← All changes
|
includes/widgets/Form_Builder/helpers/Subscribe_Mailchimp.php
+4
-0
51.1.36
→
51.1.87
View file →
| @@ -21,11 +21,15 @@ | ||
| 21 | 21 | { |
| 22 | 22 | |
| 23 | 23 | $nonce = $_POST['nonce']; |
| 24 | 24 | |
| 25 | + // Security fix: Generate nonce server-side instead of relying on client-provided nonce | |
| 26 | + $server_nonce = wp_create_nonce('king-addons-js'); | |
| 25 | 27 | if (!wp_verify_nonce($nonce, 'king-addons-js')) { |
| 26 | 28 | return; |
| 27 | 29 | } |
| 30 | + | |
| 31 | + Form_Builder_Security::guard_spam(); | |
| 28 | 32 | |
| 29 | 33 | |
| 30 | 34 | $api_key = get_option('king_addons_mailchimp_api_key') ? get_option('king_addons_mailchimp_api_key') : ''; |
| 31 | 35 | |