CVE-2012-10017 (Other, published 2023-12-26T10:15Z)
Description: value: A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.04 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 2.06 is able to address this issue. The patch is named 68af950330c3202a706f0ae9bbb52ceaa17dda9d. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-248955.
Severity: nan (CVSS v3 base score: 8.8)
Weakness: CWE-352 \u2014 Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
Repository: https://github.com/wp-plugins/portfolio
Files changed:
languages/portfolio-es_ES.po
languages/portfolio-fa_IR.po
languages/portfolio-he_IL.po
languages/portfolio-hi_IN.po
languages/portfolio-it_IT.po
languages/portfolio-nl_NL.po
languages/portfolio-pt_BR.po
languages/portfolio-ru_RU.po
portfolio.php
readme.txt
Commit message: V2.06 - Cross Site Request Forgery bug was fixed.

git-svn-id: https://plugins.svn.wordpress.org/portfolio/trunk@576717 b8457f37-d9ea-0310-8a92-e5e31aec5664


Vulnerable code:
"POT-Creation-Date: 2012-07-12 13:00+0300\n"
"PO-Revision-Date: 2012-07-12 13:02+0300\n"
#: portfolio.php:757
#: portfolio.php:798
#: portfolio.php:801
#: portfolio.php:647
#: portfolio.php:803
#: portfolio.php:1001
#: portfolio.php:349
#: portfolio.php:523
#: portfolio.php:907
#: portfolio.php:524
#: portfolio.php:908
#: portfolio.php:616
#: portfolio.php:618
#: portfolio.php:626
#: portfolio.php:634
#: portfolio.php:996
#: portfolio.php:618
#: portfolio.php:895
#: portfolio.php:906
#: portfolio.php:624
#: portfolio.php:632
#: portfolio.php:634
#: portfolio.php:634
#: portfolio.php:634
#: portfolio.php:636
#: portfolio.php:671
#: portfolio.php:809
#: portfolio.php:672
#: portfolio.php:810
#: portfolio.php:673
#: portfolio.php:811
#: portfolio.php:674
#: portfolio.php:812
#: portfolio.php:675
#: portfolio.php:813
#: portfolio.php:676
#: portfolio.php:814
#: portfolio.php:677
#: portfolio.php:815
#: portfolio.php:678
#: portfolio.php:816
#: portfolio.php:753
#: portfolio.php:764
#: portfolio.php:770
#: portfolio.php:772
#: portfolio.php:780
#: portfolio.php:773
#: portfolio.php:781
#: portfolio.php:774
#: portfolio.php:782
#: portfolio.php:778
#: portfolio.php:786
#: portfolio.php:789
#: portfolio.php:795
#: portfolio.php:797
#: portfolio.php:799
#: portfolio.php:800
#: portfolio.php:802
#: portfolio.php:807
#: portfolio.php:822
#: portfolio.php:833
#: portfolio.php:835
#: portfolio.php:840
#: portfolio.php:842
#: portfolio.php:843
#: portfolio.php:844
#: portfolio.php:860
#: portfolio.php:849
#: portfolio.php:851
#: portfolio.php:856
#: portfolio.php:858
#: portfolio.php:859
#: portfolio.php:1006
"POT-Creation-Date: 2012-07-12 13:03+0300\n"
"PO-Revision-Date: 2012-07-12 13:05+0300\n"
#: portfolio.php:757
#: portfolio.php:798
#: portfolio.php:801
#: portfolio.php:647
#: portfolio.php:803
#: portfolio.php:1001
#: portfolio.php:349
#: portfolio.php:523
#: portfolio.php:907
#: portfolio.php:524
#: portfolio.php:908
#: portfolio.php:616
#: portfolio.php:618
#: portfolio.php:626
#: portfolio.php:634
#: portfolio.php:996
#: portfolio.php:618
#: portfolio.php:895
#: portfolio.php:906
#: portfolio.php:624
#: portfolio.php:632
#: portfolio.php:634
#: portfolio.php:634
#: portfolio.php:634
#: portfolio.php:636
#: portfolio.php:671
#: portfolio.php:809
#: portfolio.php:672
#: portfolio.php:810
#: portfolio.php:673
#: portfolio.php:811
#: portfolio.php:674
#: portfolio.php:812
#: portfolio.php:675
#: portfolio.php:813
#: portfolio.php:676
#: portfolio.php:814
#: portfolio.php:677
#: portfolio.php:815
#: portfolio.php:678
#: portfolio.php:816
#: portfolio.php:753
#: portfolio.php:764
#: portfolio.php:770
