Changeset 3759 for trunk/wp-admin/edit-page-form.php

Timestamp:

05/02/2006 10:36:06 PM (19 years ago)

Author:

ryan

Message:

Nonce from above. #2678

File:

• trunk/wp-admin/edit-page-form.php (modified) (3 diffs)

trunk/wp-admin/edit-page-form.php

@@ -6 +6 @@
 if (0 == $post_ID) {
     $form_action = 'post';
+    $nonce_action = 'add-page';
     $temp_ID = -1 * time();
     $form_extra = "<input type='hidden' id='post_ID' name='temp_ID' value='$temp_ID' />";
 } else {
     $form_action = 'editpost';
+    $nonce_action = 'update-page' . $post_ID;
     $form_extra = "<input type='hidden' id='post_ID' name='post_ID' value='$post_ID' />";
 }
@@ -24 +26 @@
 
 <?php
+wp_nonce_field($nonce_action);
+
 if (isset($mode) && 'bookmarklet' == $mode) {
     echo '<input type="hidden" name="mode" value="bookmarklet" />';
@@ -151 +155 @@
 if (current_user_can('upload_files')) {
     $uploading_iframe_ID = (0 == $post_ID ? $temp_ID : $post_ID);
-    $uploading_iframe_src = "inline-uploading.php?action=view&amp;post=$uploading_iframe_ID";
+    $uploading_iframe_src = wp_nonce_url("inline-uploading.php?action=view&amp;post=$uploading_iframe_ID", 'inlineuploading');
     $uploading_iframe_src = apply_filters('uploading_iframe_src', $uploading_iframe_src);
     if ( false != $uploading_iframe_src )