Commit Graph

27232 Commits

Author SHA1 Message Date
Boone Gorges
01e2cb3978 Taxonomy: More specific cap check when processing category data on post save.
Ports [37691] to the 4.0 branch.

Props dlh.
Fixes #36379.
Built from https://develop.svn.wordpress.org/branches/4.0@37782


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37747 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:23:16 +00:00
Dominik Schilling
d8fcaf9d61 Customize: Make sure that preview and return URLs are URLs.
Merge of [37527] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37775


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37740 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:21:10 +00:00
Jeremy Felt
2a56c9cbff Admin: Allow for the consistent filtering of auth_redirect_scheme
Merge of [37651] to the 4.0 branch.

See #37047.

Built from https://develop.svn.wordpress.org/branches/4.0@37763


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37728 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-06-21 14:13:39 +00:00
Dominik Schilling
7277742a5d Bump 4.0 branch to 4.0.11.
Built from https://develop.svn.wordpress.org/branches/4.0@37389


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37355 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-05-06 18:15:17 +00:00
Nikolay Bachiyski
909877540e External Libraries: Update plupload from upstream
Built from https://develop.svn.wordpress.org/branches/4.0@37377


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37343 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-05-06 17:56:30 +00:00
Nikolay Bachiyski
217fe37a0f Taxonomies: make sure taxonomy functions work correctly with taxonomy names with special characters
The codex says that taxonomy names "should only contain lowercase letters and the underscore character", but that's not enforced. It's too late to enforce it, since some plugins haven't been following it and the official phpdoc doesn't mention this restriction.

Merge of [37133] to the 4.0 branch.

Built from https://develop.svn.wordpress.org/branches/4.0@37139


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37106 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 17:36:16 +00:00
Jeremy Felt
3291a9819a Multisite: Improve escaping in network settings.
Merge of [37124] to the 4.0 branch.

Built from https://develop.svn.wordpress.org/branches/4.0@37129


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37096 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 16:05:36 +00:00
Dominik Schilling
84ad22efe9 HTTP: Improve detection of valid IP addresses.
Merge of [37115] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37120


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37087 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 15:52:49 +00:00
Dominik Schilling
869f687c65 Multisite: Validate new email address confirmations.
Merge of [37103] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@37108


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37075 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 14:51:03 +00:00
Nikolay Bachiyski
8f0764e4ba Snoopy: use escapeshellarg instead of escapeshellcmd
We are escaping arguments, not commands, so we'd better use the semantically correct function, even though they are similar.

Merges [37094] to the 4.0 branch.

Built from https://develop.svn.wordpress.org/branches/4.0@37099


git-svn-id: http://core.svn.wordpress.org/branches/4.0@37066 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-03-30 14:11:17 +00:00
Dominik Schilling
20c5220229 Bump 4.0 branch to 4.0.10.
Built from https://develop.svn.wordpress.org/branches/4.0@36459


git-svn-id: http://core.svn.wordpress.org/branches/4.0@36426 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-02-02 17:29:36 +00:00
Dominik Schilling
dfc561cd61 Better validation of the URL used in HTTP redirects.
Merges [36444] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@36451


git-svn-id: http://core.svn.wordpress.org/branches/4.0@36418 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-02-02 17:01:06 +00:00
Dominik Schilling
90961ce059 HTTP: 0.1.2.3 is not a valid IP.
Merges [36435] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@36440


git-svn-id: http://core.svn.wordpress.org/branches/4.0@36407 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-02-02 13:04:58 +00:00
Dominik Schilling
2fdd2703ed Bump 4.0 branch to 4.0.9.
Built from https://develop.svn.wordpress.org/branches/4.0@36200


git-svn-id: http://core.svn.wordpress.org/branches/4.0@36167 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-01-06 18:50:38 +00:00
Aaron Jorbin
126b1f3caf Theme: Escape error messages
[36185] for 4.0 branch

Built from https://develop.svn.wordpress.org/branches/4.0@36190


git-svn-id: http://core.svn.wordpress.org/branches/4.0@36157 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-01-06 17:27:17 +00:00
Dion Hulse
3d3c9ab179 Background Updates: Remove the 7am/7pm background update check.
This changeset is a more basic version of [36180], clearing the extra now redundant schedule.
As the functionality for this was introduced in 3.9, [28129] has been backported to 3.7/3.8, allowing the API TTL to be respected by those versions.

See #27772.
Fixes #35323.

Built from https://develop.svn.wordpress.org/trunk@36184


git-svn-id: http://core.svn.wordpress.org/branches/4.0@36151 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2016-01-06 13:24:33 +00:00
Dion Hulse
c84e59ec6d Update Akismet externals
git-svn-id: http://core.svn.wordpress.org/branches/4.0@35107 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-10-13 17:19:01 +00:00
Helen Hou-Sandí
7fd9eac86a Finish bumping the 4.0 branch to 4.0.8.
Built from https://develop.svn.wordpress.org/branches/4.0@34193


git-svn-id: http://core.svn.wordpress.org/branches/4.0@34161 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-15 14:51:53 +00:00
Helen Hou-Sandí
2cb538bcd1 Bump 4.0 branch to 4.0.8.
Built from https://develop.svn.wordpress.org/branches/4.0@34184


git-svn-id: http://core.svn.wordpress.org/branches/4.0@34152 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-15 14:29:25 +00:00
Dominik Schilling
b81cdd60a3 XMLRPC: Don't allow private posts to be sticky.
Merge of [33325], [33612], and [34135] to the 4.0 branch.

