Commit Graph

1275 Commits

Author SHA1 Message Date
Tautvidas Sipavičius
5eba0e2731 Fix referencing $this in anonymous function context 2016-11-04 17:00:10 +02:00
Jonathan Labreuille
c05be7d987 remove useless comment (containing a typo on top of that...) 2016-11-04 14:14:48 +01:00
Jonathan Labreuille
b8cb1da777 added custom information to HS Beacon 2016-11-04 14:11:37 +01:00
Vlad
0d32c09df3 - Replaces model arrays with model objects 2016-11-03 20:45:53 -04:00
Vlad
9f288ae11a - Removes unused classes
- Fixes [newsletter:number] shortcode not working
2016-11-03 20:38:20 -04:00
Vlad
e87ccd6b92 - Corrects/updates code comments 2016-11-03 18:11:00 -04:00
Tautvidas Sipavičius
bdcb7f0e58 Merge pull request #687 from mailpoet/issue_681_670
fixed HTML export of subscription form + updated docs url in settings
2016-11-02 16:15:07 +02:00
Jonathan Labreuille
069bc95297 fixed HTML export of subscription form + updated docs url in settings 2016-11-02 13:24:55 +01:00
Tautvidas Sipavičius
2a961cca01 Eliminate an extra level of indentation 2016-11-02 13:10:23 +02:00
Tautvidas Sipavičius
ee275532b1 Merge pull request #679 from mailpoet/secissue_640
XSS in listing sort by
2016-11-02 12:48:40 +02:00
Jonathan Labreuille
40ca54c447 sort by defaults to 'id' if invalid 2016-11-02 11:17:27 +01:00
Tautvidas Sipavičius
e553922eca Update composer.lock and remove leftover comment 2016-11-02 11:30:52 +02:00
Vlad
f037e1271d - Removes php-simple-html-dom-parser dependency
- Updates CSS inliner to use pQuery DOM parser
2016-10-31 19:01:48 -04:00
Jonathan Labreuille
f4563e18cd use filter_var instead of regex 2016-10-31 17:36:53 +01:00
Jonathan Labreuille
feaac5eb54 constrain sort_by to alphanumeric/underscore in order to avoid xss in error notices 2016-10-31 17:36:53 +01:00
Tautvidas Sipavičius
c09bcd51ad Merge pull request #675 from mailpoet/amazon_ses_fix
Fixes const value declaration for PHP <5.6
2016-10-28 17:29:57 +03:00
Vlad
01af4d3401 - Fixes const value declaration for PHP <5.6 2016-10-28 10:13:56 -04:00
Vlad
7d2e13b9a3 - Updates license check logic
- Updates subscriber limit check logic
- Updates unit tests
- Updates Menu's check for subscriber limit
2016-10-27 12:35:57 -04:00
Vlad
a4395f2350 - Adds unit tests 2016-10-27 11:16:30 -04:00
Vlad
411969b3eb - Adds check for premium plugin status
- Bypasses subscriber count enforcement if premium is enabled
2016-10-27 10:20:05 -04:00
Vlad
217894745d - Updates text strings
- Closes #655
2016-10-25 10:21:23 -04:00
Vlad
8330bfc884 - Fixes "completed" status update of notification history
newsletters
- Fixes detection of post notification newsletters that do not contain any posts (i.e., blank ALC blocks)
- Updates unit test
2016-10-24 08:55:22 -04:00
Vlad
ef21a8cca7 - Enables post notification schedule update upon newsletter saving during
step 3
2016-10-24 08:55:22 -04:00
Vlad
e32c46a755 - Detaches posts_where action after posts are pulled from the database 2016-10-24 08:55:22 -04:00
Tautvidas Sipavičius
092f69538a Merge pull request #667 from mailpoet/sending_to_trashed_subscribers_fix
Prevents newsletters from being sent to trashed subscribers
2016-10-24 15:26:55 +03:00
Tautvidas Sipavičius
7a75367d75 Merge pull request #666 from mailpoet/export_filename_update
Increases export filename length and randomness
2016-10-24 13:36:36 +03:00
Vlad
1ac288d286 - Prevents newsletters from being sent to trashed subscribers
