WordPress.org
Get WordPress

Plugin Directory

Changeset 1604846


Ignore:
Timestamp:
02/27/2017 10:25:45 PM (9 years ago)
Author:
bulktheme
Message:

wpnonce update in upload preview and result file

Location:
wooexim/trunk/inc
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • wooexim/trunk/inc/wooexim-import-preview.php

    r1603750 r1604846  
    66
    77//get separator options
    8 $import_csv_hierarchy_separator = isset($_POST['import_csv_hierarchy_separator']) && strlen($_POST['import_csv_hierarchy_separator']) == 1 ? $_POST['import_csv_hierarchy_separator'] : '/';
    9 $import_csv_separator = isset($_POST['import_csv_separator']) && strlen($_POST['import_csv_separator']) == 1 ? $_POST['import_csv_separator'] : ',';
     8$import_csv_hierarchy_separator = wp_verify_nonce( $_REQUEST['_wpnonce'] ) && isset($_POST['import_csv_hierarchy_separator']) && strlen($_POST['import_csv_hierarchy_separator']) == 1 ? $_POST['import_csv_hierarchy_separator'] : '/';
     9$import_csv_separator = wp_verify_nonce( $_REQUEST['_wpnonce'] ) && isset($_POST['import_csv_separator']) && strlen($_POST['import_csv_separator']) == 1 ? $_POST['import_csv_separator'] : ',';
    1010
    1111$error_messages = array();

  • wooexim/trunk/inc/wooexim-import-result.php

    r1603750 r1604846  
    1515    'import_csv_hierarchy_separator' => maybe_unserialize(sanitize_text_field($_POST['import_csv_hierarchy_separator']))
    1616);
     17if(wp_verify_nonce( $_REQUEST['_wpnonce'] )){
    1718?>
    1819<script type="text/javascript">
    … …  
    112113    });
    113114</script>
    114 
     115<?php } ?>
    115116<div class="wooexim_wrapper wrap">
    116117    <div id="icon-tools" class="icon32"><br /></div>
Note: See TracChangeset for help on using the changeset viewer.