Dont allow direct file access.

pronamic/wp-pay-core#144
pronamic · Aug 22, 2023 · 48c927b · 48c927b
1 parent d9bb422
commit 48c927b
Show file tree

Hide file tree

Showing 12 changed files with 48 additions and 0 deletions.
diff --git a/views/meta-box-payment.php b/views/meta-box-payment.php
@@ -11,6 +11,10 @@
  * @link  https://github.com/WordPress/WordPress/blob/4.5.2/wp-admin/user-edit.php#L578-L600
  */
 
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 $payment = \get_pronamic_payment( $post->ID );
 
 // Check valid payment.

diff --git a/views/meta-box-subscription.php b/views/meta-box-subscription.php
@@ -11,6 +11,10 @@
  * @link  https://github.com/WordPress/WordPress/blob/4.5.2/wp-admin/user-edit.php#L578-L600
  */
 
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 $subscription = \get_pronamic_subscription( $post->ID );
 
 if ( null === $subscription ) {

diff --git a/views/page-customer.php b/views/page-customer.php
@@ -10,6 +10,10 @@
 
 namespace Pronamic\WordPress\Pay\Gateways\Mollie;
 
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 use Pronamic\WordPress\Mollie\Client;
 
 /**

diff --git a/views/page-customers.php b/views/page-customers.php
@@ -8,6 +8,10 @@
  * @package   Pronamic\WordPress\Pay\Gateways\Mollie
  */
 
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 ?>
 <div class="wrap">
 	<h1><?php echo \esc_html( \get_admin_page_title() ); ?></h1>

diff --git a/views/page-mandate.php b/views/page-mandate.php
@@ -10,6 +10,10 @@
 
 namespace Pronamic\WordPress\Pay\Gateways\Mollie;
 
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 use Pronamic\WordPress\Mollie\Client;
 
 /**

diff --git a/views/page-mandates.php b/views/page-mandates.php
@@ -8,6 +8,10 @@
  * @package   Pronamic\WordPress\Pay\Gateways\Mollie
  */
 
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 ?>
 <div class="wrap">
 	<h1><?php echo \esc_html( \get_admin_page_title() ); ?></h1>

diff --git a/views/page-mollie.php b/views/page-mollie.php
@@ -8,6 +8,10 @@
  * @package   Pronamic\WordPress\Pay\Gateways\Mollie
  */
 
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 ?>
 <div class="wrap">
 	<h1><?php echo \esc_html( \get_admin_page_title() ); ?></h1>

diff --git a/views/page-payment.php b/views/page-payment.php
@@ -10,6 +10,10 @@
 
 namespace Pronamic\WordPress\Pay\Gateways\Mollie;
 
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 use Pronamic\WordPress\Mollie\Client;
 use Pronamic\WordPress\Pay\Admin\AdminPaymentPostType;
 

diff --git a/views/page-payments.php b/views/page-payments.php
@@ -10,6 +10,10 @@
 
 namespace Pronamic\WordPress\Pay\Gateways\Mollie;
 
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 ?>
 <div class="wrap">
 	<h1><?php echo \esc_html( \get_admin_page_title() ); ?></h1>

diff --git a/views/page-profile.php b/views/page-profile.php
@@ -10,6 +10,10 @@
 
 namespace Pronamic\WordPress\Pay\Gateways\Mollie;
 
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 ?>
 <div class="wrap">
 	<h1><?php echo \esc_html( \get_admin_page_title() ); ?></h1>

diff --git a/views/page-profiles.php b/views/page-profiles.php
@@ -10,6 +10,10 @@
 
 namespace Pronamic\WordPress\Pay\Gateways\Mollie;
 
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 ?>
 <div class="wrap">
 	<h1><?php echo \esc_html( \get_admin_page_title() ); ?></h1>

diff --git a/views/user-profile.php b/views/user-profile.php
@@ -13,6 +13,10 @@
 
 namespace Pronamic\WordPress\Pay\Gateways\Mollie;
 
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
 if ( ! isset( $user ) ) {
 	return;
 }