10h30/ultimatemember
1
0
Fork 0
mirror of https://github.com/10h30/ultimatemember.git synced 2026-07-15 12:43:33 +09:00
Code Issues Packages Projects Releases Wiki Activity

Fix form validation and security notice

Browse Source
This commit is contained in:
champsupertramp
2016-09-01 19:54:38 +08:00
parent 3e84ff9194
commit 9febd7f957
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
core/um-form.php
+4 -1
View File
@@ -105,7 +105,7 @@ class UM_Form {
$secure_form_post = apply_filters('um_secure_form_post', true );
if( $role && isset( $this->form_data['custom_fields'] ) && ! strstr( $this->form_data['custom_fields'], 'role_' ) && $secure_form_post ){ // has assigned role. Validate non-global forms
if( $role && isset( $this->form_data['custom_fields'] ) && ! strstr( $this->form_data['custom_fields'], 'role_' ) && $secure_form_post && $this->form_data['use_global'] == 1 ){ // has assigned role. Validate non-global forms
if ( isset( $this->form_data['role'] ) && ( (boolean) $this->form_data['role'] ) && isset( $_POST['role'] ) && $_POST['role'] != $role ) {
wp_die( __( 'This is not possible for security reasons.','ultimatemember') );
} else {
@@ -115,6 +115,9 @@ class UM_Form {
}
}
}
}else{
$this->post_form['role'] = $role;
$this->post_form['submitted']['role'] = $role;
}
if ( isset( $_POST[ $ultimatemember->honeypot ] ) && $_POST[ $ultimatemember->honeypot ] != '' ){