| @@ -36,9 +36,8 @@ | ||
| 36 | 36 | ]; |
| 37 | 37 | |
| 38 | 38 | public function __construct() |
| 39 | 39 | { |
| 40 | - add_action('wp_ajax_nopriv_logtivity_dismiss_notice', [$this, 'dismiss']); | |
| 41 | 40 | add_action('wp_ajax_logtivity_dismiss_notice', [$this, 'dismiss']); |
| 42 | 41 | } |
| 43 | 42 | |
| 44 | 43 | /** |
| @@ -53,8 +52,10 @@ | ||
| 53 | 52 | * @return void |
| 54 | 53 | */ |
| 55 | 54 | public function dismiss(): void |
| 56 | 55 | { |
| 56 | + check_ajax_referer('logtivity_dismiss_notice'); | |
| 57 | + | |
| 57 | 58 | if (!current_user_can(Logtivity::ACCESS_SETTINGS)) { |
| 58 | 59 | wp_die(__('You do not have sufficient permissions to access this page.')); |
| 59 | 60 | } |
| 60 | 61 | |