| @@ -80,8 +80,10 @@ | ||
| 80 | 80 | } |
| 81 | 81 | |
| 82 | 82 | public function synchronizeExistingUsers(): void |
| 83 | 83 | { |
| 84 | + wp_verify_nonce(acym_getVar('cmd', '_wpnonce'), 'acymnonce') || die('Invalid Token'); | |
| 85 | + | |
| 84 | 86 | $sendingMethod = acym_getVar('string', 'sendingMethod', ''); |
| 85 | 87 | |
| 86 | 88 | if (empty($sendingMethod)) { |
| 87 | 89 | acym_sendAjaxResponse(acym_translation('ACYM_COULD_NOT_FIND_SENDING_METHOD'), [], false); |
| @@ -128,10 +130,13 @@ | ||
| 128 | 130 | } |
| 129 | 131 | |
| 130 | 132 | acym_createArchive($filename, $zipFiles); |
| 131 | 133 | |
| 132 | - if (ACYM_CMS === 'wordpress') @ob_get_clean(); | |
| 134 | + if (ob_get_level()) { | |
| 135 | + ob_end_clean(); | |
| 136 | + } | |
| 133 | 137 | $exportHelper->setDownloadHeaders($filenameToSearch, 'zip'); |
| 138 | + // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_readfile -- Downloading a file, better than WP functions for memory handling. | |
| 134 | 139 | readfile($filename.'.zip'); |
| 135 | 140 | acym_deleteFile($filename.'.zip'); |
| 136 | 141 | |
| 137 | 142 | exit; |
| @@ -148,8 +153,10 @@ | ||
| 148 | 153 | } |
| 149 | 154 | |
| 150 | 155 | public function logoutForOAuth2Smtp(): void |
| 151 | 156 | { |
| 157 | + wp_verify_nonce(acym_getVar('cmd', '_wpnonce'), 'acymnonce') || die('Invalid Token'); | |
| 158 | + | |
| 152 | 159 | acym_trigger('onAcymOauthRevoke'); |
| 153 | 160 | |
| 154 | 161 | $this->listing(); |
| 155 | 162 | } |
| @@ -155,8 +162,10 @@ | ||
| 155 | 162 | } |
| 156 | 163 | |
| 157 | 164 | public function logoutForOAuth2Bounce(): void |
| 158 | 165 | { |
| 166 | + wp_verify_nonce(acym_getVar('cmd', '_wpnonce'), 'acymnonce') || die('Invalid Token'); | |
| 167 | + | |
| 159 | 168 | $this->config->saveConfig( |
| 160 | 169 | [ |
| 161 | 170 | 'bounce_refresh_token' => '', |
| 162 | 171 | 'bounce_refresh_token_expiration' => '', |
