Merge pull request #15 from brainstormforce/nonce-notice

fix: Security Update.

Author: patilvikasj

README.md

@@ -3,7 +3,7 @@
 **Donate link:** https://www.brainstormforce.com/payment/  
 **Requires at least:** 4.4  
 **Tags:** astra addons export, import, settings, customizer settings, theme settings, theme options  
-**Stable tag:** 1.0.3  
+**Stable tag:** 1.0.4  
 **Requires PHP:** 5.4  
 **Tested up to:** 5.5  
 **License:** GPLv2 or later  
@@ -42,6 +42,9 @@ Yes! Astra Pro settings that are available with customizer can be imported/expor
 
 ## Changelog ##
 
+### 1.0.4 ###
+- Fix: Security hardening.
+
 ### 1.0.3 ###
 - Improvement: Compatibility with latest WordPress PHP_CodeSniffer rules.
 - Fix: Setting page and after import link White Label compatible.

astra-import-export.php

@@ -3,7 +3,7 @@
  * Plugin Name: Import / Export Customizer Settings
  * Plugin URI: https://wpastra.com/
  * Description: This plugin is an add-on for the Astra WordPress Theme. It will help in Import Export Customizer settings.
- * Version: 1.0.3
+ * Version: 1.0.4
  * Author: Brainstorm Force
  * Author URI: http://www.brainstormforce.com
  * Text Domain: astra-import-export
@@ -18,7 +18,7 @@
 /**
  * Set constants.
  */
-define( 'ASTRA_IMPORT_EXPORT_VER', '1.0.3' );
+define( 'ASTRA_IMPORT_EXPORT_VER', '1.0.4' );
 define( 'ASTRA_IMPORT_EXPORT_FILE', __FILE__ );
 define( 'ASTRA_IMPORT_EXPORT_BASE', plugin_basename( ASTRA_IMPORT_EXPORT_FILE ) );
 define( 'ASTRA_IMPORT_EXPORT_DIR', plugin_dir_path( ASTRA_IMPORT_EXPORT_FILE ) );

inc/classes/class-astra-import-export-loader.php

@@ -102,7 +102,7 @@ public function astra_import_export_section() {
 		 */
 		public function astra_admin_errors() {
 			// Verify correct source for the $_GET data.
-			if ( isset( $_GET['_wpnonce'] ) && ! wp_verify_nonce( $_GET['_wpnonce'], 'astra-import-complete' ) ) {
+			if ( ! isset( $_GET['_wpnonce'] ) || ! wp_verify_nonce( $_GET['_wpnonce'], 'astra-import-complete' ) ) {
 				return;
 			}
 

languages/astra-import-export.pot

@@ -2,10 +2,10 @@
 # This file is distributed under the same license as the Import / Export Customizer Settings package.
 msgid ""
 msgstr ""
-"Project-Id-Version: Import / Export Customizer Settings 1.0.3\n"
+"Project-Id-Version: Import / Export Customizer Settings 1.0.4\n"
 "Report-Msgid-Bugs-To: "
 "https://wordpress.org/support/plugin/astra-import-export\n"
-"POT-Creation-Date: 2020-05-18 07:08:21+00:00\n"
+"POT-Creation-Date: 2020-08-25 06:06:31+00:00\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=utf-8\n"
 "Content-Transfer-Encoding: 8bit\n"

readme.txt

@@ -3,7 +3,7 @@ Contributors: brainstormforce
 Donate link: https://www.brainstormforce.com/payment/
 Requires at least: 4.4
 Tags: astra addons export, import, settings, customizer settings, theme settings, theme options
-Stable tag: 1.0.3
+Stable tag: 1.0.4
 Requires PHP: 5.4
 Tested up to: 5.5
 License: GPLv2 or later
@@ -42,6 +42,9 @@ Yes! Astra Pro settings that are available with customizer can be imported/expor
 
 == Changelog ==
 
+= 1.0.4 =
+- Fix: Security hardening.
+
 = 1.0.3 =
 - Improvement: Compatibility with latest WordPress PHP_CodeSniffer rules.
 - Fix: Setting page and after import link White Label compatible.