Changeset 3759 for trunk/wp-admin/plugin-editor.php

Timestamp:

05/02/2006 10:36:06 PM (20 years ago)

Author:

ryan

Message:

Nonce from above. #2678

File:

• trunk/wp-admin/plugin-editor.php (modified) (2 diffs)

trunk/wp-admin/plugin-editor.php

@@ -35 +35 @@
 case 'update':
 
-    check_admin_referer();
+    check_admin_referer('edit-plugin' . $file);
 
     if ( !current_user_can('edit_plugins') )
@@ -98 +98 @@
     <?php   if (!$error) { ?> 
   <form name="template" id="template" action="plugin-editor.php" method="post">
+  <?php wp_nonce_field('edit-plugin' . $file) ?>
          <div><textarea cols="70" rows="25" name="newcontent" id="newcontent" tabindex="1"><?php echo $content ?></textarea> 
      <input type="hidden" name="action" value="update" />