diff options
| -rw-r--r-- | views/mods/mod_statistics/produkt_edit_sidebar.phtml | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/views/mods/mod_statistics/produkt_edit_sidebar.phtml b/views/mods/mod_statistics/produkt_edit_sidebar.phtml index b41d240..e7c7d7c 100644 --- a/views/mods/mod_statistics/produkt_edit_sidebar.phtml +++ b/views/mods/mod_statistics/produkt_edit_sidebar.phtml @@ -99,7 +99,8 @@ jQuery.ajax( {
url: '<?php echo $this->getUrl(wpsg_ShopController::URL_BASKET, 'wpsg_mod_statistics', 'aktualisieren'); ?>',
data: {
- 'edit_id': <?php echo $_REQUEST['edit_id']?>,
+ 'edit_id': <?php echo intval($_REQUEST['edit_id']); ?>,
+ 'wpsg_nonce': '<?php echo esc_js(wp_create_nonce('wpsg-mod-statistics')); ?>',
'von': jQuery('#st_von').val(),
'bis': jQuery('#st_bis').val(),
},
@@ -114,7 +115,8 @@ jQuery('#st_export').bind('click', function(){
location.href = '<?php echo $this->getUrl(wpsg_ShopController::URL_BASKET, 'wpsg_mod_statistics', 'export', array(
- 'edit_id' => $_REQUEST['edit_id']
+ 'edit_id' => intval($_REQUEST['edit_id']),
+ 'wpsg_nonce' => wp_create_nonce('wpsg-mod-statistics')
)); ?>&von=' + jQuery('#st_von').val() + '&bis=' + jQuery('#st_bis').val();
});
|