WordPress.org
Get WordPress

Plugin Directory

Changeset 2919151


Ignore:
Timestamp:
05/30/2023 02:04:18 PM (3 years ago)
Author:
chuck1982
Message:

version 2.1.0.14

Location:
wp-inventory-manager/trunk
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • wp-inventory-manager/trunk/includes/wpinventory.admin.class.php

    r2666161 r2919151  
    752752            }
    753753        } else if ( 'delete' == $action ) {
    754             $inventory_id = self::request( 'delete_id' );
    755             $success      = self::delete_item( $inventory_id );
     754        $inventory_id = self::request( 'delete_id' );
     755        $success      = self::delete_item( $inventory_id, self::request( 'wp_nonce' ) );
    756756            $action       = '';
    757757        }
    … …  
    852852              $loop->the_item();
    853853              $edit_url      = ( self::check_permission( 'view_item', $wpinventory_item->inventory_id ) ) ? self::$self_url . '&action=edit&inventory_id=' . $wpinventory_item->inventory_id : '';
    854               $delete_url    = ( self::check_permission( 'edit_item', $wpinventory_item->inventory_id ) ) ? self::$self_url . '&action=delete&delete_id=' . $wpinventory_item->inventory_id : '';
     854              $delete_url    = ( self::check_permission( 'edit_item', $wpinventory_item->inventory_id ) ) ? self::$self_url . '&action=delete&delete_id=' . $wpinventory_item->inventory_id . '&wp_nonce=' . wp_create_nonce( 'delete-item-' . $wpinventory_item->inventory_id ) : '';
    855855              $duplicate_url = ( self::check_permission( 'view_item', $wpinventory_item->inventory_id ) ) ? self::$self_url . '&action=duplicate&duplicate_id=' . $wpinventory_item->inventory_id : '';
    856856
    … …  
    14481448    }
    14491449
    1450     public static function delete_item() {
     1450    public static function delete_item( $inventory_id, $nonce ) {
    14511451        $inventory_id = (int) self::request( "delete_id" );
    1452         if ( ! $inventory_id ) {
    1453             self::$error = self::__( 'Inventory id not set.  Item not deleted.' );
     1452        if ( ! wp_verify_nonce( $nonce, 'delete-item-' . $inventory_id ) ) {
     1453            self::$error = self::__( 'There was a problem deleting your inventory item. Invalid permissions.' );
    14541454
    14551455            return FALSE;

  • wp-inventory-manager/trunk/wpinventory.php

    r2900836 r2919151  
    55 * Plugin URI:    http://www.wpinventory.com
    66 * Description:    Manage and display your products just like a shopping cart, but without the cart.
    7  * Version:        2.1.0.13
     7 * Version:        2.1.0.14
    88 * Author:        WP Inventory Manager
    99 * Author URI:    http://www.wpinventory.com/
    … …  
    3434
    3535abstract class WPIMConstants {
    36     const VERSION = '2.1.0.13';
     36    const VERSION = '2.1.0.14';
    3737    const MIN_PHP_VERSION = '5.6';
    3838    const SHORTCODE = 'wpinventory';
Note: See TracChangeset for help on using the changeset viewer.