← All changes
|
src/Framework/Migrations/Controllers/ManualMigration.php
+5
-3
2.30.0
→
4.16.9
View file →
| @@ -6,8 +6,9 @@ | ||
| 6 | 6 | use Give\Framework\Migrations\Actions\ClearCompletedUpgrade; |
| 7 | 7 | use Give\Framework\Migrations\Actions\ManuallyRunMigration; |
| 8 | 8 | use Give\Framework\Migrations\Contracts\Migration; |
| 9 | 9 | use Give\Framework\Migrations\MigrationsRegister; |
| 10 | +use Give\Framework\Permissions\Facades\UserPermissions; | |
| 10 | 11 | |
| 11 | 12 | /** |
| 12 | 13 | * Class ManualMigration |
| 13 | 14 | * |
| @@ -35,23 +36,24 @@ | ||
| 35 | 36 | $this->migrationsRegister = $migrationsRegister; |
| 36 | 37 | } |
| 37 | 38 | |
| 38 | 39 | /** |
| 40 | + * @since 3.19.0 sanitize params | |
| 39 | 41 | * @since 2.9.2 |
| 40 | 42 | */ |
| 41 | 43 | public function __invoke() |
| 42 | 44 | { |
| 43 | 45 | if ( ! empty($_GET['give-run-migration'])) { |
| 44 | - $migrationToRun = $_GET['give-run-migration']; | |
| 46 | + $migrationToRun = give_clean($_GET['give-run-migration']); | |
| 45 | 47 | } |
| 46 | 48 | |
| 47 | 49 | if ( ! empty($_GET['give-clear-update'])) { |
| 48 | - $migrationToClear = $_GET['give-clear-update']; | |
| 50 | + $migrationToClear = give_clean($_GET['give-clear-update']); | |
| 49 | 51 | } |
| 50 | 52 | |
| 51 | 53 | $hasMigration = isset($migrationToRun) || isset($migrationToClear); |
| 52 | 54 | |
| 53 | - if ($hasMigration && ! current_user_can('manage_options')) { | |
| 55 | + if ($hasMigration && ! UserPermissions::settings()->canManage()) { | |
| 54 | 56 | give()->notices->register_notice( |
| 55 | 57 | [ |
| 56 | 58 | 'id' => 'invalid-migration-permissions', |
| 57 | 59 | 'description' => 'You do not have the permissions to manually run or clear migrations', |