Release 4.0.3

wp-media · Feb 22, 2024 · 242ab74 · 242ab74
1 parent d7a1804
commit 242ab74
Show file tree

Hide file tree

Showing 9 changed files with 372 additions and 232 deletions.
diff --git a/backwpup.php b/backwpup.php
@@ -1,11 +1,11 @@
 <?php
 /*
- * Plugin Name: BackWPup 
+ * Plugin Name: BackWPup
  * Plugin URI: http://backwpup.com
  * Description: WordPress Backup Plugin
  * Author: WP MEDIA SAS
  * Author URI: https://wp-media.me/
- * Version: 4.0.2
+ * Version: 4.0.3
  * Requires at least: 3.9
  * Requires PHP: 7.2
  * Text Domain: backwpup

diff --git a/changelog.txt b/changelog.txt
@@ -1,4 +1,9 @@
 == Changelog ==
+= 4.0.3 =
+Release date: February 22, 2024
+
+* Fixed: Security issue where FTP passwords were stored in the database in plaintext.
+
 = 4.0.2 =
 Release date: November 22, 2023
 

diff --git a/inc/class-destination-ftp.php b/inc/class-destination-ftp.php
@@ -636,9 +636,11 @@ public function job_run_archive(BackWPup_Job $job_object): bool
                     BackWPup_Option::update(
                         $job_object->job['jobid'],
                         'lastbackupdownloadurl',
-                        'ftp://' . $job_object->job['ftpuser'] . ':' . BackWPup_Encryption::decrypt(
-                            $job_object->job['ftppass']
-                        ) . '@' . $job_object->job['ftphost'] . ':' . $job_object->job['ftphostport'] . $current_ftp_dir . $job_object->backup_file
+                        network_admin_url(
+                            'admin.php?page=backwpupbackups&action=downloadftp&file=' .
+                            $current_ftp_dir . $job_object->backup_file . '&local_file=' .
+                            $job_object->backup_file . '&jobid=' . $job_object->job['jobid']
+                        )
                     );
                 }