Ticket #36186: 36186.1.patch

src/wp-admin/upload.php

@@ -77 +77 @@
                 <?php
                 echo esc_html( $title );
                 if ( current_user_can( 'upload_files' ) ) { ?>
-                        <a href="media-new.php" class="page-title-action"><?php echo esc_html_x( 'Add New', 'file' ); ?></a><?php
+                        <a href="<?php echo admin_url( 'media-new.php' ); ?>" class="page-title-action"><?php echo esc_html_x( 'Add New', 'file' ); ?></a><?php
                 }
                 ?>
                 </h1>
@@ -222 +222 @@
 <?php
 echo esc_html( $title );
 if ( current_user_can( 'upload_files' ) ) { ?>
-        <a href="media-new.php" class="page-title-action"><?php echo esc_html_x('Add New', 'file'); ?></a><?php
+        <a href="<?php echo admin_url( 'media-new.php' ); ?>" class="page-title-action"><?php echo esc_html_x('Add New', 'file'); ?></a><?php
 }
 if ( isset( $_REQUEST['s'] ) && strlen( $_REQUEST['s'] ) ) {
         /* translators: %s: search keywords */

src/wp-admin/users.php

@@ -484 +484 @@
 <?php
 echo esc_html( $title );
 if ( current_user_can( 'create_users' ) ) { ?>
-        <a href="user-new.php" class="page-title-action"><?php echo esc_html_x( 'Add New', 'user' ); ?></a>
+        <a href="<?php echo admin_url( 'user-new.php' ); ?>" class="page-title-action"><?php echo esc_html_x( 'Add New', 'user' ); ?></a>
 <?php } elseif ( is_multisite() && current_user_can( 'promote_users' ) ) { ?>
-        <a href="user-new.php" class="page-title-action"><?php echo esc_html_x( 'Add Existing', 'user' ); ?></a>
+        <a href="<?php echo admin_url( 'user-new.php' ); ?>" class="page-title-action"><?php echo esc_html_x( 'Add Existing', 'user' ); ?></a>
 <?php }
 
 if ( strlen( $usersearch ) ) {