PluginProbe
JetFormBuilder — Dynamic Blocks Form Builder / 3.6.6
JetFormBuilder — Dynamic Blocks Form Builder v3.6.6
3.6.6.1 3.6.6 3.6.5.4 3.6.5.3 3.6.5.2 3.6.5.1 3.6.5 3.6.4.2 3.6.4.1 3.6.4 3.6.3.1 3.6.3 3.6.2.2 3.6.2.1 3.6.2 3.6.1.1 3.6.1 3.6.0.1 trunk 1.0.0 1.0.1 1.0.2 1.0.3 1.1.0 1.1.1 All 134 releases
← All changes | modules/security/wp-nonce/module.php +8 -1 3.6.1 → 3.6.6 View file →
@@ -77,9 +77,16 @@
77 77 return self::NONCE_ACTION_PREF . $form_id;
78 78 }
79 79
80 80 public function get_nonce_field(): string {
81 - return wp_nonce_field( $this->get_nonce_id(), self::KEY, true, false );
81 + $form_id = jet_fb_live()->form_id;
82 + $field_id = self::KEY . '_' . $form_id;
83 + return sprintf(
84 + '<input type="hidden" id="%1$s" name="%2$s" value="%3$s" />',
85 + esc_attr( $field_id ),
86 + esc_attr( self::KEY ),
87 + esc_attr( wp_create_nonce( $this->get_nonce_id() ) )
88 + ) . wp_referer_field( false );
82 89 }
83 90
84 91 public function verify( $nonce ): bool {
85 92 return ( ! jet_fb_live_args()->is_use_nonce() || wp_verify_nonce( $nonce, $this->get_nonce_id() ) );