Tautvidas Sipavičius
5eba0e2731
Fix referencing $this in anonymous function context
2016-11-04 17:00:10 +02:00
Jonathan Labreuille
c05be7d987
remove useless comment (containing a typo on top of that...)
2016-11-04 14:14:48 +01:00
Jonathan Labreuille
b8cb1da777
added custom information to HS Beacon
2016-11-04 14:11:37 +01:00
Vlad
0d32c09df3
- Replaces model arrays with model objects
2016-11-03 20:45:53 -04:00
Vlad
9f288ae11a
- Removes unused classes
...
- Fixes [newsletter:number] shortcode not working
2016-11-03 20:38:20 -04:00
Vlad
e87ccd6b92
- Corrects/updates code comments
2016-11-03 18:11:00 -04:00
Tautvidas Sipavičius
bdcb7f0e58
Merge pull request #687 from mailpoet/issue_681_670
...
fixed HTML export of subscription form + updated docs url in settings
2016-11-02 16:15:07 +02:00
Jonathan Labreuille
069bc95297
fixed HTML export of subscription form + updated docs url in settings
2016-11-02 13:24:55 +01:00
Tautvidas Sipavičius
2a961cca01
Eliminate an extra level of indentation
2016-11-02 13:10:23 +02:00
Tautvidas Sipavičius
ee275532b1
Merge pull request #679 from mailpoet/secissue_640
...
XSS in listing sort by
2016-11-02 12:48:40 +02:00
Jonathan Labreuille
40ca54c447
sort by defaults to 'id' if invalid
2016-11-02 11:17:27 +01:00
Tautvidas Sipavičius
e553922eca
Update composer.lock and remove leftover comment
2016-11-02 11:30:52 +02:00
Vlad
f037e1271d
- Removes php-simple-html-dom-parser dependency
...
- Updates CSS inliner to use pQuery DOM parser
2016-10-31 19:01:48 -04:00
Jonathan Labreuille
f4563e18cd
use filter_var instead of regex
2016-10-31 17:36:53 +01:00
Jonathan Labreuille
feaac5eb54
constrain sort_by to alphanumeric/underscore in order to avoid xss in error notices
2016-10-31 17:36:53 +01:00
Tautvidas Sipavičius
c09bcd51ad
Merge pull request #675 from mailpoet/amazon_ses_fix
...
Fixes const value declaration for PHP <5.6
2016-10-28 17:29:57 +03:00
Vlad
01af4d3401
- Fixes const value declaration for PHP <5.6
2016-10-28 10:13:56 -04:00
Vlad
7d2e13b9a3
- Updates license check logic
...
- Updates subscriber limit check logic
- Updates unit tests
- Updates Menu's check for subscriber limit
2016-10-27 12:35:57 -04:00
Vlad
a4395f2350
- Adds unit tests
2016-10-27 11:16:30 -04:00
Vlad
411969b3eb
- Adds check for premium plugin status
...
- Bypasses subscriber count enforcement if premium is enabled
2016-10-27 10:20:05 -04:00
Vlad
217894745d
- Updates text strings
...
- Closes #655
2016-10-25 10:21:23 -04:00
Vlad
8330bfc884
- Fixes "completed" status update of notification history
...
newsletters
- Fixes detection of post notification newsletters that do not contain any posts (i.e., blank ALC blocks)
- Updates unit test
2016-10-24 08:55:22 -04:00
Vlad
ef21a8cca7
- Enables post notification schedule update upon newsletter saving during
...
step 3
2016-10-24 08:55:22 -04:00
Vlad
e32c46a755
- Detaches posts_where action after posts are pulled from the database
2016-10-24 08:55:22 -04:00
Tautvidas Sipavičius
092f69538a
Merge pull request #667 from mailpoet/sending_to_trashed_subscribers_fix
...
Prevents newsletters from being sent to trashed subscribers
2016-10-24 15:26:55 +03:00
Tautvidas Sipavičius
7a75367d75
Merge pull request #666 from mailpoet/export_filename_update
...
Increases export filename length and randomness
2016-10-24 13:36:36 +03:00
Vlad
1ac288d286
- Prevents newsletters from being sent to trashed subscribers
...
