WordPress.org
Get WordPress

Plugin Directory

Changeset 3223211


Ignore:
Timestamp:
01/15/2025 10:36:20 PM (15 months ago)
Author:
sjhand
Message:

Vulnerability fix, credit to SOPROBRO

Location:
webcamconsult
Files:
38 added
2 edited

Legend:

Unmodified
Added
Removed

  • webcamconsult/trunk/README.txt

    r2769412 r3223211  
    55Requires at least: 3.0.1
    66Tested up to: 6.0.1
    7 Stable tag: 1.5
     7Stable tag: 1.6
    88License: GPLv2 or later
    99License URI: http://www.gnu.org/licenses/gpl-2.0.html

  • webcamconsult/trunk/admin/partials/webcamconsult-inline-widget.php

    r2035185 r3223211  
    2525 * Get and save current options
    2626 */
    27 if (isset($_POST['save']))
     27
     28if (isset($_POST['save']) && wp_verify_nonce($_POST['nonce'], 'webcamconsult-inline-widget'))
    2829{
    2930    if (isset($_POST['activate-inline-widget']))
    … …  
    4445$activate_checked = (get_option('webcamconsult-inline-widget')) ? 'checked' : '';
    4546$widget_id = (get_option('webcamconsult-inline-widget-id')) ? get_option('webcamconsult-inline-widget-id') : '0';
     47$nonce = wp_create_nonce('webcamconsult-inline-widget');
    4648?>
    4749<div class="wrap">
    … …  
    4951    <form method="post">
    5052        <input type="hidden" name="save" value="1" />
     53        <input type="hidden" name="nonce" value="<?php echo $nonce; ?>" />
    5154        <table class="form-table">
    5255            <tbody><tr>
Note: See TracChangeset for help on using the changeset viewer.