Skip to content
Snippets Groups Projects

bugfix(ajax): permission check

Merged bugfix(ajax): permission check
bugfix/permission-check into master
Merged Grzegorz Rola requested to merge bugfix/permission-check into master
Viewing commit 4757a0fa
Prev Next
Show latest version
2 files
+ 2
− 1
Compare changes
  • Side-by-side
  • Inline

Files

src/WPDesk/Notice/AjaxHandler.php
+ 1
− 1
@@ -79,7 +79,7 @@ class AjaxHandler implements HookablePluginDependant {
$noticeName = sanitize_text_field( $_POST[ self::POST_FIELD_NOTICE_NAME ] );
$option_name = PermanentDismissibleNotice::OPTION_NAME_PREFIX . $noticeName;
\ajax_check_referer( $option_name, self::POST_FIELD_SECURITY );
ajax_check_referer( $option_name, self::POST_FIELD_SECURITY );
if ( ! current_user_can( 'edit_posts' ) ) {
wp_send_json_error();