← All changes | includes/deactive/class-deactive.php +5 -1 5.0.32 → 5.1.1 View file →

		@@ -36,8 +36,11 @@
36	36	* @param string|null $type Optional. Unused for now.
37	37	* @return void
38	38	*/
39	39	public function send_plugin_data() {
	40	+ if ( ! check_ajax_referer( 'ultp_deactive_plugin', 'wpnonce', false ) ) {
	41	+ wp_die();
	42	+ }
40	43	DurbinClient::send( DurbinClient::DEACTIVATE_ACTION );
41	44	}
42	45
43	46	/**
		@@ -111,9 +114,9 @@
111	114	<label>
112	115	<input type="radio" <?php echo 0 == $key ? 'checked="checked"' : ''; ?> id="<?php echo esc_attr( $setting['id'] ); ?>" name="<?php echo esc_attr( $this->plugin_slug ); ?>" value="<?php echo esc_attr( $setting['text'] ); ?>">
113	116	<div class="ultp-reason-text"><?php echo esc_html( $setting['text'] ); ?></div>
114	117	<?php if ( isset( $setting['input'] ) && $setting['input'] ) { ?>
115		- <textarea placeholder="<?php echo esc_attr( $setting['placeholder'] ); ?>" class="ultp-reason-input <?php echo $key == 0 ? 'ultp-active' : ''; ?> <?php echo esc_html( $setting['id'] ); ?>"></textarea>
	118	+ <textarea placeholder="<?php echo esc_attr( $setting['placeholder'] ); ?>" class="ultp-reason-input <?php echo esc_attr( 0 == $key ? 'ultp-active' : '' ); ?> <?php echo esc_attr( $setting['id'] ); ?>"></textarea>
116	119	<?php } ?>
117	120	</label>
118	121	</li>
119	122	<?php } ?>
		@@ -355,8 +358,9 @@
355	358	url: '<?php echo esc_url( admin_url( 'admin-ajax.php' ) ); ?>',
356	359	type: 'POST',
357	360	data: {
358	361	action: 'ultp_deactive_plugin',
	362	+ wpnonce: '<?php echo esc_js( wp_create_nonce( 'ultp_deactive_plugin' ) ); ?>',
359	363	cause_id: $('#ultp-deactive-modal input[type=radio]:checked').attr('id'),
360	364	cause_title: $('#ultp-deactive-modal .ultp-modal-input input[type=radio]:checked').val(),
361	365	cause_details: $('#ultp-deactive-modal .ultp-reason-input.ultp-active').val()
362	366	},