#: portfolio.php:772
#: portfolio.php:780
#: portfolio.php:773
#: portfolio.php:781
#: portfolio.php:774
#: portfolio.php:782
#: portfolio.php:778
#: portfolio.php:786
#: portfolio.php:789
#: portfolio.php:795
#: portfolio.php:797
#: portfolio.php:799
#: portfolio.php:800
#: portfolio.php:802
#: portfolio.php:807
#: portfolio.php:822
#: portfolio.php:833
#: portfolio.php:835
#: portfolio.php:840
#: portfolio.php:842
#: portfolio.php:843
#: portfolio.php:844
#: portfolio.php:860
#: portfolio.php:849
#: portfolio.php:851
#: portfolio.php:856
#: portfolio.php:858
#: portfolio.php:859
#: portfolio.php:1006
"POT-Creation-Date: 2012-07-12 13:05+0300\n"
"PO-Revision-Date: 2012-07-12 13:06+0300\n"
#: portfolio.php:757
#: portfolio.php:798
#: portfolio.php:801
#: portfolio.php:647
#: portfolio.php:803
#: portfolio.php:1001
#: portfolio.php:349
#: portfolio.php:523
#: portfolio.php:907
#: portfolio.php:524
#: portfolio.php:908
#: portfolio.php:616
#: portfolio.php:618
#: portfolio.php:626
#: portfolio.php:634
#: portfolio.php:996
#: portfolio.php:618
#: portfolio.php:895
#: portfolio.php:906
#: portfolio.php:624
#: portfolio.php:632
#: portfolio.php:634
#: portfolio.php:634
#: portfolio.php:634
#: portfolio.php:636
#: portfolio.php:671
#: portfolio.php:809
#: portfolio.php:672
#: portfolio.php:810
#: portfolio.php:673
#: portfolio.php:811
#: portfolio.php:674
#: portfolio.php:812
#: portfolio.php:675
#: portfolio.php:813
#: portfolio.php:676
#: portfolio.php:814
#: portfolio.php:677
#: portfolio.php:815
#: portfolio.php:678
#: portfolio.php:816
#: portfolio.php:753
#: portfolio.php:764
#: portfolio.php:770
#: portfolio.php:772
#: portfolio.php:780
#: portfolio.php:773
#: portfolio.php:781
#: portfolio.php:774
#: portfolio.php:782
#: portfolio.php:778
#: portfolio.php:786
#: portfolio.php:789
#: portfolio.php:795
#: portfolio.php:797
#: portfolio.php:799
#: portfolio.php:800
#: portfolio.php:802
#: portfolio.php:807
#: portfolio.php:822
#: portfolio.php:833
#: portfolio.php:835
#: portfolio.php:840
#: portfolio.php:842
#: portfolio.php:843
#: portfolio.php:844
#: portfolio.php:860
#: portfolio.php:849
#: portfolio.php:851
#: portfolio.php:856
#: portfolio.php:858
#: portfolio.php:859
#: portfolio.php:1006
"POT-Creation-Date: 2012-07-12 13:06+0300\n"
"PO-Revision-Date: 2012-07-12 13:07+0300\n"
#: portfolio.php:757
#: portfolio.php:798
#: portfolio.php:801
#: portfolio.php:647
#: portfolio.php:803
#: portfolio.php:1001
#: portfolio.php:349
#: portfolio.php:523
#: portfolio.php:907
#: portfolio.php:524
#: portfolio.php:908
#: portfolio.php:616
#: portfolio.php:618
#: portfolio.php:626
#: portfolio.php:634
#: portfolio.php:996
#: portfolio.php:618
#: portfolio.php:895
#: portfolio.php:906
#: portfolio.php:624
#: portfolio.php:632
#: portfolio.php:634
#: portfolio.php:634
#: portfolio.php:634
#: portfolio.php:636
#: portfolio.php:671
#: portfolio.php:809
#: portfolio.php:672
#: portfolio.php:810
#: portfolio.php:673
#: portfolio.php:811
#: portfolio.php:674
#: portfolio.php:812
#: portfolio.php:675
#: portfolio.php:813
#: portfolio.php:676
#: portfolio.php:814
#: portfolio.php:677
#: portfolio.php:815
#: portfolio.php:678
#: portfolio.php:816
#: portfolio.php:753
#: portfolio.php:764
#: portfolio.php:770
#: portfolio.php:772
#: portfolio.php:780
#: portfolio.php:773
#: portfolio.php:781
#: portfolio.php:774
#: portfolio.php:782
#: portfolio.php:778
#: portfolio.php:786
#: portfolio.php:789
#: portfolio.php:795
#: portfolio.php:797
#: portfolio.php:799
#: portfolio.php:800
#: portfolio.php:802
#: portfolio.php:807
#: portfolio.php:822
#: portfolio.php:833
#: portfolio.php:835
