From 7e4543f0d361176d3158f914a6480429da87b43c Mon Sep 17 00:00:00 2001
From: Champ Camba <champsupertramp@users.noreply.github.com>
Date: Wed, 23 Aug 2023 19:40:06 +0800
Subject: [PATCH] Add nonce validation for download install info

---
 includes/admin/core/class-admin-settings.php | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/includes/admin/core/class-admin-settings.php b/includes/admin/core/class-admin-settings.php
index 3a1bb03b..29b62c94 100644
--- a/includes/admin/core/class-admin-settings.php
+++ b/includes/admin/core/class-admin-settings.php
@@ -3689,6 +3689,7 @@ Use Only Cookies:         			<?php echo ini_get( 'session.use_only_cookies' ) ?
 					<p class="submit">
 						<input type="hidden" name="um-addon-hook" value="download_install_info" />
 						<?php submit_button( 'Download Install Info File', 'primary', 'download_install_info', false ); ?>
+						<?php wp_nonce_field( 'um_download_install_info' ); ?>
 					</p>
 				</form>
 
@@ -3700,7 +3701,13 @@ Use Only Cookies:         			<?php echo ini_get( 'session.use_only_cookies' ) ?
 		 *
 		 */
 		function um_download_install_info() {
+			
 			if ( ! empty( $_POST['download_install_info'] ) ) {
+				$nonce = $_REQUEST['_wpnonce'];
+				if ( ! wp_verify_nonce( $nonce, 'um_download_install_info' ) || ! current_user_can( 'manage_options' )  ) {
+					die( __( 'Security check', 'ultimate-member' ) ); 
+				} 
+
 				nocache_headers();
 
 				header( "Content-type: text/plain" );