Forum Replies Created

Viewing 4 replies - 1 through 4 (of 4 total)
  • geeks2rent

    (@geeks2rent)

    Hello All,

    Here now the mended version (extended of the much desired function).
    https://geeks2rent.co.uk/mail-on-update/mail-on-update-5.2.4.txt

    be aware:
    A CSRF vulnerability is not a big deal if one knows how to protect the files beyond the publicly facing website. If not protected it indeed poses a threat and may reveals as much as the program WP-Scan does.

    ps
    I left in the comments in the source code as this enhances the readability of the code.

    pps
    I don’t look forward to an automated plug-in update function, as kubi23 mentioned. Unfortunately a lot of programmers are working in the plugin-code directly.
    All that would get lost in an indiscriminate upgrade.

    geeks2rent

    (@geeks2rent)

    Hello Kubi23,

    Why downgrade? When I can use it inside the current version.
    Works neat! As to the concernes of security.
    The form can not be accessed in that way on my installations.

    The funktion to change or at least add an different email recipient is IMHO important – extremly usefull.

    I merely intended to help as I can understand the needs of those other supporters in their daily struggle in maintenance work.
    Also the Client side ( the actual admin ) gets bombarded with infos but fails to forward them.

    Till now I had manually hack in a different mail recipient – which gets overruled by every new release.
    e.g. (I went for the lasy tweak in the past.)
    //notifier list
    function mailonupdate_
    listOfCommaSeparatedRecipients() {
    // return get_option(“admin_email”);
    return (string) “[email protected]”;
    }

    just to explain my intentions

    Greetings from
    ΛΕΥΚ?ΔΑ
    Ελλ?δα

    geeks2rent

    (@geeks2rent)

    Hello All,

    As I can’t post the FIX for the desired function here. I made it available via our server.
    https://geeks2rent.co.uk/mail-on-update/mail-on-update.txt

    geeks2rent

    (@geeks2rent)

    Hello Pulk99 and all the others

    I share the very same problem.
    Clients are the WP-admin but I am the geek2rent to look after things.
    like an digital housekeeper.

    So I need to receive the emails on a different emailaddress

    I did read the link provided by kubi23 concerning the security issue.
    As I do not share the view that this is a real risk I took the liberty to put the very much desired code back into kubi23 plugin.

    It Works for me! just replace the content of mail-on-update.php
    with the code below.

    —code—code—code—

    [ 429 lines of code moderated. Please use pastebin.com instead. ]

Viewing 4 replies - 1 through 4 (of 4 total)