Changeset 14737 for trunk/wp-admin/ms-edit.php
- Timestamp:
- 05/19/2010 05:32:39 AM (14 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/wp-admin/ms-edit.php
r14735 r14737 142 142 break; 143 143 case 'addblog': 144 check_admin_referer( 'add-blog' );144 check_admin_referer( 'add-blog', '_wpnonce_add-blog' ); 145 145 146 146 if ( ! current_user_can( 'manage_sites' ) ) … … 326 326 case 'allblogs': 327 327 if ( isset( $_POST['doaction']) || isset($_POST['doaction2'] ) ) { 328 check_admin_referer( 'bulk-ms-sites' );328 check_admin_referer( 'bulk-ms-sites', '_wpnonce_bulk-ms-sites' ); 329 329 330 330 if ( ! current_user_can( 'manage_sites' ) ) … … 508 508 509 509 if ( isset( $_POST['doaction']) || isset($_POST['doaction2'] ) ) { 510 check_admin_referer( 'bulk-ms-users' );510 check_admin_referer( 'bulk-ms-users', '_wpnonce_bulk-ms-users' ); 511 511 512 512 if ( $_GET['action'] != -1 || $_POST['action2'] != -1 ) … … 591 591 592 592 case 'adduser': 593 check_admin_referer( 'add-user' );593 check_admin_referer( 'add-user', '_wpnonce_add-user' ); 594 594 if ( ! current_user_can( 'manage_network_users' ) ) 595 595 wp_die( __( 'You do not have permission to access this page.' ) );
Note: See TracChangeset
for help on using the changeset viewer.