Steve-Dee-Designs
/
woocommerce
mirror of https://github.com/woocommerce/woocommerce.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Propper verify nonce use on edit account.

This commit is contained in:
Gerhard 2014-10-21 08:53:54 +02:00
parent 817e23a807
commit a08b501ebc
1 changed files with 1 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
includes/class-wc-form-handler.php
View File

@ -141,11 +141,7 @@ class WC_Form_Handler {
return; return;
} }
if ( empty( $_POST[ 'action' ] ) || ( 'save_account_details' !== $_POST[ 'action' ] ) || empty( $_POST['_wpnonce'] ) ) { if ( empty( $_POST[ 'action' ] ) || ( 'save_account_details' !== $_POST[ 'action' ] ) || empty( $_POST['_wpnonce'] ) && wp_verify_nonce( $_POST['_wpnonce'], 'save_account_details' ) ) {
return;
}
if ( ! wp_verify_nonce( $_POST['_wpnonce'], 'save_account_details' ) ) {
return; return;
} }