Changeset 2604235 for shapepress-dsgvo

Timestamp:

09/24/2021 11:34:45 AM (5 years ago)

Author:

legalweb

Message:

added admin check on registering ajax method

File:

• shapepress-dsgvo/trunk/includes/class-sp-dsgvo-integration.php (modified) (1 diff)

shapepress-dsgvo/trunk/includes/class-sp-dsgvo-integration.php

@@ -21 +21 @@
         $self = new $class();
 
-        if(method_exists($self, 'viewSubmit')){
+        if(method_exists($self, 'viewSubmit') && current_user_can('administrator')){
             $action = $class::action();
             add_action("wp_ajax_{$action}", array($self, 'viewSubmit'));