#: portfolio.php:840
#: portfolio.php:842
#: portfolio.php:843
#: portfolio.php:844
#: portfolio.php:860
#: portfolio.php:849
#: portfolio.php:851
#: portfolio.php:856
#: portfolio.php:858
#: portfolio.php:859
#: portfolio.php:1006
"POT-Creation-Date: 2012-07-12 13:07+0300\n"
"PO-Revision-Date: 2012-07-12 13:08+0300\n"
#: portfolio.php:757
#: portfolio.php:798
#: portfolio.php:801
#: portfolio.php:647
#: portfolio.php:803
#: portfolio.php:1001
#: portfolio.php:349
#: portfolio.php:523
#: portfolio.php:907
#: portfolio.php:524
#: portfolio.php:908
#: portfolio.php:616
#: portfolio.php:618
#: portfolio.php:626
#: portfolio.php:634
#: portfolio.php:996
#: portfolio.php:618
#: portfolio.php:895
#: portfolio.php:906
#: portfolio.php:624
#: portfolio.php:632
#: portfolio.php:634
#: portfolio.php:634
#: portfolio.php:634
#: portfolio.php:636
#: portfolio.php:671
#: portfolio.php:809
#: portfolio.php:672
#: portfolio.php:810
#: portfolio.php:673
#: portfolio.php:811
#: portfolio.php:674
#: portfolio.php:812
#: portfolio.php:675
#: portfolio.php:813
#: portfolio.php:676
#: portfolio.php:814
#: portfolio.php:677
#: portfolio.php:815
#: portfolio.php:678
#: portfolio.php:816
#: portfolio.php:753
#: portfolio.php:764
#: portfolio.php:770
#: portfolio.php:772
#: portfolio.php:780
#: portfolio.php:773
#: portfolio.php:781
#: portfolio.php:774
#: portfolio.php:782
#: portfolio.php:778
#: portfolio.php:786
#: portfolio.php:789
#: portfolio.php:795
#: portfolio.php:797
#: portfolio.php:799
#: portfolio.php:800
#: portfolio.php:802
#: portfolio.php:807
#: portfolio.php:822
#: portfolio.php:833
#: portfolio.php:835
#: portfolio.php:840
#: portfolio.php:842
#: portfolio.php:843
#: portfolio.php:844
#: portfolio.php:860
#: portfolio.php:849
#: portfolio.php:851
#: portfolio.php:856
#: portfolio.php:858
#: portfolio.php:859
#: portfolio.php:1006
"POT-Creation-Date: 2012-07-12 13:08+0300\n"
"PO-Revision-Date: 2012-07-12 13:08+0300\n"
#: portfolio.php:757
#: portfolio.php:798
#: portfolio.php:801
#: portfolio.php:647
#: portfolio.php:803
#: portfolio.php:1001
#: portfolio.php:349
#: portfolio.php:523
#: portfolio.php:907
#: portfolio.php:524
#: portfolio.php:908
#: portfolio.php:616
#: portfolio.php:618
#: portfolio.php:626
#: portfolio.php:634
#: portfolio.php:996
#: portfolio.php:618
#: portfolio.php:895
#: portfolio.php:906
#: portfolio.php:624
#: portfolio.php:632
#: portfolio.php:634
#: portfolio.php:634
#: portfolio.php:634
#: portfolio.php:636
#: portfolio.php:671
#: portfolio.php:809
#: portfolio.php:672
#: portfolio.php:810
#: portfolio.php:673
#: portfolio.php:811
#: portfolio.php:674
#: portfolio.php:812
#: portfolio.php:675
#: portfolio.php:813
#: portfolio.php:676
#: portfolio.php:814
#: portfolio.php:677
#: portfolio.php:815
#: portfolio.php:678
#: portfolio.php:816
#: portfolio.php:753
#: portfolio.php:764
#: portfolio.php:770
#: portfolio.php:772
#: portfolio.php:780
#: portfolio.php:773
#: portfolio.php:781
#: portfolio.php:774
#: portfolio.php:782
#: portfolio.php:778
#: portfolio.php:786
#: portfolio.php:789
#: portfolio.php:795
#: portfolio.php:797
#: portfolio.php:799
#: portfolio.php:800
#: portfolio.php:802
#: portfolio.php:807
#: portfolio.php:822
#: portfolio.php:833
#: portfolio.php:835
#: portfolio.php:840
#: portfolio.php:842
#: portfolio.php:843
#: portfolio.php:844
#: portfolio.php:860
#: portfolio.php:849
#: portfolio.php:851
#: portfolio.php:856
#: portfolio.php:858
#: portfolio.php:859
#: portfolio.php:1006
"POT-Creation-Date: 2012-07-12 13:09+0300\n"
"PO-Revision-Date: 2012-07-12 13:10+0300\n"
#: portfolio.php:757
#: portfolio.php:798
