WP Manifestindependent plugin directory
manifest / integrations / wp-datanova-cities

wp-datanova-cities WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

Datanova laposte_hexasmal wrapper for WordPress

★ 2stars
1kcomposer installs
1.0.0latest · 7 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/globalis-ms/wp-datanova-cities/archive/refs/heads/master.zip

On Packagist as globalis/wp-datanova-cities:

composer require globalis/wp-datanova-cities
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

wp-datanova-cities

Latest Stable Version License

Datanova laposte_hexasmal wrapper for WordPress

Available functions

  • getCities($postcode)

Examples:

<?php

use \Globalis\WP\Datanova\Cities;

Cities::instance()->getCities('01090'));

// Array
// (
//     [0] => Array
//         (
//             [ville] => FERNEY VOLTAIRE
//             [code_postal] => 01210
//             [code_insee] => 01160
//         )
//
//     [1] => Array
//         (
//             [ville] => ORNEX
//             [code_postal] => 01210
//             [code_insee] => 01281
//         )
//
//     [2] => Array
//         (
//             [ville] => VERSONNEX
//             [code_postal] => 01210
//             [code_insee] => 01435
//         )
//
// )

Cities::instance()->getCities('ABCDE'));

// Array
// (
// )
  • getCitiesNames($postcode)

Examples:

<?php

use \Globalis\WP\Datanova\Cities;

Cities::instance()->getCitiesNames('01090'));

// Array
// (
//     [0] => FERNEY VOLTAIRE
//     [1] => ORNEX
//     [2] => VERSONNEX
// )

Cities::instance()->getCitiesNames('ABCDE'));

// Array
// (
// )
  • isCityValid($name, $postcode)

Examples:

<?php

use \Globalis\WP\Datanova\Cities;

Cities::instance()->isCityValid('PARIS 15', '75014')

// (boolean) false

Cities::instance()->isCityValid('PARIS 15', '75015')

// (boolean) true

Cities::instance()->isCityValid('FOO', 'BAR')

// (boolean) false

AJAX

Same functions are available by calling WordPress admin-ajax following actions:

  • datanova_get_cities (POST params: postcode)
  • datanova_get_cities_names (POST params: postcode)
  • datanova_is_city_valid (POST params: name, postcode)

Releases

2 releases.

Tag
Published
1.0.0 latest
Oct 11, 2019 7 years ago
Apr 1, 2019 7 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

wp-datanova-cities 1.0.0 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
1.0.0
Findings
1
Worst severity
low
Content hash
4fcaff2a2ec21d39f100dd5f…

Findings

  • low CSV update disables TLS verification

    insecure_config

    Database::getCsvfile() calls wp_remote_get(CSV_URL, ['sslverify' => false]), allowing MITM to supply a malicious CSV that is bulk-inserted into the cities table.

    src/Database.php:109-119

    Recommendation

    Set sslverify to true (default) for the La Poste download.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.