- Updates unit tests
- Addresses #629
2016-10-21 14:36:44 -04:00
Vlad
516bc73092
- Increases export filename length and randomness
2016-10-21 11:42:13 -04:00
Jonathan Labreuille
202e4b90e1
added unit test for API::checkPermissions
2016-10-21 13:36:41 +02:00
Jonathan Labreuille
ee89bf0722
refactored API class
2016-10-21 13:36:41 +02:00
Jonathan Labreuille
876d21300a
fixed duplicated lines due to faulty rebase
2016-10-21 13:36:41 +02:00
Jonathan Labreuille
0ca5b7a79f
API Security
...
- added APIAccess class to define access levels of API Endpoints (permissions)
- use "mailpoet_token" for all nonce (just as before)
- merged setupPublic/setupAdmin methods in API in order to avoid duplication
- check permission if access level is not all
- fixed ABSPATH check in some classes
2016-10-21 13:36:41 +02:00
Jonathan Labreuille
5d0ee43921
removed checkToken for admin ajax
2016-10-21 13:36:41 +02:00
Jonathan Labreuille
cc523a3c0b
ability to specify action for generateToken() method
2016-10-21 13:36:41 +02:00
Tautvidas Sipavičius
38f6c95059
Update newsletter saving to reflect code review comments
...
- Switch to using full segment objects when saving newsletters
- Fix stale comment in newsletter editor's Newsletter model
- Fix typo in newsletter editor tests
2016-10-20 17:52:05 +03:00
Tautvidas Sipavičius
cc03b631ff
Allow newsletters.save endpoint to accept segments as list of objects
2016-10-20 16:08:41 +03:00
Tautvidas Sipavičius
12a3931b7b
Merge pull request #662 from mailpoet/security_issue_634
...
PHP Object injection in front Router
2016-10-18 16:46:14 +03:00
Vlad
5e9e53ec41
- Updates router to use json_encode() instead of serialize() for publicly modified data payload
...
- Updates unit tests
- Fixes #634
2016-10-17 22:39:36 -04:00
Vlad
98f95f72ad
- Adds validation for import data, including column names ( fixes #633 )
...
- Prevents nonexistent custom fields from being associated with subscribers
2016-10-17 20:22:25 -04:00
Jonathan Labreuille
812d138c4e
Merge pull request #658 from mailpoet/import_and_mailer_host_restriction
...
Import and mailer host restriction
2016-10-17 16:19:42 +02:00
Jonathan Labreuille
07bc35d4cd
Merge pull request #625 from mailpoet/unit_tests
...
Adds unit test for newsletter scheduler
2016-10-17 11:37:17 +02:00
Jonathan Labreuille
90b95a2c25
fixed 'newletter' typo and replaced integer weekdays by their carbon constant equivalent
2016-10-17 11:35:57 +02:00
Vlad
8c28dc3d8a
- Restricts Amazon SES region to a specific list of hosts
...
- Updates unit tests
- Closes #647
2016-10-16 12:19:47 -04:00
Vlad
9197e39fb4
- Restricts MailChimp API key to specific format
...
- Updates unit test
2016-10-16 11:57:56 -04:00
Jonathan Labreuille
37f59814e5
removed unused methods in Util/CSS -> fixes security issue #635
2016-10-13 10:34:36 +02:00
Jonathan Labreuille
542015a4f6
Improved removal of useless files in vendor folder during build process
...
- moved sort_order constraining logic to Listing handler's construct
2016-10-10 14:52:09 +02:00
Jonathan Labreuille
4402f826c3
fixed issue with namespace AND fixed issue #649
2016-10-06 12:54:04 +02:00
Jonathan Labreuille
b9745b555a
make sure ABSPATH is defined before using it - fixes issue #648
2016-10-06 12:52:53 +02:00
Jonathan Labreuille
a3395e41c9
fixes issue #632
2016-10-06 09:25:09 +02:00
Tautvidas Sipavičius
be61135daf
Merge pull request #627 from mailpoet/translations
...
Translations
2016-10-05 12:26:03 +03:00