Doing some further investigation the only changes made to this version to previous are actually the last few lines of code in the leaguemanager.php file.
This change is to patch an SQL injection exploit. All the changes above are not required. I tested this by just changing the leaguemanager.php back to the previous version and all worked fine.
The problem here is that with the old leaguemanager.php file is a security risk.
Here is the fix from line 531: It is missing additional braces and semi colon.
Change:
if (current_user_can(‘manage_leagues’)) {
if ( isset($_POST[‘leaguemanager_export’]) )
$lmLoader->adminPanel->export((int)$_POST[‘league_id’], $_POST[‘mode’])
;
}
?>
TO:
if (current_user_can(‘manage_leagues’)) {
if ( isset($_POST[‘leaguemanager_export’]) ){
$lmLoader->adminPanel->export((int)$_POST[‘league_id’], $_POST[‘mode’]);
}
;}
?>