Changeset 3759 for trunk/wp-admin/page.php

Timestamp:

05/02/2006 10:36:06 PM (20 years ago)

Author:

ryan

Message:

Nonce from above. #2678

File:

• trunk/wp-admin/page.php (modified) (4 diffs)

trunk/wp-admin/page.php

@@ -25 +25 @@
 switch($action) {
 case 'post':
-
+    check_admin_referer('add-page');
     $page_ID = write_post();
 
@@ -77 +77 @@
 case 'editattachment':
     $page_id = $post_ID = (int) $_POST['post_ID'];
+    check_admin_referer('update-attachment' . $page_id);
 
     // Don't let these be changed
@@ -92 +93 @@
 
 case 'editpost':
+    $page_ID = (int) $_POST['post_ID'];
+    check_admin_referer('update-page' . $page_ID);
+
     $page_ID = edit_post();
 
@@ -115 +119 @@
 
 case 'delete':
-    check_admin_referer();
-
     $page_id = (isset($_GET['post']))  ? intval($_GET['post']) : intval($_POST['post_ID']);
+    check_admin_referer('delete-page' .  $page_id);
 
     $page = & get_post($page_id);