From 0bde306bb2609cd6d4effabbcf5a8a6b66a99f11 Mon Sep 17 00:00:00 2001
From: Daniel Schmitzer <noreply@maennchen1.de>
Date: Tue, 29 Oct 2019 15:05:47 +0000
Subject: - Bugfix: Verlinkung im Backend zum Produkt mit Nounce geschützt
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

git-svn-id: https://[internal]/wordpress/plugins/wpsg4@7590 0d5edaf7-2b12-4e95-93f4-047927463d4b
---
 views/order/product_table.phtml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'views')

diff --git a/views/order/product_table.phtml b/views/order/product_table.phtml
index 0eb1666..fb98ba4 100644
--- a/views/order/product_table.phtml
+++ b/views/order/product_table.phtml
@@ -57,7 +57,11 @@
 						<img src="<?php echo WPSG_URL; ?>views/gfx/eu.png" alt="<?php echo __('Produkt unterliegt der EU-Leistungsortregel', 'wpsg'); ?>" title="<?php echo __('Produkt unterliegt der EU-Leistungsortregel', 'wpsg'); ?>" height="14" />
 					<?php } ?>
 					
-					<a href="<?php echo WPSG_URL_WP; ?>wp-admin/admin.php?page=wpsg-Produkt&action=edit&edit_id=<?php echo $p['product_id']; ?>" title="<?php echo __('Zum Produkt', 'wpsg'); ?>">
+					<a href="<?php 
+						
+						echo wp_nonce_url(WPSG_URL_WP.'wp-admin/admin.php?page=wpsg-Produkt&action=edit&edit_id='.$p['product_id'], 'wpsg-product-edit-'.wpsg_getInt($p['product_id']));						
+						                
+					?>" title="<?php echo __('Zum Produkt', 'wpsg'); ?>">
 						<?php echo wpsg_hspc($this->getProductName($p['product_id'])); ?>
 					</a>
 					<a href="#" class="wpsg-glyphlink-td" title="<?php echo __('Produkt bearbeiten', 'wpsg'); ?>" onclick="return WPSG_BE_Product.editProduct(<?php echo $p['order_product_id']; ?>);"><span class="glyphicon glyphicon-pencil"></span></a>
-- 
cgit v1.2.3