Fix MultisitePostObject AJAX query compatibility with ACF Pro 6.8.4 (#136)

Author: mmatiasautio

CHANGELOG.md

@@ -6,6 +6,11 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 [Unreleased]
 
+## [1.41.7]
+
+### Fixed
+- Fix MultisitePostObject AJAX query compatibility with ACF Pro 6.8.4. ACF added field-type nonce validation that rejects requests where the field type doesn't match the expected type. The parent `ajax_query()` expected `'post_object'` but the field registers as `'multisite_post_object'`, causing the nonce check to fail silently.
+
 ## [1.41.6]
 
 ### Added

plugin.php

@@ -3,7 +3,7 @@
 Plugin Name: ACF Codifier
 Plugin URI: https://github.com/devgeniem/acf-codifier
 Description: A helper class to make defining ACF field groups and fields easier in the code.
-Version: 1.41.6
+Version: 1.41.7
 Author: Miika Arponen / Geniem Oy
 Author URI: https://geniem.fi
 License: GPL-3.0

src/Fields/MultisitePostObject.php

@@ -51,6 +51,36 @@ public function input_admin_enqueue_scripts() {
                 );
             }
 
+            /**
+             * Override parent ajax_query to use correct field type for nonce verification.
+             *
+             * ACF 6.8.4 added field-type validation to AJAX nonce checks.
+             * The parent passes 'post_object' as expected type, but this field
+             * registers as 'multisite_post_object', causing verification to fail.
+             *
+             * @return void
+             */
+            public function ajax_query() {
+                $nonce             = \acf_request_arg( 'nonce', '' );
+                $key               = \acf_request_arg( 'field_key', '' );
+                $conditional_logic = (bool) \acf_request_arg( 'conditional_logic', false );
+
+                if ( $conditional_logic ) {
+                    if ( ! \acf_current_user_can_admin() ) {
+                        die();
+                    }
+
+                    $nonce = '';
+                    $key   = '';
+                }
+
+                if ( ! \acf_verify_ajax( $nonce, $key, ! $conditional_logic, 'multisite_post_object' ) ) {
+                    die();
+                }
+
+                \acf_send_ajax_results( $this->get_ajax_query( $_POST ) );
+            }
+
             /**
              * Switch to the selected blog when using
              * the parent method for fetching the AJAX response.