Changeset 3759 for trunk/wp-admin/categories.php

Timestamp:

05/02/2006 10:36:06 PM (20 years ago)

Author:

ryan

Message:

Nonce from above. #2678

File:

• trunk/wp-admin/categories.php (modified) (5 diffs)

trunk/wp-admin/categories.php

@@ -25 +25 @@
 case 'addcat':
 
-        check_admin_referer();
+        check_admin_referer('add-category');
 
         if ( !current_user_can('manage_categories') )
@@ -36 +36 @@
 
 case 'delete':
-
-        check_admin_referer();
+        $cat_ID = (int) $_GET['cat_ID'];
+        check_admin_referer('delete-category' .  $cat_ID);
 
         if ( !current_user_can('manage_categories') )
                 die (__('Cheatin’ uh?'));
 
-        $cat_ID = (int) $_GET['cat_ID'];
         $cat_name = get_catname($cat_ID);
 
@@ -68 +67 @@
  <h2><?php _e('Edit Category') ?></h2>
  <form name="editcat" action="categories.php" method="post">
+          <?php wp_nonce_field('update-category' .  $category->cat_ID); ?>
           <table class="editform" width="100%" cellspacing="2" cellpadding="5">
                 <tr>
@@ -100 +100 @@
 
 case 'editedcat':
-        check_admin_referer();
+        $cat_ID = (int) $_POST['cat_ID'];
+        check_admin_referer('update-category' . $cat_ID);
 
         if ( !current_user_can('manage_categories') )
@@ -158 +159 @@
     <h2><?php _e('Add New Category') ?></h2>
     <form name="addcat" id="addcat" action="categories.php" method="post">
+        <?php wp_nonce_field('add-category'); ?>
         <div class="alignleft"><?php _e('Name:') ?><br />
         <input type="text" name="cat_name" id="cat_name" value="" /></p>