fix(acf-base.php): noces

In a recent security update ACF changed nonce handling for ajax-fields (the old way no longer works): https://github.com/AdvancedCustomFields/acf/releases/tag/6.3.2
BeAPI · Jul 5, 2024 · bd87774 · bd87774
1 parent 06ca08a
commit bd87774
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/fields/acf-base.php b/fields/acf-base.php
@@ -43,7 +43,9 @@ function __construct() {
 	function ajax_query() {
 
 		// validate
-		if ( ! acf_verify_ajax() ) {
+		$nonce = acf_request_arg( 'nonce', '' );
+		$key   = acf_request_arg( 'field_key', '' );
+		if ( ! acf_verify_ajax( $nonce, $key ) ) {
 			die();
 		}
 
@@ -585,4 +587,4 @@ function input_admin_enqueue_scripts() {
 		// Enqueuing
 		wp_enqueue_script( 'acf-input-user-network' );
 	}
-}
+}