Changeset 3730615 for tutor/trunk/classes/Course.php

Timestamp:

10/06/2026 11:07:46 AM (11 days ago)

Author:

themeum

Message:

Updated to 4.1.1

File:

• tutor/trunk/classes/Course.php (modified) (4 diffs)

tutor/trunk/classes/Course.php

@@ -1005 +1005 @@
                 tutor_utils()->check_nonce();
 
-                $this->check_access();
+                $course_id = intval( wp_unslash( $_POST['ID'] ?? 0 ) );
+                $this->check_access( $course_id ); // Check user cap for the given id before processing.
 
                 $params = Input::sanitize_array(
@@ -1690 +1691 @@
          */
         public function get_wc_products() {
+                tutor_utils()->checking_nonce();
+
                 $exclude                 = array();
                 $exclude_linked_products = Input::has( 'exclude_linked_products' );
                 $course_id               = Input::post( 'course_id', 0, Input::TYPE_INT );
+
+                $this->check_access( $course_id );
 
                 if ( $exclude_linked_products ) {
@@ -1723 +1728 @@
         public function get_wc_product() {
                 tutor_utils()->checking_nonce();
+                $course_id  = Input::post( 'course_id', 0, Input::TYPE_INT );
+                $this->check_access( $course_id );
+
                 $product_id = Input::post( 'product_id' );
                 $product    = wc_get_product( $product_id );
-                $course_id  = Input::post( 'course_id', 0, Input::TYPE_INT );
 
                 $is_linked_with_course = tutor_utils()->product_belongs_with_course( $product_id );
@@ -3643 +3650 @@
 
                 if ( ! empty( $content_parent ) ) {
-                        foreach ( $content_parent as $topic ) {
-                                $provided_topic_ids[]   = $topic['parent_topic_id'];
-                                $provided_content_ids[] = $topic['content_id'];
-                        }
+                        $provided_topic_ids[]   = $content_parent['parent_topic_id'];
+                        $provided_content_ids[] = $content_parent['content_id'];                        
                 }