Changeset 17568 for trunk/wp-admin/media-upload.php

Timestamp:

03/28/2011 09:30:59 PM (14 years ago)

Author:

ryan

Message:

Add some nonce checks to the uploaders. Props duck_. For trunk.

File:

• trunk/wp-admin/media-upload.php (modified) (1 diff)

trunk/wp-admin/media-upload.php

@@ -39 +39 @@
 
     if ( isset($_POST['html-upload']) && !empty($_FILES) ) {
+        check_admin_referer('media-form');
         // Upload File button was clicked
         $id = media_handle_upload('async-upload', $_REQUEST['post_id']);