WordPress.org
Get WordPress

Plugin Directory

Changeset 3488658


Ignore:
Timestamp:
03/23/2026 07:47:53 AM (12 days ago)
Author:
ergonet
Message:

fix missing authentication on callback

Location:
ergonet-varnish-cache
Files:
1 added
2 edited
3 copied

Legend:

Unmodified
Added
Removed

  • ergonet-varnish-cache/tags/1.0.14/readme.txt

    r3420834 r3488658  
    33Tags: cache
    44Requires at least: 4.9
    5 Tested up to: 6.9
    6 Stable tag: 1.0.13
     5Tested up to: 7.0
     6Stable tag: 1.0.14
    77Requires PHP: 7.1
    88License: GPLv2 or later

  • ergonet-varnish-cache/tags/1.0.14/varnishCache.php

    r3420834 r3488658  
    66Plugin Name: Ergonet Cache
    77Description: Plugin per la gestione delle cache Nginx e Varnish su hosting Ergonet.
    8 Version: 1.0.13
     8Version: 1.0.14
    99Author: Ergonet srl
    1010Author URI: https://www.ergonet.it
    … …  
    9191
    9292    function cachePurgeHomepageCallback() {
     93        check_ajax_referer('ergonet_cache_nonce');
     94        if (!current_user_can('manage_options')) {
     95            wp_die(-1);
     96        }
    9397        $this->purgeFrontPage();
    9498        wp_die();
    … …  
    96100
    97101    function cachePurgeAllCallback() {
     102        check_ajax_referer('ergonet_cache_nonce');
     103        if (!current_user_can('manage_options')) {
     104            wp_die(-1);
     105        }
    98106        $this->purgeAll();
    99107        wp_die();

  • ergonet-varnish-cache/trunk/readme.txt

    r3420834 r3488658  
    33Tags: cache
    44Requires at least: 4.9
    5 Tested up to: 6.9
    6 Stable tag: 1.0.13
     5Tested up to: 7.0
     6Stable tag: 1.0.14
    77Requires PHP: 7.1
    88License: GPLv2 or later

  • ergonet-varnish-cache/trunk/varnishCache.php

    r3420834 r3488658  
    66Plugin Name: Ergonet Cache
    77Description: Plugin per la gestione delle cache Nginx e Varnish su hosting Ergonet.
    8 Version: 1.0.13
     8Version: 1.0.14
    99Author: Ergonet srl
    1010Author URI: https://www.ergonet.it
    … …  
    9191
    9292    function cachePurgeHomepageCallback() {
     93        check_ajax_referer('ergonet_cache_nonce');
     94        if (!current_user_can('manage_options')) {
     95            wp_die(-1);
     96        }
    9397        $this->purgeFrontPage();
    9498        wp_die();
    … …  
    96100
    97101    function cachePurgeAllCallback() {
     102        check_ajax_referer('ergonet_cache_nonce');
     103        if (!current_user_can('manage_options')) {
     104            wp_die(-1);
     105        }
    98106        $this->purgeAll();
    99107        wp_die();
Note: See TracChangeset for help on using the changeset viewer.