Changeset 13537

Timestamp:

03/01/2010 08:33:03 PM (15 years ago)

Author:

ryan

Message:

Die if invalid post type is passed. see #9674

Location:

trunk/wp-admin

Files:

• edit.php (modified) (1 diff)
• post-new.php (modified) (1 diff)

trunk/wp-admin/edit.php

@@ -21 +21 @@
 }
 
-if ( isset($_GET['post_type']) && ( in_array( $_GET['post_type'], get_post_types( array('public' => true ) ) ) ) )
+if ( !isset($_GET['post_type']) )
+    $post_type = 'post';
+elseif ( in_array( $_GET['post_type'], get_post_types( array('public' => true ) ) ) )
     $post_type = $_GET['post_type'];
 else
-    $post_type = 'post';
+    wp_die( __('Invalid post type') );
 $_GET['post_type'] = $post_type;
 

trunk/wp-admin/post-new.php

@@ -10 +10 @@
 require_once('admin.php');
 
-if ( isset($_GET['post_type']) && ( in_array( $_GET['post_type'], get_post_types( array('public' => true ) ) ) ) )
+if ( !isset($_GET['post_type']) )
+    $post_type = 'post';
+elseif ( in_array( $_GET['post_type'], get_post_types( array('public' => true ) ) ) )
     $post_type = $_GET['post_type'];
 else
-    $post_type = 'post';
+    wp_die( __('Invalid post type') );
 
 if ( 'post' != $post_type ) {