10h30/ultimatemember
1
0
Fork 0
mirror of https://github.com/10h30/ultimatemember.git synced 2026-06-05 15:09:37 +09:00
Code Issues Packages Projects Releases Wiki Activity

- fixed verify nonce;

Browse Source
This commit is contained in:
nikitasinelnikov
2018-12-07 15:26:42 +02:00
parent 3383c69e2d
commit e7c893cdea
3 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
includes/admin/class-admin-functions.php
+1 -1
View File
@@ -28,7 +28,7 @@ if ( ! class_exists( 'um\admin\Admin_Functions' ) ) {
* @param bool $action
*/
function check_ajax_nonce( $action = false ) {
$nonce = isset( $_POST['nonce'] ) ? $_POST['nonce'] : '';
$nonce = isset( $_REQUEST['nonce'] ) ? $_REQUEST['nonce'] : '';
$action = empty( $action ) ? 'um-admin-nonce' : $action;
if ( ! wp_verify_nonce( $nonce, $action ) ) {
includes/class-functions.php
+1 -1
View File
@@ -23,7 +23,7 @@ if ( ! class_exists( 'UM_Functions' ) ) {
* @param bool $action
*/
function check_ajax_nonce( $action = false ) {
$nonce = isset( $_POST['nonce'] ) ? $_POST['nonce'] : '';
$nonce = isset( $_REQUEST['nonce'] ) ? $_REQUEST['nonce'] : '';
$action = empty( $action ) ? 'um-frontend-nonce' : $action;
if ( ! wp_verify_nonce( $nonce, $action ) ) {
readme.txt
+1
View File
@@ -152,6 +152,7 @@ The plugin works with popular caching plugins by automatically excluding Ultimat
- Fixed admin forms esc_attr value
- Fixed admin forms buttons wp_unslash
- Fixed get/clean plugin upgrades on multisites
- Fixed verify nonce on $_GET requests
* Deprecated:
- removed "UM_TEXTDOMAIN" constant