Changeset 33542

Timestamp:

08/03/2015 09:11:35 PM (9 years ago)

Author:

ocean90

Message:

Heartbeat: Ensure post locks are released.

Location:

trunk/src/wp-admin

Files:

• includes/post.php (modified) (1 diff)
• post.php (modified) (1 diff)

trunk/src/wp-admin/includes/post.php

@@ -1569 +1569 @@
         if ( $override ) {
             ?>
-            <a class="button button-primary wp-tab-last" href="<?php echo esc_url( add_query_arg( 'get-post-lock', '1', get_edit_post_link( $post->ID, 'url' ) ) ); ?>"><?php _e('Take over'); ?></a>
+            <a class="button button-primary wp-tab-last" href="<?php echo esc_url( add_query_arg( 'get-post-lock', '1', wp_nonce_url( get_edit_post_link( $post->ID, 'url' ), 'lock-post_' . $post->ID ) ) ); ?>"><?php _e('Take over'); ?></a>
             <?php
         }

trunk/src/wp-admin/post.php

@@ -166 +166 @@
 
     if ( ! empty( $_GET['get-post-lock'] ) ) {
+        check_admin_referer( 'lock-post_' . $post_id );
         wp_set_post_lock( $post_id );
         wp_redirect( get_edit_post_link( $post_id, 'url' ) );