Ticket #34657: 34657.patch

wp-admin/includes/ajax-actions.php

@@ -1149 +1149 @@
 function wp_ajax_add_menu_item() {
         check_ajax_referer( 'add-menu_item', 'menu-settings-column-nonce' );
 
-        if ( ! current_user_can( 'edit_theme_options' ) )
+        if ( ! current_user_can( 'edit_theme_options' ) or ! isset( $_POST['menu'] ) )
                 wp_die( -1 );
 
         require_once ABSPATH . 'wp-admin/includes/nav-menu.php';
@@ -1157 +1157 @@
         // For performance reasons, we omit some object properties from the checklist.
         // The following is a hacky way to restore them when adding non-custom items.
 
+        $menu_id = (int) $_POST['menu'];
         $menu_items_data = array();
         foreach ( (array) $_POST['menu-item'] as $menu_item_data ) {
                 if (
@@ -1188 +1189 @@
                 $menu_items_data[] = $menu_item_data;
         }
 
-        $item_ids = wp_save_nav_menu_items( 0, $menu_items_data );
+        $item_ids = wp_save_nav_menu_items( $menu_id, $menu_items_data );
         if ( is_wp_error( $item_ids ) )
                 wp_die( 0 );