From ad2d000e45434161125ac0c5753c92f9bf27771f Mon Sep 17 00:00:00 2001
From: Daniel Schmitzer <noreply@maennchen1.de>
Date: Tue, 3 Sep 2019 13:31:41 +0000
Subject: - Seite Berechtigung durch Nounce schützen
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

git-svn-id: https://[internal]/wordpress/plugins/wpsg4@7535 0d5edaf7-2b12-4e95-93f4-047927463d4b
---
 views/admin/access.phtml             | 4 +++-
 views/admin/widerrufsbelehrung.phtml | 2 +-
 2 files changed, 4 insertions(+), 2 deletions(-)

(limited to 'views')

diff --git a/views/admin/access.phtml b/views/admin/access.phtml
index f330572..3cdf383 100644
--- a/views/admin/access.phtml
+++ b/views/admin/access.phtml
@@ -18,7 +18,9 @@
 		
 <div class="wpsg_admin_content form-horizontal">
 	<form name="form1" method="post" enctype="multipart/form-data" action="<?php echo wpsg_hspc(WPSG_URL_WP.'wp-admin/admin.php?page=wpsg-Admin&subaction='.$_REQUEST['subaction'].'&noheader=1'); ?>">
-
+		
+		<?php \wp_nonce_field('wpsg-save-admin-access'); ?>
+		
 		<?php global $wpdb; $arRoles = get_option($wpdb->prefix."user_roles"); ?>
 		
 		<div class="panel panel-default">
diff --git a/views/admin/widerrufsbelehrung.phtml b/views/admin/widerrufsbelehrung.phtml
index 66a3c3c..b7765d4 100644
--- a/views/admin/widerrufsbelehrung.phtml
+++ b/views/admin/widerrufsbelehrung.phtml
@@ -19,7 +19,7 @@
 <div class="wpsg_admin_content form-horizontal">
 	<form name="form1" method="post" enctype="multipart/form-data" action="<?php echo WPSG_URL_WP; ?>wp-admin/admin.php?page=wpsg-Admin&amp;subaction=<?php echo $_REQUEST['subaction']; ?>&amp;noheader=1">
 
-        <?php wp_nonce_field('wpsg-save-revocation'); ?>
+        <?php \wp_nonce_field('wpsg-save-revocation'); ?>
         
 		<?php echo wpsg_drawForm_AdminboxStart(__('Widerruf', 'wpsg')); ?>
 			 
-- 
cgit v1.2.3