toxicum

Where can I send you this info to?

But in order to do that they literally have to read the plugin code first to see which array keys we are accessing

Thanks you fixed it, but the statement I think is questionable. Your code is readable by everyone, so an attacker can read it easily (as I did). Maybe it is a mindset thing? For me, safe coding is the highest priority.

• This reply was modified 3 years, 2 months ago by toxicum.

I disagree here. If a MITM attack occurs and one injects e.g. javascript contents, the admin possibly gets compromised.

What about using https://ipstack.com ?

Found it. “Offline analytics” was enabled, which causes sw.php to load googleapis resources.

Thanks for that! All my FooGalleries have now been migrated to SimpLy.

FooGallery exports JSON in this format for a Gallery:

[
	{
		"ID": "2141",
		"template": "image-viewer",
		"name": "My Gallery Title",
		"datasource_name": "media_library",
		"attachment_ids": [
			"4172",
			"4171",
			"4173",
			"4175"
		],
		"settings": {
			"foogallery_items_view": "manage",
			"image-viewer_thumbnail_size": {
				"width": "640",
				"height": "360",
				"crop": "1"
			},
			"image-viewer_thumbnail_link": "image",
			"image-viewer_lightbox": "foobox",
			"image-viewer_alignment": "fg-center",
			"image-viewer_looping": "enabled",
			"image-viewer_theme": "fg-light",
			"image-viewer_border_size": "fg-border-thin",
			"image-viewer_rounded_corners": "",
			"image-viewer_drop_shadow": "fg-shadow-outline",
			"image-viewer_inner_shadow": "",
			"image-viewer_loading_icon": "fg-loading-default",
			"image-viewer_loaded_effect": "fg-loaded-fade-in",
			"image-viewer_foobox_caption_source": "",
			"image-viewer_hover_effect_type": "normal",
			"image-viewer_caption_invert_color": "",
			"image-viewer_hover_effect_color": "",
			"image-viewer_hover_effect_scale": "",
			"image-viewer_hover_effect_caption_visibility": "fg-caption-hover",
			"image-viewer_hover_effect_transition": "fg-hover-fade",
			"image-viewer_hover_effect_icon": "fg-hover-zoom",
			"image-viewer_caption_title_source": "",
			"image-viewer_caption_desc_source": "",
			"image-viewer_caption_alignment": "",
			"image-viewer_captions_limit_length": "",
			"image-viewer_custom_settings": "",
			"image-viewer_custom_attributes": "",
			"image-viewer_custom_class": "",
			"image-viewer_include_title": "",
			"image-viewer_lazyload": ""
		},
		"sorting": "",
		"retina": {
			"2x": "true",
			"3x": "true",
			"4x": "true"
		},
		"custom_css": "",
		"attachments": {
			"4172": {
				"url": "https://www.example.com/wp-content/uploads/2022/09/IMG_20220101_104712.jpg",
				"title": "Image 1 Title",
				"caption": "",
				"description": "",
				"alt": "Image 1 Alt"
			},
			"4171": {
				"url": "https://www.example.com/wp-content/uploads/2022/09/IMG_20220101_114947.jpg",
				"title": "Image 2 Title",
				"caption": "",
				"description": "",
				"alt": "Image 2 Alt"
			},
			"4173": {
				"url": "https://www.example.com/wp-content/uploads/2022/09/IMG_20220101_104720.jpg",
				"title": "Image 3 Title",
				"caption": "",
				"description": "",
				"alt": "Image 1 Alt"
			},
			"4175": {
				"url": "https://www.example.com/wp-content/uploads/2022/09/IMG_20220101_114934.jpg",
				"title": "Image 4 Title",
				"caption": "",
				"description": "",
				"alt": "Image 4 Alt"
			}
		}
	}
]