Ticket #5045: delete_post_nonce.diff

wp-admin/wp-admin.css

@@ -15 +15 @@
         text-decoration: none;
 }
 
-a.delete:hover {
+a.delete:hover, a#deletepost:hover {
         background: #c00;
         color: #fff;
 }
 
+a#deletepost {
+        display: block;
+        padding: 5px 0;
+        text-align: center;
+}
+
 #devnews h4 {
         font-family: Georgia, "Times New Roman", Times, serif;
         font-size: 18px;

wp-admin/edit-form-advanced.php

@@ -254 +254 @@
 
 </div>
 
-<?php if ('edit' == $action) : $delete_nonce = wp_create_nonce( 'delete-post_' . $post_ID ); ?>
-<input name="deletepost" class="button delete" type="submit" id="deletepost" tabindex="10" value="<?php echo ( 'draft' == $post->post_status ) ? __('Delete this draft') : __('Delete this post'); ?>" <?php echo "onclick=\"if ( confirm('" . js_escape(sprintf( ('draft' == $post->post_status) ? __("You are about to delete this draft '%s'\n  'Cancel' to stop, 'OK' to delete.") : __("You are about to delete this post '%s'\n  'Cancel' to stop, 'OK' to delete."), $post->post_title )) . "') ) { document.forms.post._wpnonce.value = '$delete_nonce'; return true;}return false;\""; ?> />
+<p><?php if ('edit' == $action) : $delete_nonce = wp_create_nonce( 'delete-post_' . $post_ID ); ?>
+<a href="<?php echo wp_nonce_url('post.php?action=delete&post=' . $post_ID, 'delete-post_' . $post_ID); ?>" 
+class="button" id="deletepost" tabindex="10" 
+<?php echo "onclick=\"if ( confirm('" . js_escape(sprintf( ('draft' == $post->post_status) ? __("You are about to delete this draft '%s'\n  'Cancel' to stop, 'OK' to delete.") : __("You are about to delete this post '%s'\n  'Cancel' to stop, 'OK' to delete."), $post->post_title )) . "') ) { document.forms.post._wpnonce.value = '$delete_nonce'; return true;}return false;\"";?>>
+<?php echo ( 'draft' == $post->post_status ) ? __('Delete this draft') : __('Delete this post'); ?>
+</a></p>
 <?php endif; ?>
 
 </div>