See #20662.
Built from https://develop.svn.wordpress.org/branches/4.0@34154


git-svn-id: http://core.svn.wordpress.org/branches/4.0@34122 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-14 23:01:37 +00:00
Nikolay Bachiyski
536f3b6517 Shortcodes: don't allow unclosed HTML elements in attributes
Merges [34134] for 4.0 branch

Built from https://develop.svn.wordpress.org/branches/4.0@34147


git-svn-id: http://core.svn.wordpress.org/branches/4.0@34115 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-14 22:49:17 +00:00
Nikolay Bachiyski
2a0ec142b2 List tables: escape user e-mails
Merges [34133] for 4.0 branch

Built from https://develop.svn.wordpress.org/branches/4.0@34140


git-svn-id: http://core.svn.wordpress.org/branches/4.0@34108 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-14 22:43:17 +00:00
Gary Pendergast
21c8cc7e5a WPDB: get_table_from_query() didn't find table names with hyphens in them.
Merge of [33718] to the 4.0 branch.

Props dustinbolton, pento.

See #33470.


Built from https://develop.svn.wordpress.org/branches/4.0@33994


git-svn-id: http://core.svn.wordpress.org/branches/4.0@33963 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-10 07:05:17 +00:00
Gary Pendergast
4379874534 Capabilities: Fall back to the edit_posts capability for orphaned comments.
Merge of the `capabilities.php` part of [33614] to the 4.0 branch.

Props pento, dd32.

See #33154.


Built from https://develop.svn.wordpress.org/branches/4.0@33974


git-svn-id: http://core.svn.wordpress.org/branches/4.0@33943 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-09-09 06:10:38 +00:00
Dominik Schilling
a782df35d7 Bump 4.0 branch to version 4.0.7.
Built from https://develop.svn.wordpress.org/branches/4.0@33575


git-svn-id: http://core.svn.wordpress.org/branches/4.0@33542 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 11:52:35 +00:00
Dion Hulse
b5a80e84fe Fix do_shortcode('<[shortcode]') edge case.
Props miqrogroove.

Merges [33499] to the 4.0 branch.
See #33116.

Built from https://develop.svn.wordpress.org/branches/4.0@33565


git-svn-id: http://core.svn.wordpress.org/branches/4.0@33532 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 07:18:33 +00:00
Dominik Schilling
e8797fc7d0 Comments: IDs are integers.
Merge of [33555] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@33558


git-svn-id: http://core.svn.wordpress.org/branches/4.0@33525 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 04:59:53 +00:00
Dominik Schilling
acd70d39a4 Themes: Fix some broken links in the legacy theme preview.
Merge of [33549] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@33551


git-svn-id: http://core.svn.wordpress.org/branches/4.0@33518 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 04:57:43 +00:00
Dominik Schilling
53957f2276 Heartbeat: Ensure post locks are released.
Merge of [33542] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@33545


git-svn-id: http://core.svn.wordpress.org/branches/4.0@33512 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 04:55:53 +00:00
Dominik Schilling
9e21a4aaf5 Customizer: Use hash_equals() for widgets.
Merge of [33535] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@33538


git-svn-id: http://core.svn.wordpress.org/branches/4.0@33505 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-04 04:53:08 +00:00
Dominik Schilling
30df27a0c7 Nav menus: Consistent titles in widgets.
Merge of [33529] to the 4.0 branch.
Built from https://develop.svn.wordpress.org/branches/4.0@33531


git-svn-id: http://core.svn.wordpress.org/branches/4.0@33498 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-08-03 20:58:37 +00:00
Andrew Ozz
5b23ca5d93 Backport r33469 and r33470 to 4.0.
See #33106.
Built from https://develop.svn.wordpress.org/branches/4.0@33522


git-svn-id: http://core.svn.wordpress.org/branches/4.0@33489 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-07-31 01:44:36 +00:00
Gary Pendergast
b3356b6f77 Bump 4.0 branch to version 4.0.6.
Built from https://develop.svn.wordpress.org/branches/4.0@33397


git-svn-id: http://core.svn.wordpress.org/branches/4.0@33365 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-07-23 11:07:33 +00:00
Gary Pendergast
60eb789f93 Shortcodes: Improve the reliablity of shortcodes inside HTML tags.
Merge of [33359] to the 4.0 branch.

Props miqrogroove.

See #15694.


