From 53e4f11368789f4e07592e2658f7a44cbac25f35 Mon Sep 17 00:00:00 2001
From: bastianonm <bastianonm>
Date: Mon, 11 Jun 2012 19:43:04 +0000
Subject: [PATCH]

---
 readme.txt                   | 4 +++-
 wp-gpx-maps.php              | 2 +-
 wp-gpx-maps_admin.php        | 1 -
 wp-gpx-maps_admin_tracks.php | 5 +++++
 4 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/readme.txt b/readme.txt
index 3549fe9..e54e633 100644
--- a/readme.txt
+++ b/readme.txt
@@ -4,7 +4,7 @@ Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_i
 Tags: maps, gpx, gps, graph, chart, google maps, highcharts, track, garmin, image, nextgen-gallery, nextgen, exif, OpenStreetMap, OpenCycleMap, Hike&Bike, heart rate, heartrate, cadence
 Requires at least: 2.0.0
 Tested up to: 3.3
-Stable tag: 1.1.22
+Stable tag: 1.1.23
 License: GPLv2 or later
 
 Draws a gpx track with altitude graph. You can also display your nextgen gallery images in the map.
@@ -123,6 +123,8 @@ Yes!
 1. Altitude & Speed & Hearth rate
 
 == Changelog ==
+= 1.1.23 =
+* Security fix, please update!
 = 1.1.22 =
 * enable map zoom on scroll wheel (check settings)
 * test attributes in get params
diff --git a/wp-gpx-maps.php b/wp-gpx-maps.php
index a675310..7a4b9c2 100644
--- a/wp-gpx-maps.php
+++ b/wp-gpx-maps.php
@@ -3,7 +3,7 @@
 Plugin Name: WP-GPX-Maps
 Plugin URI: http://www.darwinner.it/
 Description: Draws a gpx track with altitude graph
-Version: 1.1.22
+Version: 1.1.23
 Author: Bastianon Massimo
 Author URI: http://www.pedemontanadelgrappa.it/
 License: GPL
diff --git a/wp-gpx-maps_admin.php b/wp-gpx-maps_admin.php
index 32344e7..3216ea0 100644
--- a/wp-gpx-maps_admin.php
+++ b/wp-gpx-maps_admin.php
@@ -24,7 +24,6 @@ function WP_GPX_Maps_html_page() {
 	$cacheGpxPath = gpxCacheFolderPath();
 	$relativeGpxPath = relativeGpxFolderPath();
 	$relativeGpxPath = str_replace("\\","/", $relativeGpxPath);
-	$gpxRegEx = '/.gpx$/';
 	
 	$tab = $_GET['tab'];
 	
diff --git a/wp-gpx-maps_admin_tracks.php b/wp-gpx-maps_admin_tracks.php
index 286c532..6be0443 100644
--- a/wp-gpx-maps_admin_tracks.php
+++ b/wp-gpx-maps_admin_tracks.php
@@ -1,5 +1,10 @@
 <?php
 
+	if ( !is_admin() )
+		return;
+	
+	$gpxRegEx = '/.gpx$/';
+
 	if ( isset($_POST['delete']) )
 	{
 		$del = $_POST['delete'];