Changeset 33544

Timestamp:

08/03/2015 09:12:16 PM (9 years ago)

Author:

ocean90

Message:

Heartbeat: Ensure post locks are released.

Merge of [33542] to the 4.1 branch.

Location:

branches/4.1/src/wp-admin

Files:

• includes/post.php (modified) (1 diff)
• post.php (modified) (1 diff)

branches/4.1/src/wp-admin/includes/post.php

@@ -1474 +1474 @@
         if ( $override ) {
             ?>
-            <a class="button button-primary wp-tab-last" href="<?php echo esc_url( add_query_arg( 'get-post-lock', '1', get_edit_post_link( $post->ID, 'url' ) ) ); ?>"><?php _e('Take over'); ?></a>
+            <a class="button button-primary wp-tab-last" href="<?php echo esc_url( add_query_arg( 'get-post-lock', '1', wp_nonce_url( get_edit_post_link( $post->ID, 'url' ), 'lock-post_' . $post->ID ) ) ); ?>"><?php _e('Take over'); ?></a>
             <?php
         }

branches/4.1/src/wp-admin/post.php

@@ -159 +159 @@
 
     if ( ! empty( $_GET['get-post-lock'] ) ) {
+        check_admin_referer( 'lock-post_' . $post_id );
         wp_set_post_lock( $post_id );
         wp_redirect( get_edit_post_link( $post_id, 'url' ) );