| @@ -1,16 +1,10 @@ | ||
| 1 | 1 | <?php |
| 2 | -if ( ! defined( 'ABSPATH' ) ) exit; | |
| 3 | 2 | function tcmp_ui_track() { |
| 4 | 3 | global $tcmp; |
| 5 | 4 | |
| 6 | 5 | $track = tcmp_sqs( 'track', '' ); |
| 7 | 6 | if ( '' != $track ) { |
| 8 | - // This GET toggle changes a setting AND triggers an outbound telemetry | |
| 9 | - // transmission, so it must be protected against CSRF with a nonce (F-02). | |
| 10 | - if ( ! $tcmp->check->nonce( 'tcmp_track' ) ) { | |
| 11 | - wp_die( esc_html( $tcmp->lang->L( 'Invalid nonce' ) ) ); | |
| 12 | - } | |
| 13 | 7 | $track = intval( $track ); |
| 14 | 8 | $tcmp->options->setTrackingEnable( $track ); |
| 15 | 9 | $tcmp->tracking->sendTracking( true ); |
| 16 | 10 | } |
| @@ -17,13 +11,11 @@ | ||
| 17 | 11 | |
| 18 | 12 | $uri = TCMP_TAB_SETTINGS_URI . '&track='; |
| 19 | 13 | if ( $tcmp->options->isTrackingEnable() ) { |
| 20 | 14 | $uri .= '0'; |
| 21 | - $uri = wp_nonce_url( $uri, 'tcmp_track' ); | |
| 22 | 15 | $tcmp->options->pushSuccessMessage( 'EnableAllowTrackingNotice', $uri ); |
| 23 | 16 | } else { |
| 24 | 17 | $uri .= '1'; |
| 25 | - $uri = wp_nonce_url( $uri, 'tcmp_track' ); | |
| 26 | 18 | $tcmp->options->pushErrorMessage( 'DisableAllowTrackingNotice', $uri ); |
| 27 | 19 | } |
| 28 | 20 | $tcmp->options->writeMessages(); |
| 29 | 21 | } |
