| @@ -223,8 +223,9 @@ | ||
| 223 | 223 | |
| 224 | 224 | /** |
| 225 | 225 | * Process Register Form |
| 226 | 226 | * |
| 227 | + * @since 4.16.6 Require a valid nonce before processing registration. | |
| 227 | 228 | * @since 2.0 |
| 228 | 229 | * |
| 229 | 230 | * @param array $data Data sent from the register form |
| 230 | 231 | * |
| @@ -236,8 +237,12 @@ | ||
| 236 | 237 | return false; |
| 237 | 238 | } |
| 238 | 239 | |
| 239 | 240 | if ( empty( $_POST['give_register_submit'] ) ) { |
| 241 | + return false; | |
| 242 | + } | |
| 243 | + | |
| 244 | + if ( empty( $data['give_register_nonce'] ) || ! wp_verify_nonce( $data['give_register_nonce'], 'give-register-nonce' ) ) { | |
| 240 | 245 | return false; |
| 241 | 246 | } |
| 242 | 247 | |
| 243 | 248 | /** |
