CSRF security added for Settings form

simongomes · May 5, 2021 · 1ae887f · 1ae887f
1 parent e738fec
commit 1ae887f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/includes/Admin/Settings.php b/includes/Admin/Settings.php
@@ -53,7 +53,7 @@ public function ste_settings_form_handler() {
 				return;
 			}
 
-			if ( isset( $_REQUEST['_wpnonce'] ) && ! wp_verify_nonce( sanitize_key( $_REQUEST['_wpnonce'] ), 'ste-ecourier-settings' ) ) {
+			if ( ! isset( $_REQUEST['_wpnonce'] ) || ! wp_verify_nonce( sanitize_key( $_REQUEST['_wpnonce'] ), 'ste-ecourier-settings' ) ) {
 				wp_die( 'Nope! I can\'t let you do this' );
 			}