Merge pull request #5 from dol-lab/master

fix(acf-base.php): nonces
BeAPI · Jul 11, 2024 · d84ac0f · d84ac0f
2 parents b14d27d + bd87774
commit d84ac0f
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/fields/acf-base.php b/fields/acf-base.php
@@ -43,7 +43,9 @@ function __construct() {
 	function ajax_query() {
 
 		// validate
-		if ( ! acf_verify_ajax() ) {
+		$nonce = acf_request_arg( 'nonce', '' );
+		$key   = acf_request_arg( 'field_key', '' );
+		if ( ! acf_verify_ajax( $nonce, $key ) ) {
 			die();
 		}
 
@@ -585,4 +587,4 @@ function input_admin_enqueue_scripts() {
 		// Enqueuing
 		wp_enqueue_script( 'acf-input-user-network' );
 	}
-}
+}