Changeset 17078

Timestamp:

12/20/2010 12:38:21 PM (13 years ago)

Author:

ryan

Message:

Restrict meta update/delete to the current post. Props kawauso. fixes #15276

File:

• trunk/wp-admin/includes/post.php (modified) (1 diff)

trunk/wp-admin/includes/post.php

@@ -193 +193 @@
     // Meta Stuff
     if ( isset($post_data['meta']) && $post_data['meta'] ) {
-        foreach ( $post_data['meta'] as $key => $value )
+        foreach ( $post_data['meta'] as $key => $value ) {
+            if ( !$meta = get_post_meta_by_id( $key ) )
+                continue;
+            if ( $meta->post_id != $post_ID )
+                continue;
             update_meta( $key, $value['key'], $value['value'] );
+        }
     }
 
     if ( isset($post_data['deletemeta']) && $post_data['deletemeta'] ) {
-        foreach ( $post_data['deletemeta'] as $key => $value )
+        foreach ( $post_data['deletemeta'] as $key => $value ) {
+            if ( !$meta = get_post_meta_by_id( $key ) )
+                continue;
+            if ( $meta->post_id != $post_ID )
+                continue;
             delete_meta( $key );
+        }
     }