Steve-Dee-Designs
/
woocommerce
mirror of https://github.com/woocommerce/woocommerce.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Nonce field in admin, more query changes

This commit is contained in:
Mike Jolley 2011-08-31 14:40:02 +01:00
parent 9d144cdedb
commit ae0482bf9b
2 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
admin/admin-settings.php
View File

@ -544,6 +544,10 @@ $options_settings = apply_filters('woocommerce_options_settings', array(
*/
function woocommerce_update_options($options) {
if(isset($_POST['submitted']) && $_POST['submitted'] == 'yes') {
$nonce = $_REQUEST['_wpnonce'];
if (!wp_verify_nonce($nonce, 'woocommerce-settings') ) die( __('Action failed. Please refresh the page and retry.', 'woothemes') );
foreach ($options as $value) {
if (isset($value['id']) && $value['id']=='woocommerce_tax_rates') :
@ -645,7 +649,7 @@ function woocommerce_update_options($options) {
do_action('woocommerce_update_options');
echo '<div id="message" class="updated fade"><p><strong>'.__('Your settings have been saved.', 'woothemes').'</strong></p></div>';
wp_redirect( add_query_arg('saved', 'true', admin_url('admin.php?page=woocommerce') ));
}
}
@ -1004,9 +1008,11 @@ function woocommerce_admin_fields($options) {
function woocommerce_settings() {
global $options_settings;
woocommerce_update_options( $options_settings );
if (isset($_GET['saved']) && $_GET['saved']) echo '<div id="message" class="updated fade"><p><strong>'.__('Your settings have been saved.', 'woothemes').'</strong></p></div>';
?>
<div class="wrap woocommerce">
<form method="post" id="mainform" action="">
<?php wp_nonce_field('woocommerce-settings', '_wpnonce', true, true); ?>
<?php woocommerce_admin_fields($options_settings); ?>
<input name="submitted" type="hidden" value="yes" />
</form>

1
woocommerce_query.php
View File

@ -109,6 +109,7 @@ function woocommerce_get_products_in_view() {
'post_type' => 'product',
'numberposts' => -1,
'post_status' => 'publish',
'meta_query' => $woocommerce_query['meta_query']
)
)
);