← All changes | admin/snippet-delete.php +5 -5 1.2.1 → trunk View file →

		@@ -5,24 +5,24 @@
5	5	$_POST = stripslashes_deep($_POST);
6	6	$_GET = stripslashes_deep($_GET);
7	7	$xyz_ihs_snippetId = intval($_GET['snippetId']);
8	8	$xyz_ihs_pageno = intval($_GET['pageno']);
9		-if (! isset( $_REQUEST['_wpnonce'] ) || ! wp_verify_nonce( $_REQUEST['_wpnonce'], 'snipp-del_'.$xyz_ihs_snippetId )) {
10		- wp_nonce_ays( 'snipp-del_'.$xyz_ihs_snippetId );
	9	+if (! isset( $_REQUEST['_wpnonce'] ) || ! wp_verify_nonce( $_REQUEST['_wpnonce'], 'ihs-del_'.$xyz_ihs_snippetId )) {
	10	+ wp_nonce_ays( 'ihs-del_'.$xyz_ihs_snippetId );
11	11	exit;
12	12	}
13	13	else {
14	14	if($xyz_ihs_snippetId=="" || !is_numeric($xyz_ihs_snippetId)){
15		- header("Location:".admin_url('admin.php?page=insert-html-snippet-manage'));
	15	+ wp_safe_redirect(admin_url('admin.php?page=insert-html-snippet-manage'));
16	16	exit();
17	17	}
18	18	$snippetCount = $wpdb->query($wpdb->prepare( 'SELECT * FROM '.$wpdb->prefix.'xyz_ihs_short_code WHERE id=%d LIMIT 0,1',$xyz_ihs_snippetId )) ;
19	19	if($snippetCount==0){
20		- header("Location:".admin_url('admin.php?page=insert-html-snippet-manage&xyz_ihs_msg=2'));
	20	+ wp_safe_redirect(admin_url('admin.php?page=insert-html-snippet-manage&xyz_ihs_msg=2'));
21	21	exit();
22	22	}else{
23	23	$wpdb->query($wpdb->prepare( 'DELETE FROM '.$wpdb->prefix.'xyz_ihs_short_code WHERE id=%d',$xyz_ihs_snippetId)) ;
24		- header("Location:".admin_url('admin.php?page=insert-html-snippet-manage&xyz_ihs_msg=3&pagenum='.$xyz_ihs_pageno));
	24	+ wp_safe_redirect(admin_url('admin.php?page=insert-html-snippet-manage&xyz_ihs_msg=3&pagenum='.$xyz_ihs_pageno));
25	25	exit();
26	26	}
27	27	}
28	28	?>