Changeset 14725 for trunk/wp-admin/admin-ajax.php

Timestamp:

05/18/2010 03:16:58 PM (16 years ago)

Author:

ryan

Message:

Add nonce to menu-locations-save. Props koopersmith. see #13378

File:

• trunk/wp-admin/admin-ajax.php (modified) (1 diff)

trunk/wp-admin/admin-ajax.php

@@ -1107 +1107 @@
         if ( ! current_user_can( 'edit_theme_options' ) )
                 die('-1');
+        check_ajax_referer( 'add-menu_item', 'menu-settings-column-nonce' );
         if ( ! isset( $_POST['menu-locations' ] ) )
                 die('0');