| @@ -9,12 +9,13 @@ | ||
| 9 | 9 | { |
| 10 | 10 | public function __construct() |
| 11 | 11 | { |
| 12 | 12 | parent::__construct(); |
| 13 | + | |
| 13 | 14 | $this->setDefaultTask('select'); |
| 14 | 15 | } |
| 15 | 16 | |
| 16 | - public function select() | |
| 17 | + public function select(): void | |
| 17 | 18 | { |
| 18 | 19 | acym_setVar('layout', 'select'); |
| 19 | 20 | |
| 20 | 21 | $warnings = ''; |
| @@ -30,12 +31,14 @@ | ||
| 30 | 31 | |
| 31 | 32 | $uploadedFile = acym_getVar('array', 'uploadedFile', [], 'files'); |
| 32 | 33 | $selectedFile = ''; |
| 33 | 34 | if (!empty($uploadedFile['name'])) { |
| 35 | + wp_verify_nonce(acym_getVar('cmd', '_wpnonce'), 'acymnonce') || die('Invalid Token'); | |
| 36 | + | |
| 34 | 37 | ob_start(); |
| 35 | 38 | $uploaded = acym_importFile($uploadedFile, $uploadPath, false); |
| 36 | 39 | $warnings = ob_get_clean(); |
| 37 | - if ($uploaded) { | |
| 40 | + if (!empty($uploaded)) { | |
| 38 | 41 | $selectedFile = $uploaded; |
| 39 | 42 | } |
| 40 | 43 | } |
| 41 | 44 | |