Make WordPress Core


Ignore:
Timestamp:
05/19/2010 05:32:39 AM (14 years ago)
Author:
markjaquith
Message:

Misc HTML validation fixes. see #13383. props jshreve

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/ms-edit.php

    r14735 r14737  
    142142    break;
    143143    case 'addblog':
    144         check_admin_referer( 'add-blog' );
     144        check_admin_referer( 'add-blog', '_wpnonce_add-blog' );
    145145
    146146        if ( ! current_user_can( 'manage_sites' ) )
     
    326326    case 'allblogs':
    327327        if ( isset( $_POST['doaction']) || isset($_POST['doaction2'] ) ) {
    328             check_admin_referer( 'bulk-ms-sites' );
     328            check_admin_referer( 'bulk-ms-sites', '_wpnonce_bulk-ms-sites' );
    329329
    330330            if ( ! current_user_can( 'manage_sites' ) )
     
    508508
    509509        if ( isset( $_POST['doaction']) || isset($_POST['doaction2'] ) ) {
    510             check_admin_referer( 'bulk-ms-users' );
     510            check_admin_referer( 'bulk-ms-users', '_wpnonce_bulk-ms-users' );
    511511
    512512            if ( $_GET['action'] != -1 || $_POST['action2'] != -1 )
     
    591591
    592592    case 'adduser':
    593         check_admin_referer( 'add-user' );
     593        check_admin_referer( 'add-user', '_wpnonce_add-user' );
    594594        if ( ! current_user_can( 'manage_network_users' ) )
    595595            wp_die( __( 'You do not have permission to access this page.' ) );
Note: See TracChangeset for help on using the changeset viewer.