Beanz/flatpress
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

check for correct admin referer on enable/disable plugin (see #64)

Browse Source
This commit is contained in:
azett 2022-12-30 12:52:03 +01:00
parent 516bdc173a
commit 37597afee8
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
admin/panels/plugin/admin.plugin.php
View File

@ -53,6 +53,9 @@ class admin_plugin_default extends AdminPanelAction {
} }
function dodisable($id) { function dodisable($id) {
// at first: check if nonce was given correctly
check_admin_referer('admin_plugin_default_disable_' . $id);
$fp_plugins = $this->fp_plugins; $fp_plugins = $this->fp_plugins;
$success = -1; $success = -1;
@ -78,6 +81,9 @@ class admin_plugin_default extends AdminPanelAction {
} }
function doenable($id) { function doenable($id) {
// at first: check if nonce was given correctly
check_admin_referer('admin_plugin_default_enable_' . $id);
$success = -1; $success = -1;
$fp_plugins = $this->fp_plugins; $fp_plugins = $this->fp_plugins;