From f6ebd41f94392d7a7d7d726ef51b80c60c63faa9 Mon Sep 17 00:00:00 2001 From: Glen Whitney Date: Mon, 8 Feb 2021 14:14:13 -0800 Subject: [PATCH] fix: try another way of adding the nonce --- tablepress-pods.php | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/tablepress-pods.php b/tablepress-pods.php index d4d2e19..af21978 100644 --- a/tablepress-pods.php +++ b/tablepress-pods.php @@ -3,7 +3,7 @@ Plugin Name: TablePress Extension: Pods tables Plugin URI: https://code.studioinfinity.org/glen/tablepress-pods Description: Custom Extension for TablePress to incorporate Pods information in tables -Version: 0.2.12 +Version: 0.2.13 Author: Glen Whitney Author URI: http://studioinfinity.org/ */ @@ -201,8 +201,9 @@ function playground_handle_exportpods () { $export = wp_unslash( $_POST['export'] ); } - $real_export = TablePress::url( array( 'action' => 'export', 'export' = > $export ), true, 'admin-post.php' ); - wp_redirect( $real_export ); + $real_export = TablePress::url( array( 'action' => 'export', 'export' => $export ), false, 'admin-post.php' ); + $nonced_export = add_query_arg( '_wpnonce', wp_create_nonce( TablePress::nonce('export') ), $real_export); + wp_redirect( $nonced_export ); } __halt_compiler(); $exporter = TablePress::load_class( 'TablePress_Export', 'class-export.php', 'classes' );