| @@ -134,9 +134,9 @@ | ||
| 134 | 134 | </a> |
| 135 | 135 | </div> |
| 136 | 136 | <?php if (KING_ADDONS_EXT_HEADER_FOOTER_BUILDER): ?> |
| 137 | 137 | <div class="kng-nav-item kng-nav-item-current"> |
| 138 | - <a href="<?php echo admin_url('edit.php?post_type=king-addons-el-hf'); ?>"> | |
| 138 | + <a href="<?php echo admin_url('admin.php?page=king-addons-el-hf'); ?>"> | |
| 139 | 139 | <div class="kng-nav-item-txt"><?php echo esc_html__('Free Header & Footer Builder', 'king-addons'); ?></div> |
| 140 | 140 | </a> |
| 141 | 141 | </div> |
| 142 | 142 | <?php endif; ?> |
| @@ -767,8 +767,13 @@ | ||
| 767 | 767 | |
| 768 | 768 | // Check if this is for existing page (from popup import) |
| 769 | 769 | $existing_page_id = isset($import_data['existing_page_id']) ? intval($import_data['existing_page_id']) : 0; |
| 770 | 770 | $create_new_page = isset($import_data['create_new_page']) ? (bool)$import_data['create_new_page'] : true; |
| 771 | + | |
| 772 | + if ($existing_page_id && !current_user_can('edit_post', $existing_page_id)) { | |
| 773 | + wp_send_json_error('Insufficient permissions'); | |
| 774 | + return; | |
| 775 | + } | |
| 771 | 776 | |
| 772 | 777 | delete_transient('elementor_import_content'); |
| 773 | 778 | delete_transient('elementor_import_images'); |
| 774 | 779 | delete_transient('elementor_import_total_images'); |