| @@ -31,12 +31,14 @@ | ||
| 31 | 31 | |
| 32 | 32 | $uploadedFile = acym_getVar('array', 'uploadedFile', [], 'files'); |
| 33 | 33 | $selectedFile = ''; |
| 34 | 34 | if (!empty($uploadedFile['name'])) { |
| 35 | + wp_verify_nonce(acym_getVar('cmd', '_wpnonce'), 'acymnonce') || die('Invalid Token'); | |
| 36 | + | |
| 35 | 37 | ob_start(); |
| 36 | 38 | $uploaded = acym_importFile($uploadedFile, $uploadPath, false); |
| 37 | 39 | $warnings = ob_get_clean(); |
| 38 | - if ($uploaded) { | |
| 40 | + if (!empty($uploaded)) { | |
| 39 | 41 | $selectedFile = $uploaded; |
| 40 | 42 | } |
| 41 | 43 | } |
| 42 | 44 | |
