Context Navigation

Changeset 2230136

Timestamp:

01/20/2020 09:19:44 AM (6 years ago)

Author:

orenhav

Message:

add nonce check for terms update

Location:

oh-add-script-header-footer/trunk

Files:

r2212294	r2230136
5	5	* Description: create a simple way to add js code to individual page post or custom post type header
6	6	* and footer, in this way it enable you to add google re-marketing code to individual pages
7		* Version: 3.8
	7	* Version: 3.9
8	8	* Author: orenhav (SOGO)
9	9	* Author URI: http://sogo.co.il

-                      r1760618
+                      r2230136
     function update_category_meta( $term_id ) {
+        // Secondly we need to check if the user intended to change this value.
+        if ( ! isset( $_POST['oh_add_script_noncename'] ) || ! wp_verify_nonce( $_POST['oh_add_script_noncename'], plugin_basename( __FILE__ ) ) )
+            return;
         if ( isset( $_POST['oh-hide-header'] ) && '' !== $_POST['oh-hide-header'] ) {
 …
         $header      = get_term_meta( $term->term_id, 'oh-header-script', true );
         $footer      = get_term_meta( $term->term_id, 'oh-footer-script', true );
+        wp_nonce_field( plugin_basename( __FILE__ ), 'oh_add_script_noncename' );
         ?>

-                      r2212294
+                      r2230136
 Requires at least: 3.5
 Tested up to: 5.3.1
 Stable tag: 3.8
+Stable tag: 3.9
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
 …
 Test support for last WordPress version
+= 3.9 =
+add nonce check for terms update
 == Upgrade Notice ==

Note: See TracChangeset for help on using the changeset viewer.