From 323568cb1a4d1acad9cbf381d0172ce114dabdaf Mon Sep 17 00:00:00 2001
From: Daniel Schmitzer <noreply@maennchen1.de>
Date: Mon, 9 Sep 2019 08:35:33 +0000
Subject: - Adminbereich genounced

git-svn-id: https://[internal]/wordpress/plugins/wpsg4@7560 0d5edaf7-2b12-4e95-93f4-047927463d4b
---
 views/admin/versandzonen.phtml | 38 ++++++++++++++++++++++++++------------
 1 file changed, 26 insertions(+), 12 deletions(-)

(limited to 'views/admin/versandzonen.phtml')

diff --git a/views/admin/versandzonen.phtml b/views/admin/versandzonen.phtml
index f823780..809e98a 100644
--- a/views/admin/versandzonen.phtml
+++ b/views/admin/versandzonen.phtml
@@ -31,7 +31,7 @@
 	
 </div>
 
-<script type="text/javascript">/* <![CDATA[ */
+<script>
 
 	/**
 	 * Wird aufgerufen um einen neuen Satz hinzu zufügen und die Liste neu zu laden.
@@ -42,7 +42,11 @@
 		jQuery('#wpsg_vz_list').html('<img src="<?php echo WPSG_URL; ?>views/gfx/ajax-loader.gif" alt="<?php echo __('Bitte warten ...', 'wpsg'); ?>" /><br />');
 		
 		jQuery.ajax( {
-			url: '<?php echo WPSG_URL_WP; ?>wp-admin/admin.php?page=wpsg-Admin&subaction=vz&do=add&noheader=1',
+			url: '<?php 
+				
+				echo html_entity_decode(wp_nonce_url(WPSG_URL_WP.'wp-admin/admin.php?page=wpsg-Admin&subaction=vz&do=add&noheader=1', 'wpsg-admin-versandzonen-add'));
+				
+			?>',
 			success: function(data) {
 				jQuery('#wpsg_vz_list').html(data);
 			}
@@ -63,7 +67,11 @@
 		jQuery('#wpsg_vz_list').html('<img src="<?php echo WPSG_URL; ?>views/gfx/ajax-loader.gif" alt="<?php echo __('Bitte warten ...', 'wpsg'); ?>" /><br />');
 		
 		jQuery.ajax( {
-			url: '<?php echo WPSG_URL_WP; ?>wp-admin/admin.php?page=wpsg-Admin&subaction=vz&do=remove&noheader=1',
+			url: '<?php 
+				
+				echo html_entity_decode(wp_nonce_url(WPSG_URL_WP.'wp-admin/admin.php?page=wpsg-Admin&subaction=vz&do=remove&noheader=1', 'wpsg-admin-versandzonen-delete'));
+				
+			?>',
 			data: {
 				vz_id: vz_id
 			},
@@ -76,18 +84,21 @@
 		
 	} // function wpsg_removeVZ(vz_id)
 
-	function wpsg_editPLZ(vz_id)
-	{
+	function wpsg_editPLZ(vz_id) {
+		
 		jQuery('#vz_' + vz_id + '_plz').attr('style', 'display:display');
 
 		return false;
 	}
 
-	function wpsg_savePLZ(vz_id)
-	{
+	function wpsg_savePLZ(vz_id) {
 	
 		jQuery.ajax( {
-			url: '<?php echo WPSG_URL_WP; ?>wp-admin/admin.php?page=wpsg-Admin&subaction=vz&do=save_plz&noheader=1',
+			url: '<?php 
+				
+				echo html_entity_decode(wp_nonce_url(WPSG_URL_WP.'wp-admin/admin.php?page=wpsg-Admin&subaction=vz&do=save_plz&noheader=1', 'wpsg-admin-versandzonen-save_plz'));
+				
+			?>',
 			data: {
 				vz_id: vz_id,
 				textarea: jQuery('#vz_' + vz_id + '_plz textarea').val()
@@ -101,15 +112,18 @@
 		
 	}
 
-	function wpsg_loadStandard()
-	{
+	function wpsg_loadStandard() {
 
 		if (!confirm('<?php echo __('Sind Sie sich sicher, dass sie die Standard Versandzonen und Länder laden möchten? Die alten Versandzonen und Länder gehen verloren.', 'wpsg'); ?>')) return false;
 		
 		jQuery('#wpsg_vz_list').html('<img src="<?php echo WPSG_URL; ?>views/gfx/ajax-loader.gif" alt="<?php echo __('Bitte warten ...', 'wpsg'); ?>" />');
 
 		jQuery.ajax( {
-			url: '<?php echo WPSG_URL_WP; ?>wp-admin/admin.php?page=wpsg-Admin&subaction=vz&do=loadStandard&noheader=1',
+			url: '<?php 
+				
+				echo html_entity_decode(wp_nonce_url(WPSG_URL_WP.'wp-admin/admin.php?page=wpsg-Admin&subaction=vz&do=loadStandard&noheader=1', 'wpsg-admin-versandzonen-loadStandard'));
+			
+			?>',
 			success: function(data) {
 				jQuery('#wpsg_vz_list').html(data);
 			}
@@ -119,4 +133,4 @@
 		
 	} // function wpsg_loadStandard()
 	
-/* ]]> */</script>
\ No newline at end of file
+</script>
\ No newline at end of file
-- 
cgit v1.2.3