Changeset 37143 for trunk/src/wp-admin/includes/ajax-actions.php

Timestamp:

03/30/2016 06:20:31 PM (10 years ago)

Author:

nbachiyski

Message:

Add nonce to AJAX action for script compression setting

File:

• trunk/src/wp-admin/includes/ajax-actions.php (modified) (1 diff)

trunk/src/wp-admin/includes/ajax-actions.php

@@ -198 +198 @@
                         wp_die();
                 } elseif ( 'no' == $_GET['test'] ) {
+                        check_ajax_referer( 'update_can_compress_scripts' );
                         update_site_option('can_compress_scripts', 0);
                 } elseif ( 'yes' == $_GET['test'] ) {
+                        check_ajax_referer( 'update_can_compress_scripts' );
                         update_site_option('can_compress_scripts', 1);
                 }