Event-Federation/wordpress-activitypub
Event-Federation/wordpress-activitypub
7
1
Fork 0
Code Issues 3 Pull requests Projects Releases Wiki Activity Actions

re-use existing nonce!

Browse source
This commit is contained in:
Matthias Pfefferle 2023-11-09 15:58:27 +01:00
parent d2299436a7
commit 32d8e7c3f0
3 changed files with 3 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
includes/table/class-followers.php
View file

@ -141,11 +141,11 @@ class Followers extends WP_List_Table {
} }
public function process_action() { public function process_action() {
if ( ! isset( $_REQUEST['followers'] ) || ! isset( $_REQUEST['_apnonce'] ) ) { if ( ! isset( $_REQUEST['followers'] ) || ! isset( $_REQUEST['_wpnonce'] ) ) {
return false; return false;
} }
$nonce = sanitize_text_field( wp_unslash( $_REQUEST['_apnonce'] ) ); $nonce = sanitize_text_field( wp_unslash( $_REQUEST['_wpnonce'] ) );
if ( ! wp_verify_nonce( $nonce, 'activitypub-followers-list' ) ) { if ( ! wp_verify_nonce( $nonce, 'bulk-' . $this->_args['plural'] ) ) {
return false; return false;
} }

1
templates/blog-user-followers-list.php
View file

@ -24,6 +24,5 @@ $followers_template = _n( 'Your blog profile currently has %s follower.', 'Your
$table->search_box( 'Search', 'search' ); $table->search_box( 'Search', 'search' );
$table->display(); $table->display();
?> ?>
<?php wp_nonce_field( 'activitypub-followers-list', '_apnonce' ); ?>
</form> </form>
</div> </div>

1
templates/user-followers-list.php
View file

@ -17,6 +17,5 @@ $followers_template = _n( 'Your author profile currently has %s follower.', 'You
$table->search_box( 'Search', 'search' ); $table->search_box( 'Search', 'search' );
$table->display(); $table->display();
?> ?>
<?php wp_nonce_field( 'activitypub-followers-list', '_apnonce' ); ?>
</form> </form>
</div> </div>