Changeset 3313656

Timestamp:

06/18/2025 07:18:42 AM (9 months ago)

Author:

grandplugins

Message:

[Fix] Add nonce check for image sizes update ajax request

Location:

image-sizes-controller/trunk

Files:

• gpls-issl-images-subsizes-list.php (modified) (1 diff)
• includes/ImageSizes.php (modified) (1 diff)
• readme.txt (modified) (1 diff)

image-sizes-controller/trunk/gpls-issl-images-subsizes-list.php

@@ -9 +9 @@
  * Text Domain:     image-sizes-controller
  * Std Name:        gpls-issl-images-subsizes-list
- * Version:         1.0.9
+ * Version:         1.0.10
  *
  * @package         Images_Subsize_List

image-sizes-controller/trunk/includes/ImageSizes.php

@@ -432 +432 @@
      */
     public function ajax_update_image_size() {
+
+        check_admin_referer( self::$plugin_info['name'] . '-ajax-image-sizes-nonce', 'nonce' );
+
         // 3) Check POST Data.
         if ( ! empty( $_POST['subsizeName'] ) && ! empty( $_POST['width'] ) && ! empty( $_POST['height'] ) ) {

image-sizes-controller/trunk/readme.txt

@@ -1 +1 @@
 ===  Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes ===
 Tags: image, images, big images, sizes, subsize, broken subsize, custom subsize, crop, remove subsize, create subsize
-Tested up to: 6.7
+Tested up to: 6.8
 Requires at least: 5.6
 Requires PHP: 7.0
-Version: 1.0.9
-Stable Tag: 1.0.9
+Version: 1.0.10
+Stable Tag: 1.0.10
 Contributors: GrandPlugins
 Author: GrandPlugins