Changeset 17078 for trunk/wp-admin/includes/post.php

Timestamp:

12/20/2010 12:38:21 PM (16 years ago)

Author:

ryan

Message:

Restrict meta update/delete to the current post. Props kawauso. fixes #15276

File:

• trunk/wp-admin/includes/post.php (modified) (1 diff)

trunk/wp-admin/includes/post.php

@@ -193 +193 @@
         // Meta Stuff
         if ( isset($post_data['meta']) && $post_data['meta'] ) {
-                foreach ( $post_data['meta'] as $key => $value )
+                foreach ( $post_data['meta'] as $key => $value ) {
+                        if ( !$meta = get_post_meta_by_id( $key ) )
+                                continue;
+                        if ( $meta->post_id != $post_ID )
+                                continue;
                         update_meta( $key, $value['key'], $value['value'] );
+                }
         }
 
         if ( isset($post_data['deletemeta']) && $post_data['deletemeta'] ) {
-                foreach ( $post_data['deletemeta'] as $key => $value )
+                foreach ( $post_data['deletemeta'] as $key => $value ) {
+                        if ( !$meta = get_post_meta_by_id( $key ) )
+                                continue;
+                        if ( $meta->post_id != $post_ID )
+                                continue;
                         delete_meta( $key );
+                }
         }