From 70aec90bcb4162bb0f268967a46a1ab32b0e4735 Mon Sep 17 00:00:00 2001 From: JDGrimes Date: Sat, 2 May 2015 10:53:58 -0400 Subject: [PATCH] WPCS: we are in a nonce-checking function MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit So the concern about possible CSRF isn’t valid. See #324 --- src/includes/functions.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/includes/functions.php b/src/includes/functions.php index 39e6323b..b352629e 100644 --- a/src/includes/functions.php +++ b/src/includes/functions.php @@ -136,7 +136,7 @@ function wordpoints_verify_nonce( ) { if ( 'post' === $request_type ) { - $request = $_POST; + $request = $_POST; // WPCS: CSRF OK. } else { $request = $_GET; }