Changeset 17134

Timestamp:

12/24/2010 05:59:58 PM (14 years ago)

Author:

ryan

Message:

nonce checks for site-themes. Props PeteMall. see #15969

File:

• trunk/wp-admin/network/site-themes.php (modified) (4 diffs)

trunk/wp-admin/network/site-themes.php

@@ -61 +61 @@
     switch ( $action ) {
         case 'enable':
+            check_admin_referer( 'enable-theme_' . $_GET['theme'] );
             $theme = $_GET['theme'];
             $update = 'enabled';
@@ -69 +70 @@
             break;
         case 'disable':
+            check_admin_referer( 'disable-theme_' . $_GET['theme'] );
             $theme = $_GET['theme'];
             $update = 'disabled';
@@ -77 +79 @@
             break;
         case 'enable-selected':
+            check_admin_referer( 'bulk-themes' );
             if ( isset( $_POST['checked'] ) ) {
                 $update = 'enable';
@@ -87 +90 @@
             break;
         case 'disable-selected':
+            check_admin_referer( 'bulk-themes' );
             if ( isset( $_POST['checked'] ) ) {
                 $update = 'disable';