Changeset 3759 for trunk/wp-admin/edit-form-advanced.php

Timestamp:

05/02/2006 10:36:06 PM (20 years ago)

Author:

ryan

Message:

Nonce from above. #2678

File:

• trunk/wp-admin/edit-form-advanced.php (modified) (2 diffs)

trunk/wp-admin/edit-form-advanced.php

@@ -23 +23 @@
     $temp_ID = -1 * time();
     $form_extra = "<input type='hidden' id='post_ID' name='temp_ID' value='$temp_ID' />";
+    wp_nonce_field('add-post');
 } else {
     $form_action = 'editpost';
     $form_extra = "<input type='hidden' id='post_ID' name='post_ID' value='$post_ID' />";
+    wp_nonce_field('update-post' .  $post_ID);
 }
 
@@ -174 +176 @@
 if (current_user_can('upload_files')) {
     $uploading_iframe_ID = (0 == $post_ID ? $temp_ID : $post_ID);
-    $uploading_iframe_src = "inline-uploading.php?action=view&amp;post=$uploading_iframe_ID";
+    $uploading_iframe_src = wp_nonce_url("inline-uploading.php?action=view&amp;post=$uploading_iframe_ID", 'inlineuploading');
     $uploading_iframe_src = apply_filters('uploading_iframe_src', $uploading_iframe_src);
     if ( false != $uploading_iframe_src )