← All changes | back/Controllers/Scenarios/Listing.php +7 -6 10.11.1 → 11.1.0 View file →

		@@ -12,10 +12,10 @@
12	12	{
13	13	if (!acym_level(ACYM_ENTERPRISE)) {
14	14	acym_redirect(acym_completeLink('dashboard&task=upgrade&version=enterprise', false, true));
15	15	}
16		- $ordering = $this->getVarFiltersListing('string', 'scenario_ordering', 'ordering');
17		- $orderingSortOrder = $this->getVarFiltersListing('string', 'scenario_ordering_sort_order', 'asc');
	16	+ $ordering = $this->getVarFiltersListing('cmd', 'scenario_ordering', 'ordering');
	17	+ $orderingSortOrder = $this->getVarFiltersListing('cmd', 'scenario_ordering_sort_order', 'asc');
18	18
19	19	acym_setVar('layout', 'listing');
20	20
21	21	$data = [
		@@ -34,15 +34,16 @@
34	34	private function prepareListingFilters(array &$data): void
35	35	{
36	36	$data['search'] = $this->getVarFiltersListing('string', 'scenario_search', '');
37	37	$data['status'] = $this->getVarFiltersListing('string', 'scenarios_status', '');
38		- $data['ordering'] = $this->getVarFiltersListing('string', 'scenarios_ordering', 'id');
39		- $data['ordering_sort_order'] = $this->getVarFiltersListing('string', 'scenarios_ordering_sort_order', 'asc');
	38	+ $data['ordering'] = $this->getVarFiltersListing('cmd', 'scenarios_ordering', 'id');
	39	+ $data['ordering_sort_order'] = $this->getVarFiltersListing('cmd', 'scenarios_ordering_sort_order', 'asc');
40	40	$data['page'] = $this->getVarFiltersListing('int', 'scenarios_pagination_page', 1);
41	41	}
42	42
43	43	private function prepareListingElements(array &$data): void
44	44	{
	45	+ // Prepare the pagination
45	46	$scenarioPerPage = $data['pagination']->getListLimit();
46	47
47	48	$matchingScenarios = $this->getMatchingElementsFromData(
48	49	[
		@@ -73,9 +74,9 @@
73	74	}
74	75
75	76	public function duplicate(): void
76	77	{
77		- acym_checkToken();
	78	+ wp_verify_nonce(acym_getVar('cmd', '_wpnonce'), 'acymnonce') || die('Invalid Token');
78	79
79	80	$scenarioIds = acym_getVar('array', 'elements_checked', []);
80	81
81	82	acym_arrayToInteger($scenarioIds);
		@@ -94,9 +95,9 @@
94	95	}
95	96
96	97	public function ajaxSetOrdering(): void
97	98	{
98		- acym_checkToken();
	99	+ wp_verify_nonce(acym_getVar('cmd', '_wpnonce'), 'acymnonce') || die('Invalid Token');
99	100
100	101	$order = json_decode(acym_getVar('string', 'order', '[]'), true);
101	102
102	103	$error = false;