Index: wp-admin/inline-uploading.php
===================================================================
--- wp-admin/inline-uploading.php (revision 3764)
+++ wp-admin/inline-uploading.php (working copy)
@@ -2,8 +2,6 @@
require_once('admin.php');
-check_admin_referer('inlineuploading');
-
header('Content-Type: text/html; charset=' . get_option('blog_charset'));
if (!current_user_can('upload_files'))
@@ -36,16 +34,20 @@
case 'delete':
+check_admin_referer('inlineuploading');
+
if ( !current_user_can('edit_post', (int) $attachment) )
die(__('You are not allowed to delete this attachment.').' ".__('Go back').'');
wp_delete_attachment($attachment);
-header("Location: ". wp_nonce_url(basename(__FILE__)."?post=$post&all=$all&action=view&start=$start", 'inlineuploading'));
+header("Location: " . basename(__FILE__) ."?post=$post&all=$all&action=view&start=$start");
die;
case 'save':
+check_admin_referer('inlineuploading');
+
$overrides = array('action'=>'save');
$file = wp_handle_upload($_FILES['image'], $overrides);
@@ -100,7 +102,7 @@
add_post_meta($id, '_wp_attachment_metadata', array());
}
-header("Location: ". wp_nonce_url(basename(__FILE__)."?post=$post&all=$all&action=view&start=0", 'inlineuploading'));
+header("Location: " . basename(__FILE__) . "?post=$post&all=$all&action=view&start=0");
die();
case 'upload':
@@ -139,7 +141,7 @@
$attachments = $wpdb->get_results("SELECT ID, post_date, post_title, post_mime_type, guid FROM $wpdb->posts WHERE post_type = 'attachment' $and_type $and_post $and_user ORDER BY $sort LIMIT $start, $double", ARRAY_A);
if ( count($attachments) == 0 ) {
- header("Location: ". wp_nonce_url(basename(__FILE__)."?post=$post&action=upload", 'inlineuploading') );
+ header("Location: " . basename(__FILE__) ."?post=$post&action=upload" );
die;
} elseif ( count($attachments) > $num ) {
$next = $start + count($attachments) - $num;
@@ -213,7 +215,7 @@
";
$send_delete_cancel = "$__send_to_editor
-$__delete
+$__delete
$__close
";
$uwidth_sum += 128;
@@ -641,25 +643,25 @@