diff options
| author | Daniel Schmitzer <noreply@maennchen1.de> | 2019-09-03 13:31:41 +0000 |
|---|---|---|
| committer | Daniel Schmitzer <noreply@maennchen1.de> | 2019-09-03 13:31:41 +0000 |
| commit | ad2d000e45434161125ac0c5753c92f9bf27771f (patch) | |
| tree | 0ecb8190d10cc3531597b84fc33e9932789705bf /views | |
| parent | eeae41e51d6f653bbef7086ef339a11bb4764835 (diff) | |
- Seite Berechtigung durch Nounce schützen
git-svn-id: https://[internal]/wordpress/plugins/wpsg4@7535 0d5edaf7-2b12-4e95-93f4-047927463d4b
Diffstat (limited to 'views')
| -rw-r--r-- | views/admin/access.phtml | 4 | ||||
| -rw-r--r-- | views/admin/widerrufsbelehrung.phtml | 2 |
2 files changed, 4 insertions, 2 deletions
diff --git a/views/admin/access.phtml b/views/admin/access.phtml index f330572..3cdf383 100644 --- a/views/admin/access.phtml +++ b/views/admin/access.phtml @@ -18,7 +18,9 @@ <div class="wpsg_admin_content form-horizontal">
<form name="form1" method="post" enctype="multipart/form-data" action="<?php echo wpsg_hspc(WPSG_URL_WP.'wp-admin/admin.php?page=wpsg-Admin&subaction='.$_REQUEST['subaction'].'&noheader=1'); ?>">
-
+
+ <?php \wp_nonce_field('wpsg-save-admin-access'); ?>
+
<?php global $wpdb; $arRoles = get_option($wpdb->prefix."user_roles"); ?>
<div class="panel panel-default">
diff --git a/views/admin/widerrufsbelehrung.phtml b/views/admin/widerrufsbelehrung.phtml index 66a3c3c..b7765d4 100644 --- a/views/admin/widerrufsbelehrung.phtml +++ b/views/admin/widerrufsbelehrung.phtml @@ -19,7 +19,7 @@ <div class="wpsg_admin_content form-horizontal">
<form name="form1" method="post" enctype="multipart/form-data" action="<?php echo WPSG_URL_WP; ?>wp-admin/admin.php?page=wpsg-Admin&subaction=<?php echo $_REQUEST['subaction']; ?>&noheader=1">
- <?php wp_nonce_field('wpsg-save-revocation'); ?>
+ <?php \wp_nonce_field('wpsg-save-revocation'); ?>
<?php echo wpsg_drawForm_AdminboxStart(__('Widerruf', 'wpsg')); ?>
|