Changeset 3759 for trunk/wp-admin/inline-uploading.php

Timestamp:

05/02/2006 10:36:06 PM (19 years ago)

Author:

ryan

Message:

Nonce from above. #2678

File:

• trunk/wp-admin/inline-uploading.php (modified) (4 diffs)

trunk/wp-admin/inline-uploading.php

@@ -3 +3 @@
 require_once('admin.php');
 
-check_admin_referer();
+check_admin_referer('inlineuploading');
 
 header('Content-Type: text/html; charset=' . get_option('blog_charset'));
@@ -42 +42 @@
 wp_delete_attachment($attachment);
 
-header("Location: ".basename(__FILE__)."?post=$post&all=$all&action=view&start=$start");
+header("Location: ". wp_nonce_url(basename(__FILE__)."?post=$post&all=$all&action=view&start=$start", 'inlineuploading'));
 die;
 
@@ -101 +101 @@
 }
 
-header("Location: ".basename(__FILE__)."?post=$post&all=$all&action=view&start=0");
+header("Location: ". wp_nonce_url(basename(__FILE__)."?post=$post&all=$all&action=view&start=0", 'inlineuploading'));
 die();
 
@@ -140 +140 @@
 
 if ( count($attachments) == 0 ) {
-    header("Location: ".basename(__FILE__)."?post=$post&action=upload");
+    header("Location: ". wp_nonce_url(basename(__FILE__)."?post=$post&action=upload", 'inlineuploading') );
     die;
 } elseif ( count($attachments) > $num ) {