WordPress.org

Make WordPress Core


Ignore:
Timestamp:
01/11/2011 08:03:50 PM (9 years ago)
Author:
nacin
Message:

Nonce checks for internal linking and list table ajax. fixes #16188.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/admin-ajax.php

    r17228 r17255  
    5353case 'fetch-list' :
    5454
     55    $list_class = $_GET['list_args']['class'];
     56    check_ajax_referer( "fetch-list-$list_class", '_ajax_fetch_list_nonce' );
     57
    5558    $current_screen = (object) $_GET['list_args']['screen'];
    5659    //TODO fix this in a better way see #15336
     
    6164    define( 'WP_USER_ADMIN', $current_screen->is_user );
    6265
    63     $wp_list_table = get_list_table( $_GET['list_args']['class'] );
     66    $wp_list_table = get_list_table( $list_class );
    6467    if ( ! $wp_list_table )
    6568        die( '0' );
     
    10901093    require_once ABSPATH . 'wp-admin/includes/internal-linking.php';
    10911094
     1095    check_ajax_referer( 'internal-linking', '_ajax_linking_nonce' );
     1096
    10921097    $args = array();
    10931098
Note: See TracChangeset for help on using the changeset viewer.