PLUGINS-6344 Fixed issue with clear all cache link

Author: meteor-ec

ecwid-shopping-cart.php

@@ -1829,7 +1829,14 @@ function ecwid_get_clear_all_cache_action() {
 
 function ecwid_clear_all_cache()
 {
-	if ( array_key_exists( ecwid_get_clear_all_cache_action(), $_GET ) ) {
+    $key = ecwid_get_clear_all_cache_action();
+
+	if ( array_key_exists( $key, $_GET ) ) {
+        
+        if ( isset( $_GET['_wpnonce'] ) && ! wp_verify_nonce( wp_unslash( $_GET['_wpnonce'] ), $key ) ) {
+			return;
+		}
+
 		ecwid_full_cache_reset();
 
 		if ( array_key_exists( 'redirect_back', $_GET ) ) {

templates/admin-params.php

@@ -67,4 +67,12 @@
 
 <br />
 <h2>Clear plugin cache</h2>
-<a href="?<?php echo esc_attr( ecwid_get_clear_all_cache_action() ); ?>&redirect_back">Clear all caches</a>
+<?php
+$ec_store_clear_cache_url = add_query_arg( array(
+    'page' => 'ec-params',
+    ecwid_get_clear_all_cache_action() => 1,
+    '_wpnonce' => wp_create_nonce( ecwid_get_clear_all_cache_action() ),
+    'redirect_back' => 1,
+) );
+?>
+<a href="<?php echo esc_attr( $ec_store_clear_cache_url ); ?>">Clear all caches</a>