mirror of
https://github.com/getgrav/grav-plugin-admin.git
synced 2025-11-02 03:16:11 +01:00
Improve verification of nonce
This commit is contained in:
@@ -86,7 +86,7 @@ class AdminController
|
||||
*/
|
||||
public function execute()
|
||||
{
|
||||
if (!Utils::verifyNonce($this->post['admin-nonce'], 'admin-post-blueprints')) {
|
||||
if (!isset($this->post['admin-nonce']) || Utils::verifyNonce($this->post['admin-nonce'], 'admin-post-blueprints')) {
|
||||
$this->admin->setMessage('Unauthorized', 'error');
|
||||
return false;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user