| @@ -14,8 +14,16 @@ | ||
| 14 | 14 | * @since 1.1.0 |
| 15 | 15 | */ |
| 16 | 16 | class Upsell { |
| 17 | 17 | /** |
| 18 | + * Current funnel. | |
| 19 | + * | |
| 20 | + * @since 1.8.6 | |
| 21 | + * @var Sellkit_Funnel | |
| 22 | + */ | |
| 23 | + public $funnel; | |
| 24 | + | |
| 25 | + /** | |
| 18 | 26 | * Upsell constructor. |
| 19 | 27 | * |
| 20 | 28 | * @since 1.1.0 |
| 21 | 29 | */ |
| @@ -32,8 +40,10 @@ | ||
| 32 | 40 | * @since 1.1.0 |
| 33 | 41 | * @SuppressWarnings(PHPMD.NPathComplexity) |
| 34 | 42 | */ |
| 35 | 43 | public function upsell_handler() { |
| 44 | + check_ajax_referer( 'sellkit_elementor', 'nonce' ); | |
| 45 | + | |
| 36 | 46 | $order_key = sellkit_htmlspecialchars( INPUT_POST, 'order_key' ); |
| 37 | 47 | $offer_type = sellkit_htmlspecialchars( INPUT_POST, 'offer_type' ); |
| 38 | 48 | |
| 39 | 49 | if ( empty( $order_key ) ) { |
