WordPress.org
Get WordPress

Plugin Directory

Changeset 3261795


Ignore:
Timestamp:
03/25/2025 09:23:37 PM (12 months ago)
Author:
flipdish
Message:

update

Location:
flipdish-ordering-system/trunk/admin
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • flipdish-ordering-system/trunk/admin/admin-menu.php

    r3261785 r3261795  
    6262 */
    6363function flipdish_custom_admin_styles_scripts() {
    64     if ( isset( $_GET['page'] ) && ( 'flipdish-ordering' === wp_unslash($_GET['page']) || 'flipdish-system-info' === wp_unslash($_GET['page']) ) ) {
     64    if ( isset( $_GET['page'] ) && ( 'flipdish-ordering' === sanitize_text_field(wp_unslash($_GET['page'])) || 'flipdish-system-info' === sanitize_text_field(wp_unslash($_GET['page'])) ) ) {
    6565        // Verify nonce
    66         if (!isset($_GET['_wpnonce']) || !wp_verify_nonce(wp_unslash($_GET['_wpnonce']), 'flipdish_admin_page_nonce')) {
     66        if (!isset($_GET['_wpnonce']) || !wp_verify_nonce(sanitize_text_field(wp_unslash($_GET['_wpnonce'])), 'flipdish_admin_page_nonce')) {
    6767            wp_die('Security check failed');
    6868        }

  • flipdish-ordering-system/trunk/admin/settings-on-update.php

    r3261785 r3261795  
    6868    // Verify nonce
    6969    if (!isset($_POST['flipdish_ordering_reset_nonce']) ||
    70         !wp_verify_nonce(wp_unslash($_POST['flipdish_ordering_reset_nonce']), 'flipdish_ordering_reset_data')) {
     70        !wp_verify_nonce(sanitize_text_field(wp_unslash($_POST['flipdish_ordering_reset_nonce'])), 'flipdish_ordering_reset_data')) {
    7171        wp_die('Security check failed');
    7272    }
Note: See TracChangeset for help on using the changeset viewer.