| @@ -212,8 +212,9 @@ | ||
| 212 | 212 | } |
| 213 | 213 | |
| 214 | 214 | $wizard_action = HTTP::get( 'wizard_action' ); |
| 215 | 215 | $wizard_source = HTTP::get( 'source' ); |
| 216 | + $nonce = HTTP::get( '_wpnonce' ); | |
| 216 | 217 | |
| 217 | 218 | // Fallback completion marker for setup wizard integrations rendered on dashboard. |
| 218 | 219 | // This prevents onboarding loops if client-side completion request fails. |
| 219 | 220 | if ( |
| @@ -219,8 +220,10 @@ | ||
| 219 | 220 | if ( |
| 220 | 221 | 'setup_wizard' === $wizard_source |
| 221 | 222 | && in_array( $wizard_action, array( 'view_results', 'close_wizard', 'finish_wizard' ), true ) |
| 222 | 223 | && current_user_can( 'manage_options' ) |
| 224 | + && is_string( $nonce ) | |
| 225 | + && false !== wp_verify_nonce( $nonce, 'wpdef_setup_wizard' ) | |
| 223 | 226 | ) { |
| 224 | 227 | update_site_option( 'wp_defender_shown_activator', true ); |
| 225 | 228 | } |
| 226 | 229 | |
| @@ -292,9 +295,9 @@ | ||
| 292 | 295 | ); |
| 293 | 296 | |
| 294 | 297 | wp_enqueue_style( |
| 295 | 298 | $handle, |
| 296 | - WP_DEFENDER_BASE_URL . 'assets/css/showcase.css', | |
| 299 | + WP_DEFENDER_BASE_URL . 'assets/css/core-ui.css', | |
| 297 | 300 | array(), |
| 298 | 301 | DEFENDER_VERSION |
| 299 | 302 | ); |
| 300 | 303 | |