#: portfolio.php:801
#: portfolio.php:647
#: portfolio.php:803
#: portfolio.php:1001
#: portfolio.php:349
#: portfolio.php:523
#: portfolio.php:907
#: portfolio.php:524
#: portfolio.php:908
#: portfolio.php:616
#: portfolio.php:618
#: portfolio.php:626
#: portfolio.php:634
#: portfolio.php:996
#: portfolio.php:618
#: portfolio.php:895
#: portfolio.php:906
#: portfolio.php:624
#: portfolio.php:632
#: portfolio.php:634
#: portfolio.php:634
#: portfolio.php:634
#: portfolio.php:636
#: portfolio.php:671
#: portfolio.php:809
#: portfolio.php:672
#: portfolio.php:810
#: portfolio.php:673
#: portfolio.php:811
#: portfolio.php:674
#: portfolio.php:812
#: portfolio.php:675
#: portfolio.php:813
#: portfolio.php:676
#: portfolio.php:814
#: portfolio.php:677
#: portfolio.php:815
#: portfolio.php:678
#: portfolio.php:816
#: portfolio.php:753
#: portfolio.php:764
#: portfolio.php:770
#: portfolio.php:772
#: portfolio.php:780
#: portfolio.php:773
#: portfolio.php:781
#: portfolio.php:774
#: portfolio.php:782
#: portfolio.php:778
#: portfolio.php:786
#: portfolio.php:789
#: portfolio.php:795
#: portfolio.php:797
#: portfolio.php:799
#: portfolio.php:800
#: portfolio.php:802
#: portfolio.php:807
#: portfolio.php:822
#: portfolio.php:833
#: portfolio.php:835
#: portfolio.php:840
#: portfolio.php:842
#: portfolio.php:843
#: portfolio.php:844
#: portfolio.php:860
#: portfolio.php:849
#: portfolio.php:851
#: portfolio.php:856
#: portfolio.php:858
#: portfolio.php:859
#: portfolio.php:1006
"POT-Creation-Date: 2012-07-12 13:10+0300\n"
"PO-Revision-Date: 2012-07-12 13:11+0300\n"
#: portfolio.php:757
#: portfolio.php:798
#: portfolio.php:801
#: portfolio.php:647
#: portfolio.php:803
#: portfolio.php:1001
#: portfolio.php:349
#: portfolio.php:523
#: portfolio.php:907
#: portfolio.php:524
#: portfolio.php:908
#: portfolio.php:616
#: portfolio.php:618
#: portfolio.php:626
#: portfolio.php:634
#: portfolio.php:996
#: portfolio.php:618
#: portfolio.php:895
#: portfolio.php:906
#: portfolio.php:624
#: portfolio.php:632
#: portfolio.php:634
#: portfolio.php:634
#: portfolio.php:634
#: portfolio.php:636
#: portfolio.php:671
#: portfolio.php:809
#: portfolio.php:672
#: portfolio.php:810
#: portfolio.php:673
#: portfolio.php:811
#: portfolio.php:674
#: portfolio.php:812
#: portfolio.php:675
#: portfolio.php:813
#: portfolio.php:676
#: portfolio.php:814
#: portfolio.php:677
#: portfolio.php:815
#: portfolio.php:678
#: portfolio.php:816
#: portfolio.php:753
#: portfolio.php:764
#: portfolio.php:770
#: portfolio.php:772
#: portfolio.php:780
#: portfolio.php:773
#: portfolio.php:781
#: portfolio.php:774
#: portfolio.php:782
#: portfolio.php:778
#: portfolio.php:786
#: portfolio.php:789
#: portfolio.php:795
#: portfolio.php:797
#: portfolio.php:799
#: portfolio.php:800
#: portfolio.php:802
#: portfolio.php:807
#: portfolio.php:822
#: portfolio.php:833
#: portfolio.php:835
#: portfolio.php:840
#: portfolio.php:842
#: portfolio.php:843
#: portfolio.php:844
#: portfolio.php:860
#: portfolio.php:849
#: portfolio.php:851
#: portfolio.php:856
#: portfolio.php:858
#: portfolio.php:859
#: portfolio.php:1006
 * @version 1
Version: 2.04
	function prtfl_custom_permalinks() {
		global $wp_rewrite;
		$wp_rewrite->add_rule( 'portfolio/page/([^/]+)/?$', 'index.php?pagename=portfolio&paged=$matches[1]', 'top' );
		$wp_rewrite->add_rule( 'portfolio/page/([^/]+)?$', 'index.php?pagename=portfolio&paged=$matches[1]', 'top' );
    $wp_rewrite->flush_rules();
		static $sp_nonce_flag = false;
		// Run once
		if( ! $sp_nonce_flag ) {
			prtfl_echo_nonce();
			$sp_nonce_flag = true;
		}

// Use nonce for verification ...