Built from https://develop.svn.wordpress.org/branches/4.0@33381


git-svn-id: http://core.svn.wordpress.org/branches/4.0@33352 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-07-23 04:50:37 +00:00
Gary Pendergast
5d196f2b09 Capabilities: When creating an auto-draft, ensure that the current user still has permission to do so.
Merge of [33357] to the 4.0 branch.


Built from https://develop.svn.wordpress.org/branches/4.0@33376


git-svn-id: http://core.svn.wordpress.org/branches/4.0@33347 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-07-23 04:01:36 +00:00
Dominik Schilling
9e426bbb49 4.0.5 version bumps.
Built from https://develop.svn.wordpress.org/branches/4.0@32436


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32406 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 23:28:36 +00:00
Michael Adams
cfd130d33a Upgrade: $wpdb->get_col_length() sanity check: bail on unexpected return value.
Merges [32429] for the 4.0 branch.

See #32165.

Built from https://develop.svn.wordpress.org/branches/4.0@32432


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32402 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 23:13:58 +00:00
Michael Adams
551057bb68 Upgrade: Ensure unintelligible DB schemas don't result in content loss.
Merge of [32417] to the 4.0 branch.

See #32165.

Props ocean90.

Built from https://develop.svn.wordpress.org/branches/4.0@32420


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32390 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 21:52:03 +00:00
John Blackbourn
6dbcbfae60 WPDB: Allow queries to reference tables in the dbname.tablename format, and allow table names to contain any valid character, rather than just ASCII.
Merge of [32368] to the 4.0 branch.

Props pento, willstedt for the initial patch.

See #32090.

Built from https://develop.svn.wordpress.org/branches/4.0@32413


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32383 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 21:04:34 +00:00
Aaron Jorbin
a820c920f9 When upgrading WordPress remove genericons example.html files
[32385] for 4.0 branch

Props @dd32, @boonebgorges, @johnjamesjacoby, @drewapicture, @jorbin


Built from https://develop.svn.wordpress.org/branches/4.0@32404


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32374 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 20:05:33 +00:00
Dominik Schilling
c9168e3a54 WPDB: When sanity checking query character sets, there's no need to check queries that don't return user data.
Merges [32374] to the 4.0 branch.

props pento.
see #32104.
Built from https://develop.svn.wordpress.org/branches/4.0@32403


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32373 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 20:04:38 +00:00
Helen Hou-Sandí
69de48fd72 The UTF-8 regex can occasionally fail on very low memory machines. Reduce the amount of memory it uses.
Merges [32375] to the 4.0 branch.

props pento.
See #32204.

Built from https://develop.svn.wordpress.org/branches/4.0@32397


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32367 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 19:43:37 +00:00
Michael Adams
7e35f92679 WPDB: When checking that a string can be sent to MySQL, we shouldn't use mb_convert_encoding(), as it behaves differently to MySQL's character encoding conversion.
Merge of [32364] to the 4.0 branch.

Props mdawaffe, pento, nbachiyski, jorbin, johnjamesjacoby, jeremyfelt.

See #32165.

Built from https://develop.svn.wordpress.org/branches/4.0@32388


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32358 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 19:09:39 +00:00
Andrew Ozz
d6df175451 TinyMCE: work-around a bug in the tags matching regex.
For 4.0.
Built from https://develop.svn.wordpress.org/branches/4.0@32372


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32342 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-05-06 05:34:38 +00:00
Gary Pendergast
4fe0310d7a 4.0:
- WPDB: Sanity check that any strings being stored in the DB are not too long to store correctly.
- When upgrading, remove any suspicious comments.


Built from https://develop.svn.wordpress.org/branches/4.0@32313


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32284 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-27 17:17:37 +00:00
Gary Pendergast
4b6fa85282 4.0 branch is now 4.0.4.
Built from https://develop.svn.wordpress.org/branches/4.0@32302


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32273 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-27 14:11:37 +00:00
Helen Hou-Sandí
8254664893 The 4.0 branch is now 4.0.3.
Built from https://develop.svn.wordpress.org/branches/4.0@32283


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32254 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-23 21:35:37 +00:00
Gary Pendergast
488576e125 WPDB: When sanity checking a string by sending it to MySQL for conversion checks, the incorrect data structure was being returned from wpdb::strip_invalid_text(), causing all write queries to fail for some character sets when the query contained non-ASCII characters.
Merge of [32261] to the 4.0 branch.

See #32051.


Built from https://develop.svn.wordpress.org/branches/4.0@32272


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32243 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-23 11:44:39 +00:00
Gary Pendergast
e20485b9cb WPDB: When deciding if a query needs extra sanity checking based on collation, return early when we can. Merges [32232] and [32233] to the 4.0 branch.
See #32029.


Built from https://develop.svn.wordpress.org/branches/4.0@32235


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32209 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-21 06:19:40 +00:00
Gary Pendergast
530a462ba1 Fix some wpdb::check_safe_collation() calls missed in [32181].
Built from https://develop.svn.wordpress.org/branches/4.0@32225


git-svn-id: http://core.svn.wordpress.org/branches/4.0@32199 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2015-04-20 19:06:42 +00:00