- added nonce fields;

2026-06-05 15:09:37 +09:00 · 2018-11-21 14:01:18 +02:00
parent 9b083d8243
commit 0ceab69793
44 changed files with 393 additions and 213 deletions
@@ -45,6 +45,8 @@ if ( ! class_exists( 'um\core\Profile' ) ) {
 		 * Delete profile avatar AJAX handler
 		 */
 		function ajax_delete_profile_photo() {
+			UM()->check_ajax_nonce();
+
 			/**
 			 * @var $user_id
 			 */
@@ -61,6 +63,8 @@ if ( ! class_exists( 'um\core\Profile' ) ) {
 		 * Delete cover photo AJAX handler
 		 */
 		function ajax_delete_cover_photo() {
+			UM()->check_ajax_nonce();
+
 			/**
 			 * @var $user_id
 			 */