if( ! function_exists ( 'prtfl_echo_prtfl_nonce' ) ) {
	function prtfl_echo_nonce () {
		echo sprintf(
			'<input type="hidden" name="%1$s" id="%1$s" value="%2$s" />',
			'prtfl_nonce_name',
			wp_create_nonce( plugin_basename(__FILE__) )
		);
	}
}

		if( isset( $_REQUEST['prtfl_form_submit'] ) ) {
add_action( 'init', 'prtfl_custom_permalinks' ); // add custom permalink for portfolio
Tested up to: 3.3.1
Stable tag: 2.04

Fixed code:
"POT-Creation-Date: 2012-07-24 19:52+0300\n"
"PO-Revision-Date: 2012-07-24 19:52+0300\n"
#: portfolio.php:751
#: portfolio.php:792
#: portfolio.php:795
#: portfolio.php:641
#: portfolio.php:797
#: portfolio.php:996
#: portfolio.php:361
#: portfolio.php:517
#: portfolio.php:902
#: portfolio.php:518
#: portfolio.php:903
#: portfolio.php:610
#: portfolio.php:612
#: portfolio.php:620
#: portfolio.php:628
#: portfolio.php:991
#: portfolio.php:612
#: portfolio.php:890
#: portfolio.php:901
#: portfolio.php:618
#: portfolio.php:626
#: portfolio.php:628
#: portfolio.php:628
#: portfolio.php:628
#: portfolio.php:630
#: portfolio.php:665
#: portfolio.php:803
#: portfolio.php:666
#: portfolio.php:804
#: portfolio.php:667
#: portfolio.php:805
#: portfolio.php:668
#: portfolio.php:806
#: portfolio.php:669
#: portfolio.php:807
#: portfolio.php:670
#: portfolio.php:808
#: portfolio.php:671
#: portfolio.php:809
#: portfolio.php:672
#: portfolio.php:810
#: portfolio.php:747
#: portfolio.php:758
#: portfolio.php:764
#: portfolio.php:766
#: portfolio.php:774
#: portfolio.php:767
#: portfolio.php:775
#: portfolio.php:768
#: portfolio.php:776
#: portfolio.php:772
#: portfolio.php:780
#: portfolio.php:783
#: portfolio.php:789
#: portfolio.php:791
#: portfolio.php:793
#: portfolio.php:794
#: portfolio.php:796
#: portfolio.php:801
#: portfolio.php:816
#: portfolio.php:828
#: portfolio.php:830
#: portfolio.php:835
#: portfolio.php:837
#: portfolio.php:838
#: portfolio.php:839
#: portfolio.php:855
#: portfolio.php:844
#: portfolio.php:846
#: portfolio.php:851
#: portfolio.php:853
#: portfolio.php:854
#: portfolio.php:1001
"POT-Creation-Date: 2012-07-24 19:52+0300\n"
"PO-Revision-Date: 2012-07-24 19:52+0300\n"
#: portfolio.php:751
#: portfolio.php:792
#: portfolio.php:795
#: portfolio.php:641
#: portfolio.php:797
#: portfolio.php:996
#: portfolio.php:361
#: portfolio.php:517
#: portfolio.php:902
#: portfolio.php:518
#: portfolio.php:903
#: portfolio.php:610
#: portfolio.php:612
#: portfolio.php:620
#: portfolio.php:628
#: portfolio.php:991
#: portfolio.php:612
#: portfolio.php:890
#: portfolio.php:901
#: portfolio.php:618
#: portfolio.php:626
#: portfolio.php:628
#: portfolio.php:628
#: portfolio.php:628
#: portfolio.php:630
#: portfolio.php:665
#: portfolio.php:803
#: portfolio.php:666
#: portfolio.php:804
#: portfolio.php:667
#: portfolio.php:805
#: portfolio.php:668
#: portfolio.php:806
#: portfolio.php:669
#: portfolio.php:807
#: portfolio.php:670
#: portfolio.php:808
#: portfolio.php:671
#: portfolio.php:809
#: portfolio.php:672
#: portfolio.php:810
#: portfolio.php:747
#: portfolio.php:758
#: portfolio.php:764
#: portfolio.php:766
#: portfolio.php:774
#: portfolio.php:767
#: portfolio.php:775
#: portfolio.php:768
#: portfolio.php:776
#: portfolio.php:772
#: portfolio.php:780
#: portfolio.php:783
#: portfolio.php:789
#: portfolio.php:791
#: portfolio.php:793
#: portfolio.php:794
#: portfolio.php:796
#: portfolio.php:801
#: portfolio.php:816
#: portfolio.php:828
#: portfolio.php:830
#: portfolio.php:835
#: portfolio.php:837
#: portfolio.php:838
#: portfolio.php:839
#: portfolio.php:855
#: portfolio.php:844
#: portfolio.php:846
#: portfolio.php:851
#: portfolio.php:853
#: portfolio.php:854
