WP Manifestindependent plugin directory
manifest / developer / dummy-content-generator

Stratifi Dummy Content Generator WP Registry grade D+. High-severity findings · 3 findingsWP RegistryHigh-severity findings · 3 findingsOpen the reportD+

A plugin to create dummy content for WordPress sites in Development

★ 1stars
0.8.4latest · 2 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/mintcondition/dummy-content-generator/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Description

This plugin will (when it's ready) easily generate dummy content for your WordPress site. Eventually it will allow you to create n posts of any defined type, including titles, content, images, and even meta-data.

Installation

If you can't figure out how to install a WP Plugin, you should NOT use this one.

Changelog

== 0.8.3 2024-06-23 = BugFix and Cleanup release Fixed:

  • Updater working (May need reinstall)
  • Error logging reduced to only failures
  • Minor bugfixes

= 0.8.1 - 2024-06-23 = Update working?

  • Checking to see if updater working.

0.8.0 - 2024-06-16

New Features:

  • MANAGE DUMMY CONTENT (With Bulk Actions)
    • The Manage Dummy Content page works now, showing each post type (that you've created dummy content for). Y You can then delete or trash any or all posts of that type from this list.

Enhancements:

  • Added generators and data types for Random Name and Fake Email

0.7.0 - 2024-06-11

Enhancements:

  • Added a single image generator for LoremFlickr. This one allows you to pick a topic for the images.
  • Added metadata to created posts that allow identification as created by the plugin, the date/time of creation and current user

Fixed:

  • Fixed testing page not accounting for date type parameters and responses

0.6.1 - 2024-06-10

Enhancements:

  • Date Generator added and available. Choose a date range and all created posts will be created within that range.
  • Post creation process now has the option to clean up after itself (delete files in temp folder).

Fixed:

  • Modified post creation process to move images into the media library and respect the user's chosen upload settings.
  • Some documentation changes.

0.5.1 - 2024-06-09

Enhancements:

  • Settings now sets all fields to available on activation.

Fixed:

  • Settings now saves available fields correctly.

0.5.0 - 2024-06-09

Approaching MVP. Currently only tested with posts and 3 fields: Title, Content, and Feat Image.

New Features:

  • Added Picsum Image Generator using Picsum.photos API for random, grayscale, blur, and seed-based images with custom sizes.
  • Standardized generator output format including type, data type, and content.
  • Introduced settings for specifying a temporary directory for image storage.
  • Added settings for choosing which fields are available for which post types.

Enhancements:

  • Improved settings page with collapsible sections and temporary directory settings.
  • Added functions for temporary directory management: create, delete, and get status.
  • Enhanced error handling for image fetching and saving in generators.

Fixes:

  • Resolved open_basedir restriction issues by adjusting paths.
  • Fixed JavaScript issues on the settings page.
  • Ensured old temporary directories are deleted when a new one is specified.

Miscellaneous:

  • Added logging for debugging purposes.
  • Refactored code for better readability and maintainability.

Known Issues:

  • Settings is not saving field options.

0.0.2 - Adding Admin Pages

0.0.1 - Initial commit with updater functionality

Releases

12 releases.

Tag
Published
0.8.4 latest
Jul 6, 2024 2 years ago
Jun 24, 2024 2 years ago
Jun 24, 2024 2 years ago
Jun 24, 2024 2 years ago
Jun 23, 2024 2 years ago
Jun 17, 2024 2 years ago
Jun 10, 2024 2 years ago
Jun 9, 2024 2 years ago
Jun 9, 2024 2 years ago
May 31, 2024 2 years ago
May 31, 2024 2 years ago
May 31, 2024 2 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

D+ grade

Security

Stratifi Dummy Content Generator 0.8.4 · audited by WP Registry

High-severity findings.

1 high 2 medium
Audited release
0.8.4
Findings
3
Worst severity
high
Content hash
133ecde87247cd6041a23f6d…

Findings

  • high admin_post_create_dummy_content lacks capability check

    missing_capability

    handle_create_dummy_content verifies create_dummy_content_nonce then seeds a transient and redirects into the dummy-content wizard. Any authenticated user can wp_create_nonce that action and POST admin-post.php to start content generation workflows without manage_options.

    includes/process-dummy-content.php:7-35

    Recommendation

    Require current_user_can('manage_options') after nonce verification.

  • medium clear_temp_dir AJAX: nonce without capability

    missing_capability

    clear_temp_dir only check_ajax_referer('clear_temp_dir_nonce') then unlinks all files under the dummy-content temp directory. Subscribers can mint the nonce and delete those files.

    includes/settings.php:276-299

    Recommendation

    Add current_user_can('manage_options').

  • medium dcg_clear_debug_log AJAX clears wp-content/debug.log with nonce only

    missing_capability

    dcg_clear_debug_log verifies clear_debug_log_nonce then file_put_contents(WP_CONTENT_DIR.'/debug.log',''). Duplicate handlers exist; one variant also lacks capability. Low-priv users can wipe the debug log.

    includes/clear-debug-log.php:8-24

    Recommendation

    Require manage_options; prefer WP_DEBUG_LOG path hardening.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.