Merge pull request #1261 from Codeinwp/bugfix/fix-chart-creation-nonce-clean

Fix chart creation nonce verification mismatch

Author: vytisbulkevicius

classes/Visualizer/Gutenberg/Block.php

@@ -668,7 +668,7 @@ public function update_chart_data( $data ) {
 
 			if ( Visualizer_Module::is_pro() ) {
 				$permissions_data = map_deep( $data['visualizer-permissions'], array( $this, 'sanitize_value' ) );
-				update_post_meta( $data['id'], Visualizer_PRO::CF_PERMISSIONS, $permissions_data );
+				update_post_meta( $data['id'], Visualizer_Pro::CF_PERMISSIONS, $permissions_data );
 			}
 
 			if ( $data['visualizer-chart-url'] ) {

classes/Visualizer/Module/Chart.php

@@ -955,7 +955,7 @@ private function _handleDataAndSettingsPage() {
 	 */
 	private function _handleTypesPage() {
 		// process post request
-		if ( $_SERVER['REQUEST_METHOD'] === 'POST' && wp_verify_nonce( filter_input( INPUT_POST, 'nonce' ) ) ) {
+		if ( $_SERVER['REQUEST_METHOD'] === 'POST' && wp_verify_nonce( filter_input( INPUT_POST, 'nonce' ), 'visualizer-upload-data' ) ) {
 			$type = filter_input( INPUT_POST, 'type' );
 			$library = filter_input( INPUT_POST, 'chart-library' );
 			if ( Visualizer_Module_Admin::checkChartStatus( $type ) ) {

classes/Visualizer/Render/Layout.php

@@ -980,7 +980,7 @@ class="dashicons dashicons-lock"></span></h2>
 													add_query_arg(
 														array(
 															'action' => Visualizer_Module::is_pro() ? Visualizer_Pro::ACTION_FETCH_DATA : '',
-															'nonce'  => wp_create_nonce( Visualizer_Pro::ACTION_FETCH_DATA ),
+															'nonce'  => Visualizer_Module::is_pro() ? wp_create_nonce( Visualizer_Pro::ACTION_FETCH_DATA ) : wp_create_nonce(),
 														),
 														admin_url( 'admin-ajax.php' )
 													)