← All changes | admin/snippet-delete.php +22 -17 1.2 → trunk View file →

		@@ -1,28 +1,33 @@
1	1	<?php
	2	+if ( ! defined( 'ABSPATH' ) )
	3	+ exit;
	4	+
2	5	global $wpdb;
3		-
4	6	$_POST = stripslashes_deep($_POST);
5	7	$_GET = stripslashes_deep($_GET);
6		-
7	8	$xyz_ips_snippetId = intval($_GET['snippetId']);
8	9	$xyz_ips_pageno = intval($_GET['pageno']);
9	10
10		-if($xyz_ips_snippetId=="" || !is_numeric($xyz_ips_snippetId)){
11		- header("Location:".admin_url('admin.php?page=insert-php-code-snippet-manage'));
12		- exit();
	11	+if(! isset( $_REQUEST['_wpnonce'] ) || ! wp_verify_nonce( $_REQUEST['_wpnonce'], 'ips-pdel_'.$xyz_ips_snippetId )) {
	12	+ wp_nonce_ays( 'ips-pdel_'.$xyz_ips_snippetId );
	13	+ exit;
	14	+}
	15	+else{
	16	+ if($xyz_ips_snippetId=="" || !is_numeric($xyz_ips_snippetId)){
	17	+ wp_safe_redirect(admin_url('admin.php?page=insert-php-code-snippet-manage'));
	18	+ exit();
	19	+ }
13	20
14		-}
15		-$snippetCount = $wpdb->query($wpdb->prepare( 'SELECT * FROM '.$wpdb->prefix.'xyz_ips_short_code WHERE id=%d LIMIT 0,1',$xyz_ips_snippetId )) ;
	21	+ $snippetCount = $wpdb->query($wpdb->prepare( 'SELECT * FROM '.$wpdb->prefix.'xyz_ips_short_code WHERE id=%d LIMIT 0,1',$xyz_ips_snippetId )) ;
16	22
17		-if($snippetCount==0){
18		- header("Location:".admin_url('admin.php?page=insert-php-code-snippet-manage&xyz_ips_msg=2'));
19		- exit();
20		-}else{
21		-
22		- $wpdb->query($wpdb->prepare( 'DELETE FROM '.$wpdb->prefix.'xyz_ips_short_code WHERE id=%d',$xyz_ips_snippetId)) ;
23		-
24		- header("Location:".admin_url('admin.php?page=insert-php-code-snippet-manage&xyz_ips_msg=3&pagenum='.$xyz_ips_pageno));
25		- exit();
26		-
	23	+ if($snippetCount==0){
	24	+ wp_safe_redirect(admin_url('admin.php?page=insert-php-code-snippet-manage&xyz_ips_msg=2'));
	25	+ exit();
	26	+ }
	27	+ else{
	28	+ $wpdb->query($wpdb->prepare( 'DELETE FROM '.$wpdb->prefix.'xyz_ips_short_code WHERE id=%d',$xyz_ips_snippetId)) ;
	29	+ wp_safe_redirect(admin_url('admin.php?page=insert-php-code-snippet-manage&xyz_ips_msg=3&pagenum='.$xyz_ips_pageno));
	30	+ exit();
	31	+ }
27	32	}
28	33	?>