#: portfolio.php:1001
"POT-Creation-Date: 2012-07-24 19:52+0300\n"
"PO-Revision-Date: 2012-07-24 19:52+0300\n"
#: portfolio.php:751
#: portfolio.php:792
#: portfolio.php:795
#: portfolio.php:641
#: portfolio.php:797
#: portfolio.php:996
#: portfolio.php:361
#: portfolio.php:517
#: portfolio.php:902
#: portfolio.php:518
#: portfolio.php:903
#: portfolio.php:610
#: portfolio.php:612
#: portfolio.php:620
#: portfolio.php:628
#: portfolio.php:991
#: portfolio.php:612
#: portfolio.php:890
#: portfolio.php:901
#: portfolio.php:618
#: portfolio.php:626
#: portfolio.php:628
#: portfolio.php:628
#: portfolio.php:628
#: portfolio.php:630
#: portfolio.php:665
#: portfolio.php:803
#: portfolio.php:666
#: portfolio.php:804
#: portfolio.php:667
#: portfolio.php:805
#: portfolio.php:668
#: portfolio.php:806
#: portfolio.php:669
#: portfolio.php:807
#: portfolio.php:670
#: portfolio.php:808
#: portfolio.php:671
#: portfolio.php:809
#: portfolio.php:672
#: portfolio.php:810
#: portfolio.php:747
#: portfolio.php:758
#: portfolio.php:764
#: portfolio.php:766
#: portfolio.php:774
#: portfolio.php:767
#: portfolio.php:775
#: portfolio.php:768
#: portfolio.php:776
#: portfolio.php:772
#: portfolio.php:780
#: portfolio.php:783
#: portfolio.php:789
#: portfolio.php:791
#: portfolio.php:793
#: portfolio.php:794
#: portfolio.php:796
#: portfolio.php:801
#: portfolio.php:816
#: portfolio.php:828
#: portfolio.php:830
#: portfolio.php:835
#: portfolio.php:837
#: portfolio.php:838
#: portfolio.php:839
#: portfolio.php:855
#: portfolio.php:844
#: portfolio.php:846
#: portfolio.php:851
#: portfolio.php:853
#: portfolio.php:854
#: portfolio.php:1001
"POT-Creation-Date: 2012-07-24 19:52+0300\n"
"PO-Revision-Date: 2012-07-24 19:52+0300\n"
#: portfolio.php:751
#: portfolio.php:792
#: portfolio.php:795
#: portfolio.php:641
#: portfolio.php:797
#: portfolio.php:996
#: portfolio.php:361
#: portfolio.php:517
#: portfolio.php:902
#: portfolio.php:518
#: portfolio.php:903
#: portfolio.php:610
#: portfolio.php:612
#: portfolio.php:620
#: portfolio.php:628
#: portfolio.php:991
#: portfolio.php:612
#: portfolio.php:890
#: portfolio.php:901
#: portfolio.php:618
#: portfolio.php:626
#: portfolio.php:628
#: portfolio.php:628
#: portfolio.php:628
#: portfolio.php:630
#: portfolio.php:665
#: portfolio.php:803
#: portfolio.php:666
#: portfolio.php:804
#: portfolio.php:667
#: portfolio.php:805
#: portfolio.php:668
#: portfolio.php:806
#: portfolio.php:669
#: portfolio.php:807
#: portfolio.php:670
#: portfolio.php:808
#: portfolio.php:671
#: portfolio.php:809
#: portfolio.php:672
#: portfolio.php:810
#: portfolio.php:747
#: portfolio.php:758
#: portfolio.php:764
#: portfolio.php:766
#: portfolio.php:774
#: portfolio.php:767
#: portfolio.php:775
#: portfolio.php:768
#: portfolio.php:776
#: portfolio.php:772
#: portfolio.php:780
#: portfolio.php:783
#: portfolio.php:789
#: portfolio.php:791
#: portfolio.php:793
#: portfolio.php:794
#: portfolio.php:796
#: portfolio.php:801
#: portfolio.php:816
#: portfolio.php:828
#: portfolio.php:830
#: portfolio.php:835
#: portfolio.php:837
#: portfolio.php:838
#: portfolio.php:839
#: portfolio.php:855
#: portfolio.php:844
#: portfolio.php:846
#: portfolio.php:851
#: portfolio.php:853
#: portfolio.php:854
#: portfolio.php:1001
"POT-Creation-Date: 2012-07-24 19:52+0300\n"
"PO-Revision-Date: 2012-07-24 19:52+0300\n"
#: portfolio.php:751
#: portfolio.php:792
#: portfolio.php:795
#: portfolio.php:641
#: portfolio.php:797
#: portfolio.php:996
#: portfolio.php:361
#: portfolio.php:517
#: portfolio.php:902
#: portfolio.php:518
#: portfolio.php:903
#: portfolio.php:610
#: portfolio.php:612
#: portfolio.php:620
#: portfolio.php:628
