7f7f 100644
--- a/lib/Config/PopulatorData/Templates/NewsDay.php
+++ b/lib/Config/PopulatorData/Templates/NewsDay.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class NewsDay {
 
   private $template_image_url;
@@ -9,7 +10,7 @@ class NewsDay {
 
   function __construct($assets_url) {
      $this->template_image_url = 'https://ps.w.org/mailpoet/assets/newsletter-templates/news_day';
-    $this->social_icon_url = $assets_url . '/img/newsletter_editor/social-icons';
+     $this->social_icon_url = $assets_url . '/img/newsletter_editor/social-icons';
   }
 
   function get() {
diff --git a/lib/Config/PopulatorData/Templates/NewspaperTraditional.php b/lib/Config/PopulatorData/Templates/NewspaperTraditional.php
index 131cb3b7e4..b2a4267741 100644
--- a/lib/Config/PopulatorData/Templates/NewspaperTraditional.php
+++ b/lib/Config/PopulatorData/Templates/NewspaperTraditional.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class NewspaperTraditional {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/NotSoMedium.php b/lib/Config/PopulatorData/Templates/NotSoMedium.php
index 56cd7560c3..b327f6b3d9 100644
--- a/lib/Config/PopulatorData/Templates/NotSoMedium.php
+++ b/lib/Config/PopulatorData/Templates/NotSoMedium.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class NotSoMedium {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/Phone.php b/lib/Config/PopulatorData/Templates/Phone.php
index cf8c4da367..8d9c9534da 100644
--- a/lib/Config/PopulatorData/Templates/Phone.php
+++ b/lib/Config/PopulatorData/Templates/Phone.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class Phone {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/PieceOfCake.php b/lib/Config/PopulatorData/Templates/PieceOfCake.php
index 33b1d15fdb..5809acac95 100644
--- a/lib/Config/PopulatorData/Templates/PieceOfCake.php
+++ b/lib/Config/PopulatorData/Templates/PieceOfCake.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class PieceOfCake {
 
   private $template_image_url;
@@ -441,4 +442,4 @@ class PieceOfCake {
     return $this->template_image_url . '/piece-of-cake.jpg';
   }
 
-}
\ No newline at end of file
+}
diff --git a/lib/Config/PopulatorData/Templates/Retro.php b/lib/Config/PopulatorData/Templates/Retro.php
index 0b4b913652..5d6c777a24 100644
--- a/lib/Config/PopulatorData/Templates/Retro.php
+++ b/lib/Config/PopulatorData/Templates/Retro.php
@@ -1,7 +1,8 @@
 <?php
-
 namespace MailPoet\Config\PopulatorData\Templates;
 
+if(!defined('ABSPATH')) exit;
+
 class Retro {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/ScienceWeekly.php b/lib/Config/PopulatorData/Templates/ScienceWeekly.php
index 5d3f6c4352..2b052d9122 100644
--- a/lib/Config/PopulatorData/Templates/ScienceWeekly.php
+++ b/lib/Config/PopulatorData/Templates/ScienceWeekly.php
@@ -9,7 +9,7 @@ class ScienceWeekly {
 
   function __construct($assets_url) {
      $this->template_image_url = 'https://ps.w.org/mailpoet/assets/newsletter-templates/science_weekly';
-    $this->social_icon_url = $assets_url . '/img/newsletter_editor/social-icons';
+     $this->social_icon_url = $assets_url . '/img/newsletter_editor/social-icons';
   }
 
   function get() {
diff --git a/lib/Config/PopulatorData/Templates/Shoes.php b/lib/Config/PopulatorData/Templates/Shoes.php
index 543e61a43d..5464023b61 100644
--- a/lib/Config/PopulatorData/Templates/Shoes.php
+++ b/lib/Config/PopulatorData/Templates/Shoes.php
@@ -9,7 +9,7 @@ class Shoes {
 
   function __construct($assets_url) {
      $this->template_image_url = 'https://ps.w.org/mailpoet/assets/newsletter-templates/shoes';
-    $this->social_icon_url = $assets_url . '/img/newsletter_editor/social-icons';
+     $this->social_icon_url = $assets_url . '/img/newsletter_editor/social-icons';
   }
 
   function get() {
@@ -576,4 +576,4 @@ class Shoes {
     return $this->template_image_url . '/shoes.jpg';
   }
 
-}
\ No newline at end of file
+}
diff --git a/lib/Config/PopulatorData/Templates/Sunglasses.php b/lib/Config/PopulatorData/Templates/Sunglasses.php
index 4400c064de..7d8b653574 100644
--- a/lib/Config/PopulatorData/Templates/Sunglasses.php
+++ b/lib/Config/PopulatorData/Templates/Sunglasses.php
@@ -2,7 +2,6 @@
 
 namespace MailPoet\Config\PopulatorData\Templates;
 
-
 class Sunglasses {
 
   private $template_image_url;
diff --git a/lib/Config/PopulatorData/Templates/TakeAHike.php b/lib/Config/PopulatorData/Templates/TakeAHike.php
index fa9e1079bb..0c7f1f6056 100644
--- a/lib/Config/PopulatorData/Templates/TakeAHike.php
+++ b/lib/Config/PopulatorData/Templates/TakeAHike.php
@@ -9,7 +9,7 @@ class TakeAHike {
 
   function __construct($assets_url) {
      $this->template_image_url = 'https://ps.w.org/mailpoet/assets/newsletter-templates/take_a_hike';
-    $this->social_icon_url = $assets_url . '/img/newsletter_editor/social-icons';
+     $this->social_icon_url = $assets_url . '/img/newsletter_editor/social-icons';
   }
 
   function get() {