fix: check ajax_nonce while cropping banner (#459)

getdokan · Dec 13, 2018 · 9c379c6 · 9c379c6
1 parent 322cdac
commit 9c379c6
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/classes/ajax.php b/classes/ajax.php
@@ -560,6 +560,8 @@ public function crop_store_banner() {
             wp_send_json_error();
         }
 
+        check_ajax_referer( 'image_editor-' . $_POST['id'], 'nonce' );
+
         $crop_details = $_POST['cropDetails'];
 
         $dimensions = $this->get_header_dimensions( array(