diff options
| author | Daniel Schmitzer <noreply@maennchen1.de> | 2019-09-03 13:43:04 +0000 |
|---|---|---|
| committer | Daniel Schmitzer <noreply@maennchen1.de> | 2019-09-03 13:43:04 +0000 |
| commit | 85629abafd59d7012ec6ea75247c2a5e82c0359e (patch) | |
| tree | 40f4b747ea4dbf1b2a76f5ef90bddf75fc5db0ee /views/admin | |
| parent | 262191a0da2bb1fab00955626b9835addc311ef9 (diff) | |
- Nounce für Einstellungen sichern
git-svn-id: https://[internal]/wordpress/plugins/wpsg4@7539 0d5edaf7-2b12-4e95-93f4-047927463d4b
Diffstat (limited to 'views/admin')
| -rw-r--r-- | views/admin/loadsavesettings.phtml | 16 |
1 files changed, 13 insertions, 3 deletions
diff --git a/views/admin/loadsavesettings.phtml b/views/admin/loadsavesettings.phtml index ede5ee5..93e7219 100644 --- a/views/admin/loadsavesettings.phtml +++ b/views/admin/loadsavesettings.phtml @@ -10,7 +10,11 @@ <div class="list-group">
<span class="list-group-head list-group-item"><?php echo __('Konfiguration'); ?></span>
<?php foreach ($this->view['arSubAction'] as $k => $v) { ?>
- <a class="list-group-item <?php echo (($k == $this->view['subAction'])?'active':''); ?>" href="<?php echo WPSG_URL_WP; ?>wp-admin/admin.php?page=wpsg-Admin&subaction=<?php echo $k; ?>"><?php echo $v['Menutext']; ?></a>
+ <a class="list-group-item <?php echo (($k == $this->view['subAction'])?'active':''); ?>" href="<?php
+
+ echo WPSG_URL_WP; ?>wp-admin/admin.php?page=wpsg-Admin&subaction=<?php echo $k;
+
+ ?>"><?php echo $v['Menutext']; ?></a>
<?php } ?>
</div>
@@ -18,7 +22,9 @@ <div class="wpsg_admin_content form-horizontal">
<form name="form1" method="post" enctype="multipart/form-data" action="<?php echo wpsg_hspc(WPSG_URL_WP.'wp-admin/admin.php?page=wpsg-Admin&subaction=loadsavesettings&noheader=1'); ?>">
-
+
+ <?php \wp_nonce_field('wpsg-save-admin-loadsavesettings'); ?>
+
<div class="panel panel-default">
<div class="panel-heading clearfix">
<h3 class="panel-title"><?php echo __('Einstellungen sichern', 'wpsg'); ?></h3>
@@ -26,7 +32,11 @@ <div class="panel-body">
<?php echo wpsg_drawForm_TextStart(); ?>
- <a href="<?php echo WPSG_URL_WP.'wp-admin/admin.php?page=wpsg-Admin&subaction=loadsavesettings&noheader=1&wpsg_do=downloadsettings&submit=1'; ?>" title="<?php echo __('Einstellungen als XML Datei downloaden', 'wpsg'); ?>"><?php echo __('Download', 'wpsg'); ?></a>
+ <a href="<?php
+
+ echo \wp_nonce_url(WPSG_URL_WP.'wp-admin/admin.php?page=wpsg-Admin&subaction=loadsavesettings&noheader=1&wpsg_do=downloadsettings&submit=1', 'wpsg-save-admin-loadsavesettings-download');
+
+ ?>" title="<?php echo __('Einstellungen als XML Datei downloaden', 'wpsg'); ?>"><?php echo __('Download', 'wpsg'); ?></a>
<?php echo wpsg_drawForm_TextEnd(__('Einstellungen speichern', 'wpsg')); ?>
<?php echo wpsg_drawForm_TextStart(); ?>
|