Reconfigured for use on Development System (Dev55)

diff --git a/wp-config.php b/wp-config.php
index a0555e8..28cf91d 100644 (file)
--- a/wp-config.php
+++ b/wp-config.php
@@ -16,13 +16,13 @@
 
 // ** MySQL settings - You can get this info from your web host ** //
 /** The name of the database for WordPress */
 
 // ** MySQL settings - You can get this info from your web host ** //
 /** The name of the database for WordPress */

-define('DB_NAME', 'wordpress');
+define('DB_NAME', 'dev_glm');

 
 /** MySQL database username */
 
 /** MySQL database username */

-define('DB_USER', 'cscott');
+define('DB_USER', 'dev_glm');

 
 /** MySQL database password */
 
 /** MySQL database password */

-define('DB_PASSWORD', 'fhsmarie');
+define('DB_PASSWORD', 'dev24glm');

 
 /** MySQL hostname */
 define('DB_HOST', 'localhost');
 
 /** MySQL hostname */
 define('DB_HOST', 'localhost');


@@ -74,8 +74,8 @@ define('WP_DEBUG', false);
 define( 'WP_ALLOW_MULTISITE', true );
 define('MULTISITE', true);
 define('SUBDOMAIN_INSTALL', false);
 define( 'WP_ALLOW_MULTISITE', true );
 define('MULTISITE', true);
 define('SUBDOMAIN_INSTALL', false);

-define('DOMAIN_CURRENT_SITE', '192.168.44.11');
-define('PATH_CURRENT_SITE', '/wordpress/');
+define('DOMAIN_CURRENT_SITE', 'dev.gaslightmedia.com');
+define('PATH_CURRENT_SITE', '/');

 define('SITE_ID_CURRENT_SITE', 1);
 define('BLOG_ID_CURRENT_SITE', 1);
 define('FS_METHOD', 'direct');
 define('SITE_ID_CURRENT_SITE', 1);
 define('BLOG_ID_CURRENT_SITE', 1);
 define('FS_METHOD', 'direct');

diff --git a/wp-content/plugins/all-in-one-wp-migration/all-in-one-wp-migration.php b/wp-content/plugins/all-in-one-wp-migration/all-in-one-wp-migration.php
index 435d3ca..814c744 100644 (file)
--- a/wp-content/plugins/all-in-one-wp-migration/all-in-one-wp-migration.php
+++ b/wp-content/plugins/all-in-one-wp-migration/all-in-one-wp-migration.php
@@ -5,7 +5,7 @@
  * Description: Migration tool for all your blog data. Import or Export your blog content with a single click.
  * Author: ServMask
  * Author URI: https://servmask.com/
  * Description: Migration tool for all your blog data. Import or Export your blog content with a single click.
  * Author: ServMask
  * Author URI: https://servmask.com/

- * Version: 2.0.2
+ * Version: 2.0.3

  *
  * Copyright (C) 2014 ServMask Inc.
  *
  *
  * Copyright (C) 2014 ServMask Inc.
  *

diff --git a/wp-content/plugins/all-in-one-wp-migration/constants.php b/wp-content/plugins/all-in-one-wp-migration/constants.php
index baad580..ff6d599 100644 (file)
--- a/wp-content/plugins/all-in-one-wp-migration/constants.php
+++ b/wp-content/plugins/all-in-one-wp-migration/constants.php
@@ -26,7 +26,7 @@
 // ==================
 // = Plugin Version =
 // ==================
 // ==================
 // = Plugin Version =
 // ==================

-define( 'AI1WM_VERSION', '2.0.2' );
+define( 'AI1WM_VERSION', '2.0.3' );

 
 // ===============
 // = Plugin Name =
 
 // ===============
 // = Plugin Name =

diff --git a/wp-content/plugins/all-in-one-wp-migration/lib/controller/class-ai1wm-import-controller.php b/wp-content/plugins/all-in-one-wp-migration/lib/controller/class-ai1wm-import-controller.php
index cc01dbc..065b828 100644 (file)
--- a/wp-content/plugins/all-in-one-wp-migration/lib/controller/class-ai1wm-import-controller.php
+++ b/wp-content/plugins/all-in-one-wp-migration/lib/controller/class-ai1wm-import-controller.php
@@ -48,6 +48,11 @@ class Ai1wm_Import_Controller
                set_error_handler( array( 'Ai1wm_Error', 'error_handler' ) );
                set_exception_handler( array( 'Ai1wm_Error', 'exception_handler' ) );
 
                set_error_handler( array( 'Ai1wm_Error', 'error_handler' ) );
                set_exception_handler( array( 'Ai1wm_Error', 'exception_handler' ) );
 

+               // Verify capabilities
+               if ( ! current_user_can( 'import' ) ) {
+                       wp_die( 'Unable to process the request.' );
+               }
+

                $messages = array();
 
                if ( isset( $_FILES['upload-file'] ) || isset( $_REQUEST['force'] ) ) {
                $messages = array();
 
                if ( isset( $_FILES['upload-file'] ) || isset( $_REQUEST['force'] ) ) {

diff --git a/wp-content/plugins/all-in-one-wp-migration/readme.txt b/wp-content/plugins/all-in-one-wp-migration/readme.txt
index 503e920..31fc9bb 100644 (file)
--- a/wp-content/plugins/all-in-one-wp-migration/readme.txt
+++ b/wp-content/plugins/all-in-one-wp-migration/readme.txt
@@ -3,7 +3,7 @@ Contributors: yani.iliev, bangelov, mirkov
 Tags: db migration, migration, wordpress migration, db backup, db restore, website backup, website restore, website migration, website deploy, wordpress deploy, db backup, database export, database serialization, database find replace
 Requires at least: 3.3
 Tested up to: 4.0
 Tags: db migration, migration, wordpress migration, db backup, db restore, website backup, website restore, website migration, website deploy, wordpress deploy, db backup, database export, database serialization, database find replace
 Requires at least: 3.3
 Tested up to: 4.0

-Stable tag: 2.0.2
+Stable tag: 2.0.3

 License: GPLv2 or later
 
 All-in-One WP Migration is the only tool that you will ever need to migrate a WordPress site.
 License: GPLv2 or later
 
 All-in-One WP Migration is the only tool that you will ever need to migrate a WordPress site.


@@ -61,6 +61,9 @@ All in One WP Plugin is the first plugin to offer true mobile experience on Word
 3. Plugin Menu
 
 == Changelog ==
 3. Plugin Menu
 
 == Changelog ==

+= 2.0.3 =
+* Fixed a security issue when importing site using regular users
+

 = 2.0.2 =
 * Added support for WordPress v4.0
 
 = 2.0.2 =
 * Added support for WordPress v4.0