Jonathan Labreuille

Hi peopleinside,

I think this is a false positive in your case. The “security software” you are using seems to be pretty limited and doesn’t actually try to exploit the file. It just looks for commonly used functions.

The render engine file is actually a template engine (much like Smarty). the base64 functions are used as variable modifiers and the eval() is there for handling conditions.

If you remove the file, you might as well remove the whole plugin as it handles the visual editors (forms & newsletters) and also their respective rendered version.

Let me know if you have any question ??

Hi Tim,

Thanks for the report.

The issue has already been fixed internally, we just need to make sure that there is no side effects.

We’ll release it as soon as it has been properly tested.

Cheers!

Jonathan @ MailPoet

Hi John,

Thanks for reporting this.

This issue has been added to our bug tracker. It will be fixed in our upcoming 2.5 release.

Cheers

Hi,

In the latest version (2.4.1), you can enable HTML edits in Wysija > Settings > Advanced. This will enable the HTML source button in Tinymce when you edit a text block. This way you can paste your custom HTML.
Beware that this is a beta feature at the moment so make sure you send yourself a preview of the email before sending it to your subscribers.

Cheers,
Jonathan @ Wysija

I fixed this issue on our support site ??
During one of our latest upgrades, some folders like bookmarks & dividers were not transferred properly to the uploads folder.

Glad you like it ??