From 85629abafd59d7012ec6ea75247c2a5e82c0359e Mon Sep 17 00:00:00 2001
From: Daniel Schmitzer <noreply@maennchen1.de>
Date: Tue, 3 Sep 2019 13:43:04 +0000
Subject: - Nounce für Einstellungen sichern
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

git-svn-id: https://[internal]/wordpress/plugins/wpsg4@7539 0d5edaf7-2b12-4e95-93f4-047927463d4b
---
 views/admin/loadsavesettings.phtml | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

(limited to 'views')

diff --git a/views/admin/loadsavesettings.phtml b/views/admin/loadsavesettings.phtml
index ede5ee5..93e7219 100644
--- a/views/admin/loadsavesettings.phtml
+++ b/views/admin/loadsavesettings.phtml
@@ -10,7 +10,11 @@
 	<div class="list-group">
 		<span class="list-group-head list-group-item"><?php echo __('Konfiguration'); ?></span>		
 		<?php foreach ($this->view['arSubAction'] as $k => $v) { ?>		 
-		<a class="list-group-item <?php echo (($k == $this->view['subAction'])?'active':''); ?>" href="<?php echo WPSG_URL_WP; ?>wp-admin/admin.php?page=wpsg-Admin&amp;subaction=<?php echo $k; ?>"><?php echo $v['Menutext']; ?></a>		
+		<a class="list-group-item <?php echo (($k == $this->view['subAction'])?'active':''); ?>" href="<?php 
+			 
+			echo WPSG_URL_WP; ?>wp-admin/admin.php?page=wpsg-Admin&amp;subaction=<?php echo $k; 
+			
+		?>"><?php echo $v['Menutext']; ?></a>		
 		<?php } ?>
 	</div> 
 			
@@ -18,7 +22,9 @@
 		
 <div class="wpsg_admin_content form-horizontal">
 	<form name="form1" method="post" enctype="multipart/form-data" action="<?php echo wpsg_hspc(WPSG_URL_WP.'wp-admin/admin.php?page=wpsg-Admin&subaction=loadsavesettings&noheader=1'); ?>">
-	
+		
+		<?php \wp_nonce_field('wpsg-save-admin-loadsavesettings'); ?>
+		
 		<div class="panel panel-default">
   			<div class="panel-heading clearfix">
           		<h3 class="panel-title"><?php echo __('Einstellungen sichern', 'wpsg'); ?></h3>
@@ -26,7 +32,11 @@
   			<div class="panel-body">
 	
 				<?php echo wpsg_drawForm_TextStart(); ?>
-				<a href="<?php echo WPSG_URL_WP.'wp-admin/admin.php?page=wpsg-Admin&subaction=loadsavesettings&noheader=1&wpsg_do=downloadsettings&submit=1'; ?>" title="<?php echo __('Einstellungen als XML Datei downloaden', 'wpsg'); ?>"><?php echo __('Download', 'wpsg'); ?></a>				
+				<a href="<?php 
+					
+					echo \wp_nonce_url(WPSG_URL_WP.'wp-admin/admin.php?page=wpsg-Admin&subaction=loadsavesettings&noheader=1&wpsg_do=downloadsettings&submit=1', 'wpsg-save-admin-loadsavesettings-download'); 
+					
+				?>" title="<?php echo __('Einstellungen als XML Datei downloaden', 'wpsg'); ?>"><?php echo __('Download', 'wpsg'); ?></a>				
 				<?php echo wpsg_drawForm_TextEnd(__('Einstellungen speichern', 'wpsg')); ?>
 	
 				<?php echo wpsg_drawForm_TextStart(); ?>
-- 
cgit v1.2.3