Fixed: wp_verify_nonce didn't do anything.

Dan0sz · Dec 12, 2023 · a5eea43 · a5eea43
1 parent 71da5c8
commit a5eea43
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/includes/class-caos.php b/includes/class-caos.php
@@ -406,10 +406,12 @@ public function update_settings() {
 			return;
 		}
 
-		$action = $_GET[ 'tab' ] ?? 'caos-basic-settings';
+		$action = $_GET[ 'tab' ] ? $_GET[ 'tab' ] . '-options' : 'caos-basic-settings-options';
 		$nonce  = $_POST[ '_wpnonce' ] ?? '';
 
-		wp_verify_nonce( $nonce, $action );
+		if ( wp_verify_nonce( $nonce, $action ) < 1 ) {
+			return;
+		}
 
 		if ( ! current_user_can( 'manage_options' ) ) {
 			return;