#: portfolio.php:991
#: portfolio.php:612
#: portfolio.php:890
#: portfolio.php:901
#: portfolio.php:618
#: portfolio.php:626
#: portfolio.php:628
#: portfolio.php:628
#: portfolio.php:628
#: portfolio.php:630
#: portfolio.php:665
#: portfolio.php:803
#: portfolio.php:666
#: portfolio.php:804
#: portfolio.php:667
#: portfolio.php:805
#: portfolio.php:668
#: portfolio.php:806
#: portfolio.php:669
#: portfolio.php:807
#: portfolio.php:670
#: portfolio.php:808
#: portfolio.php:671
#: portfolio.php:809
#: portfolio.php:672
#: portfolio.php:810
#: portfolio.php:747
#: portfolio.php:758
#: portfolio.php:764
#: portfolio.php:766
#: portfolio.php:774
#: portfolio.php:767
#: portfolio.php:775
#: portfolio.php:768
#: portfolio.php:776
#: portfolio.php:772
#: portfolio.php:780
#: portfolio.php:783
#: portfolio.php:789
#: portfolio.php:791
#: portfolio.php:793
#: portfolio.php:794
#: portfolio.php:796
#: portfolio.php:801
#: portfolio.php:816
#: portfolio.php:828
#: portfolio.php:830
#: portfolio.php:835
#: portfolio.php:837
#: portfolio.php:838
#: portfolio.php:839
#: portfolio.php:855
#: portfolio.php:844
#: portfolio.php:846
#: portfolio.php:851
#: portfolio.php:853
#: portfolio.php:854
#: portfolio.php:1001
"POT-Creation-Date: 2012-07-24 19:52+0300\n"
"PO-Revision-Date: 2012-07-24 19:52+0300\n"
#: portfolio.php:751
#: portfolio.php:792
#: portfolio.php:795
#: portfolio.php:641
#: portfolio.php:797
#: portfolio.php:996
#: portfolio.php:361
#: portfolio.php:517
#: portfolio.php:902
#: portfolio.php:518
#: portfolio.php:903
#: portfolio.php:610
#: portfolio.php:612
#: portfolio.php:620
#: portfolio.php:628
#: portfolio.php:991
#: portfolio.php:612
#: portfolio.php:890
#: portfolio.php:901
#: portfolio.php:618
#: portfolio.php:626
#: portfolio.php:628
#: portfolio.php:628
#: portfolio.php:628
#: portfolio.php:630
#: portfolio.php:665
#: portfolio.php:803
#: portfolio.php:666
#: portfolio.php:804
#: portfolio.php:667
#: portfolio.php:805
#: portfolio.php:668
#: portfolio.php:806
#: portfolio.php:669
#: portfolio.php:807
#: portfolio.php:670
#: portfolio.php:808
#: portfolio.php:671
#: portfolio.php:809
#: portfolio.php:672
#: portfolio.php:810
#: portfolio.php:747
#: portfolio.php:758
#: portfolio.php:764
#: portfolio.php:766
#: portfolio.php:774
#: portfolio.php:767
#: portfolio.php:775
#: portfolio.php:768
#: portfolio.php:776
#: portfolio.php:772
#: portfolio.php:780
#: portfolio.php:783
#: portfolio.php:789
#: portfolio.php:791
#: portfolio.php:793
#: portfolio.php:794
#: portfolio.php:796
#: portfolio.php:801
#: portfolio.php:816
#: portfolio.php:828
#: portfolio.php:830
#: portfolio.php:835
#: portfolio.php:837
#: portfolio.php:838
#: portfolio.php:839
#: portfolio.php:855
#: portfolio.php:844
#: portfolio.php:846
#: portfolio.php:851
#: portfolio.php:853
#: portfolio.php:854
#: portfolio.php:1001
"POT-Creation-Date: 2012-07-24 19:52+0300\n"
"PO-Revision-Date: 2012-07-24 19:53+0300\n"
#: portfolio.php:751
#: portfolio.php:792
#: portfolio.php:795
#: portfolio.php:641
#: portfolio.php:797
#: portfolio.php:996
#: portfolio.php:361
#: portfolio.php:517
#: portfolio.php:902
#: portfolio.php:518
#: portfolio.php:903
#: portfolio.php:610
#: portfolio.php:612
#: portfolio.php:620
#: portfolio.php:628
#: portfolio.php:991
#: portfolio.php:612
#: portfolio.php:890
#: portfolio.php:901
#: portfolio.php:618
#: portfolio.php:626
#: portfolio.php:628
#: portfolio.php:628
#: portfolio.php:628
#: portfolio.php:630
#: portfolio.php:665
#: portfolio.php:803
#: portfolio.php:666
#: portfolio.php:804
#: portfolio.php:667
#: portfolio.php:805
#: portfolio.php:668
#: portfolio.php:806
#: portfolio.php:669
