Changeset 3469008

Timestamp:

02/25/2026 03:01:06 AM (5 weeks ago)

Author:

webangon

Message:

Prefix nonce

Location:

news-element/trunk/admin

Files:

• inc/dash.php (modified) (3 diffs)
• lib/index.php (modified) (1 diff)

news-element/trunk/admin/inc/dash.php

@@ -22 +22 @@
     public function ne_display_import_sites() {
 
-        if ( !isset($_POST['nonce']) || !current_user_can('manage_options') || !wp_verify_nonce( sanitize_text_field(wp_unslash($_POST['nonce'])), 'wp_rest')) {
+        if ( !isset($_POST['nonce']) || !current_user_can('manage_options') || !wp_verify_nonce( sanitize_text_field(wp_unslash($_POST['nonce'])), 'newselement-nonce')) {
             exit;
         }
-
+ 
         $data = get_option('news24lib');
 
@@ -135 +135 @@
                'ajax_url' => admin_url( 'admin-ajax.php' ),
                'site_url' => home_url(),
+               'nonce'    => wp_create_nonce( 'newselement-nonce' ),
             );
              wp_enqueue_script('ne_admin_demo', plugin_dir_url( __FILE__ ).'assets/admin.js',array('jquery','masonry'), NEWS_ELM_VERSION, true); 
@@ -165 +166 @@
     public static function ne_import_data(){
 
-        if ( !isset($_POST['nonce']) || !current_user_can('manage_options') || !wp_verify_nonce( sanitize_text_field(wp_unslash($_POST['nonce'])), 'wp_rest')) {
+        if ( !isset($_POST['nonce']) || !current_user_can('manage_options') || !wp_verify_nonce( sanitize_text_field(wp_unslash($_POST['nonce'])), 'newselement-nonce')) {
             exit;
         }

news-element/trunk/admin/lib/index.php

@@ -98 +98 @@
         function ajax_data(){
             //phpcs:disable WordPress.Security.ValidatedSanitizedInput.InputNotValidated
-            if (!current_user_can('manage_options') || !wp_verify_nonce( sanitize_text_field(wp_unslash($_POST['nonce'])), 'wp_rest')) {
+            if (!current_user_can('manage_options') || !wp_verify_nonce( sanitize_text_field(wp_unslash($_POST['nonce'])), 'newselement-nonce')) {
                 exit;
             }