← All changes | includes/admin/emails/ajax-handler.php +3 -0 2.30.0 → 4.16.9 View file →

		@@ -13,10 +13,13 @@
13	13	/**
14	14	* Enabled & disable notification
15	15	*
16	16	* @since 2.0
	17	+ * @since 4.15.4 Add nonce verification.
17	18	*/
18	19	function give_set_notification_status_handler() {
	20	+ check_ajax_referer( 'give_set_notification_status', '_ajax_nonce' );
	21	+
19	22	// Is user have permission to edit give setting.
20	23	if ( ! current_user_can( 'manage_give_settings' ) ) {
21	24	return;
22	25	}