#: portfolio.php:807
#: portfolio.php:670
#: portfolio.php:808
#: portfolio.php:671
#: portfolio.php:809
#: portfolio.php:672
#: portfolio.php:810
#: portfolio.php:747
#: portfolio.php:758
#: portfolio.php:764
#: portfolio.php:766
#: portfolio.php:774
#: portfolio.php:767
#: portfolio.php:775
#: portfolio.php:768
#: portfolio.php:776
#: portfolio.php:772
#: portfolio.php:780
#: portfolio.php:783
#: portfolio.php:789
#: portfolio.php:791
#: portfolio.php:793
#: portfolio.php:794
#: portfolio.php:796
#: portfolio.php:801
#: portfolio.php:816
#: portfolio.php:828
#: portfolio.php:830
#: portfolio.php:835
#: portfolio.php:837
#: portfolio.php:838
#: portfolio.php:839
#: portfolio.php:855
#: portfolio.php:844
#: portfolio.php:846
#: portfolio.php:851
#: portfolio.php:853
#: portfolio.php:854
#: portfolio.php:1001
"POT-Creation-Date: 2012-07-24 19:53+0300\n"
"PO-Revision-Date: 2012-07-24 19:53+0300\n"
#: portfolio.php:751
#: portfolio.php:792
#: portfolio.php:795
#: portfolio.php:641
#: portfolio.php:797
#: portfolio.php:996
#: portfolio.php:361
#: portfolio.php:517
#: portfolio.php:902
#: portfolio.php:518
#: portfolio.php:903
#: portfolio.php:610
#: portfolio.php:612
#: portfolio.php:620
#: portfolio.php:628
#: portfolio.php:991
#: portfolio.php:612
#: portfolio.php:890
#: portfolio.php:901
#: portfolio.php:618
#: portfolio.php:626
#: portfolio.php:628
#: portfolio.php:628
#: portfolio.php:628
#: portfolio.php:630
#: portfolio.php:665
#: portfolio.php:803
#: portfolio.php:666
#: portfolio.php:804
#: portfolio.php:667
#: portfolio.php:805
#: portfolio.php:668
#: portfolio.php:806
#: portfolio.php:669
#: portfolio.php:807
#: portfolio.php:670
#: portfolio.php:808
#: portfolio.php:671
#: portfolio.php:809
#: portfolio.php:672
#: portfolio.php:810
#: portfolio.php:747
#: portfolio.php:758
#: portfolio.php:764
#: portfolio.php:766
#: portfolio.php:774
#: portfolio.php:767
#: portfolio.php:775
#: portfolio.php:768
#: portfolio.php:776
#: portfolio.php:772
#: portfolio.php:780
#: portfolio.php:783
#: portfolio.php:789
#: portfolio.php:791
#: portfolio.php:793
#: portfolio.php:794
#: portfolio.php:796
#: portfolio.php:801
#: portfolio.php:816
#: portfolio.php:828
#: portfolio.php:830
#: portfolio.php:835
#: portfolio.php:837
#: portfolio.php:838
#: portfolio.php:839
#: portfolio.php:855
#: portfolio.php:844
#: portfolio.php:846
#: portfolio.php:851
#: portfolio.php:853
#: portfolio.php:854
#: portfolio.php:1001
 * @version 2.06
Version: 2.06
	function prtfl_custom_permalinks( $rules ) {
 	$newrules = array();
		$newrules['portfolio/page/([^/]+)/?$'] = 'index.php?pagename=portfolio&paged=$matches[1]';
		$newrules['portfolio/page/([^/]+)?$'] = 'index.php?pagename=portfolio&paged=$matches[1]';
  return $newrules + $rules;
// flush_rules() if our rules are not yet included
if ( ! function_exists( 'prtfl_flush_rules' ) ) {
		function prtfl_flush_rules(){
				$rules = get_option( 'rewrite_rules' );

				if ( ! isset( $rules['portfolio/page/([^/]+)/?$'] ) ) {
						global $wp_rewrite;
						$wp_rewrite->flush_rules();
				}
		}
}

		if( isset( $_REQUEST['prtfl_form_submit'] ) && check_admin_referer( plugin_basename(__FILE__), 'prtfl_nonce_name' ) ) {
			<?php wp_nonce_field( plugin_basename(__FILE__), 'prtfl_nonce_name' ); ?>
//add_action( 'init', 'prtfl_custom_permalinks' ); // add custom permalink for portfolio
add_filter( 'rewrite_rules_array', 'prtfl_custom_permalinks' ); // add custom permalink for gallery
add_action( 'wp_loaded', 'prtfl_flush_rules' );
Tested up to: 3.4.1
Stable tag: 2.06
= V2.06 - 24.07.2012 =
* Bugfix : Cross Site Request Forgery bug was fixed. 

= V2.06 =
Cross Site Request Forgery bug was fixed.