From a0a4e28948db751fc5735ad172d9c6e7224ac7f9 Mon Sep 17 00:00:00 2001
From: Robin Cornett <hello@robincornett.com>
Date: Sat, 22 Nov 2014 15:15:15 -0500
Subject: [PATCH] nonce nonce nonce

---
 includes/class-displayfeaturedimagegenesis-settings.php | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/includes/class-displayfeaturedimagegenesis-settings.php b/includes/class-displayfeaturedimagegenesis-settings.php
index 9bb6363..d35ecde 100644
--- a/includes/class-displayfeaturedimagegenesis-settings.php
+++ b/includes/class-displayfeaturedimagegenesis-settings.php
@@ -49,6 +49,7 @@ class Display_Featured_Image_Genesis_Settings {
 			echo '<form action="options.php" method="post">';
 				settings_fields( 'displayfeaturedimagegenesis' );
 				do_settings_sections( 'displayfeaturedimagegenesis' );
+				wp_nonce_field( 'displayfeaturedimagegenesis_save-settings', 'displayfeaturedimagegenesis_nonce', false );
 				submit_button();
 				settings_errors();
 			echo '</form>';
@@ -197,6 +198,12 @@ class Display_Featured_Image_Genesis_Settings {
 	 */
 	public function do_validation_things( $new_value ) {
 
+		if ( empty( $_POST['displayfeaturedimagegenesis_nonce'] ) ) {
+			wp_die( __( 'Something unexpected happened. Please try again.', 'display-featured-image-genesis' ) );
+		}
+
+		check_admin_referer( 'displayfeaturedimagegenesis_save-settings', 'displayfeaturedimagegenesis_nonce' );
+
 		$new_value['less_header']   = absint( $new_value['less_header'] );
 
 		$new_value['default']       = $this->validate_image( $new_value['default'] );