- Updates unit tests
- Addresses #629
2016-10-21 14:36:44 -04:00
Vlad
516bc73092 - Increases export filename length and randomness 2016-10-21 11:42:13 -04:00
Jonathan Labreuille
202e4b90e1 added unit test for API::checkPermissions 2016-10-21 13:36:41 +02:00
Jonathan Labreuille
ee89bf0722 refactored API class 2016-10-21 13:36:41 +02:00
Jonathan Labreuille
876d21300a fixed duplicated lines due to faulty rebase 2016-10-21 13:36:41 +02:00
Jonathan Labreuille
0ca5b7a79f API Security
- added APIAccess class to define access levels of API Endpoints (permissions)
- use "mailpoet_token" for all nonce (just as before)
- merged setupPublic/setupAdmin methods in API in order to avoid duplication
- check permission if access level is not all
- fixed ABSPATH check in some classes
2016-10-21 13:36:41 +02:00
Jonathan Labreuille
5d0ee43921 removed checkToken for admin ajax 2016-10-21 13:36:41 +02:00
Jonathan Labreuille
cc523a3c0b ability to specify action for generateToken() method 2016-10-21 13:36:41 +02:00
Tautvidas Sipavičius
38f6c95059 Update newsletter saving to reflect code review comments
- Switch to using full segment objects when saving newsletters
- Fix stale comment in newsletter editor's Newsletter model
- Fix typo in newsletter editor tests
2016-10-20 17:52:05 +03:00
Tautvidas Sipavičius
cc03b631ff Allow newsletters.save endpoint to accept segments as list of objects 2016-10-20 16:08:41 +03:00
Tautvidas Sipavičius
12a3931b7b Merge pull request #662 from mailpoet/security_issue_634
PHP Object injection in front Router
2016-10-18 16:46:14 +03:00
Vlad
5e9e53ec41 - Updates router to use json_encode() instead of serialize() for publicly modified data payload
- Updates unit tests
- Fixes #634
2016-10-17 22:39:36 -04:00
Vlad
98f95f72ad - Adds validation for import data, including column names (fixes #633)
- Prevents nonexistent custom fields from being associated with subscribers
2016-10-17 20:22:25 -04:00
Jonathan Labreuille
812d138c4e Merge pull request #658 from mailpoet/import_and_mailer_host_restriction
Import and mailer host restriction
2016-10-17 16:19:42 +02:00
Jonathan Labreuille
07bc35d4cd Merge pull request #625 from mailpoet/unit_tests
Adds unit test for newsletter scheduler
2016-10-17 11:37:17 +02:00
Jonathan Labreuille
90b95a2c25 fixed 'newletter' typo and replaced integer weekdays by their carbon constant equivalent 2016-10-17 11:35:57 +02:00
Vlad
8c28dc3d8a - Restricts Amazon SES region to a specific list of hosts
- Updates unit tests
- Closes #647
2016-10-16 12:19:47 -04:00
Vlad
9197e39fb4 - Restricts MailChimp API key to specific format
- Updates unit test
2016-10-16 11:57:56 -04:00
Jonathan Labreuille
37f59814e5 removed unused methods in Util/CSS -> fixes security issue #635 2016-10-13 10:34:36 +02:00
Jonathan Labreuille
542015a4f6 Improved removal of useless files in vendor folder during build process
- moved sort_order constraining logic to Listing handler's construct
2016-10-10 14:52:09 +02:00
Jonathan Labreuille
4402f826c3 fixed issue with namespace AND fixed issue #649 2016-10-06 12:54:04 +02:00
Jonathan Labreuille
b9745b555a make sure ABSPATH is defined before using it - fixes issue #648 2016-10-06 12:52:53 +02:00
Jonathan Labreuille
a3395e41c9 fixes issue #632 2016-10-06 09:25:09 +02:00
Tautvidas Sipavičius
be61135daf Merge pull request #627 from mailpoet/translations
Translations
2016-10-05 12:26:03 +03:00