This WordPress plugin for WP-E-Commerce allows to include a merchant file through a GET request without specifying its whole URL. Just call
http://yoursite.com/?load_merchant=filename, without the
.php extension, and you’re done.
Please note that these requests cannot be used to display pages.
Very important: Though this plugin avoids Local File Inclusion vulnerability, it is not responsible for the processes that are executed inside your gateway files. Before using it, you should be very sure that all your custom gateways are secure and will not perform any unwanted modifications or deletions of sensitive data.
wp-e-commerce-merchants-caller.zipand upload the
wp-e-commerce-merchants-callerfolder to your
- Activate the plugin through the “Plugins” menu in WordPress.
Contributors & Developers
“Payment Gateways Caller for WP e-Commerce” is open source software. The following people have contributed to this plugin.
Interested in development?
- Fixed bug related to object instance.
- Object oriented code.
- Modified action hook for gateway loading from
init, so WordPress gets fully loaded before loading the gateway file.
$wpscgcglobal object, which allows to get information about the current loaded gateway.
wpscmc_before_gateway_loadaction, for custom functionality before gateway loading.
wpscmc_after_gateway_loadaction, for custom functionality after gateway loading.
Security fix: avoids LFI vulnerability.
First public release.