Ticket #2760: 2760-2.0.diff

wp-admin/post.php

@@ -322 +322 @@
 
 case 'editedcomment':
 
-        check_admin_referer('update-comment');
+        $comment_id = (int) $_POST['comment_ID'];
 
+        check_admin_referer('update-comment_' . $comment_id);
+
         edit_comment();
 
         $referredby = $_POST['referredby'];
         if (!empty($referredby)) {
                 header('Location: ' . $referredby);
         } else {
-                header ("Location: edit.php?p=$comment_post_ID&c=1#comments");
+                header ("Location: edit.php?p=$comment_id&c=1#comments");
         }
 
         break;

wp-admin/edit-form-comment.php

@@ -6 +6 @@
 ?>
 
 <form name="post" action="post.php" method="post" id="post">
-<?php wp_nonce_field('update-comment' . $comment->comment_ID) ?>
+<?php wp_nonce_field('update-comment_' . $comment->comment_ID) ?>
 <div class="wrap">
 <input type="hidden" name="user_ID" value="<?php echo $user_ID ?>" />
 <input type="hidden" name="action" value='<?php echo $form_action . $form_extra ?>' />