Skip to content

Commit

Permalink
version 4.0.3
Browse files Browse the repository at this point in the history
  • Loading branch information
bihor committed Jan 20, 2023
1 parent e8957ad commit a730b35
Show file tree
Hide file tree
Showing 5 changed files with 19 additions and 9 deletions.
9 changes: 7 additions & 2 deletions Classes/Utility/HelpersUtility.php
Expand Up @@ -83,8 +83,13 @@ public function checkLuxletterHash(array $user, string $hash): bool
*/
public function checkDirectmailAuthCode(array $user, string $authCode): bool
{
return (preg_match('/^[0-9a-f]{40}$/', $authCode) &&
($authCode == \DirectMailTeam\DirectMail\Utility\AuthCodeUtility::getHmac($user, 'uid')));
if (strlen($authCode) == 8) {
return (preg_match('/^[0-9a-f]{8}$/', $authCode) &&
($authCode == GeneralUtility::stdAuthCode($user, 'uid')));
} else {
return (preg_match('/^[0-9a-f]{40}$/', $authCode) &&
($authCode == \DirectMailTeam\DirectMail\Utility\AuthCodeUtility::getHmac($user, 'uid')));
}
}

/**
Expand Down
6 changes: 4 additions & 2 deletions Documentation/ChangeLog/Index.rst
Expand Up @@ -119,7 +119,7 @@ Security fix: settings.doubleOptOut set from 0 to 1. You can set it to 0 if you

Security fix: additional check added to the delete-action (it was possible to unsubscribe all users).

Security fix: Information Disclosure in the new- and unsubscribe-action.
Security fix: Information Disclosure in the new- and unsubscribe-action.


Version 4.0.0/1:
Expand All @@ -133,6 +133,8 @@ New task: import newsletter-subscribers from tt_address to fe_users.
Setting preferXlfFile added. If 1, genders and email subjects will come from the xlf file instead of the settings.


Version 4.0.2:
Version 4.0.3:

Compatibility to direct_mail 11 added.

Bugfix: PHP 8 and delete-action.
6 changes: 4 additions & 2 deletions Documentation/Localization.de_DE/ChangeLog/Index.rst
Expand Up @@ -120,7 +120,7 @@ Security fix: settings.doubleOptOut von 0 auf 1 gesetzt. Kann man auf 0 setzen,

Security fix: einen weiteren Check zur Abmelde-Funktion hinzugefügt (man konnte bisher alle Empfänger abmelden).

Security fix: "Information Disclosure" in der new- und unsubscribe-action.
Security fix: "Information Disclosure" in der new- und unsubscribe-action.


Version 4.0.0/1:
Expand All @@ -134,6 +134,8 @@ Neuer Task: importiere Newsletter-Abonnenten von tt_address nach fe_users.
Setting preferXlfFile hinzugefügt. Anreden und E-Mail-Betreff kommen aus der xlf-Datei anstatt aus den Settings, wenn 1.


Version 4.0.2:
Version 4.0.3:

Compatibility to direct_mail 11 added.

Bugfix: PHP 8 und delete-action.
5 changes: 3 additions & 2 deletions README.md
@@ -1,6 +1,6 @@
# fp_newsletter

version 4.0.2
version 4.0.3

The TYPO3 extension fp_newsletter is designed to provide a newsletter subscription and unsubscription service for the
table tt_address which can be used by the extension direct_mail OR for the table fe_users which can be used by luxletter.
Expand Down Expand Up @@ -42,5 +42,6 @@ Version 4.0.0/1:
- New task: import newsletter-subscribers from tt_address to fe_users.
- Setting preferXlfFile added. If 1, genders and email subjects will come from the xlf file instead of the settings.

Version 4.0.2:
Version 4.0.3:
- Compatibility to direct_mail 11 added.
- Bugfix: PHP 8 and delete-action.
2 changes: 1 addition & 1 deletion ext_emconf.php
Expand Up @@ -18,7 +18,7 @@
'author_company' => 'fixpunkt werbeagentur gmbh',
'state' => 'stable',
'clearCacheOnLoad' => 0,
'version' => '4.0.2',
'version' => '4.0.3',
'constraints' => [
'depends' => [
'typo3' => '10.4.6-11.5.99'
Expand Down

0 comments on commit a730b35

Please sign in to comment.