10h30/ultimatemember
1
0
Fork 0
mirror of https://github.com/10h30/ultimatemember.git synced 2026-07-18 06:03:38 +09:00
Code Issues Packages Projects Releases Wiki Activity

Fix verify nonce and logged in validation

Browse Source
This commit is contained in:
champsupertramp
2016-06-17 15:57:41 +08:00
parent 07b3e71528
commit 8384a9677c
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
core/lib/upload/um-file-upload.php
+1 -1
View File
@@ -21,7 +21,7 @@ $timestamp = $_POST['timestamp'];
$ultimatemember->fields->set_id = $_POST['set_id'];
$ultimatemember->fields->set_mode = $_POST['set_mode'];
if ( ! wp_verify_nonce( $nonce, 'um_upload_nonce-'.$timestamp ) ) {
if ( ! wp_verify_nonce( $nonce, 'um_upload_nonce-'.$timestamp ) && is_user_logged_in() ) {
// This nonce is not valid.
$ret['error'] = 'Invalid nonce';
die( json_encode( $ret ) );