← All changes | back/Controllers/FileController.php +2 -0 10.10.2 → 11.1.0 View file →

		@@ -31,8 +31,10 @@
31	31
32	32	$uploadedFile = acym_getVar('array', 'uploadedFile', [], 'files');
33	33	$selectedFile = '';
34	34	if (!empty($uploadedFile['name'])) {
	35	+ wp_verify_nonce(acym_getVar('cmd', '_wpnonce'), 'acymnonce') || die('Invalid Token');
	36	+
35	37	ob_start();
36	38	$uploaded = acym_importFile($uploadedFile, $uploadPath, false);
37	39	$warnings = ob_get_clean();
38	40	if (!empty($uploaded)) {