Changeset 3759 for trunk/wp-admin/post.php

Timestamp:

05/02/2006 10:36:06 PM (20 years ago)

Author:

ryan

Message:

Nonce from above. #2678

File:

• trunk/wp-admin/post.php (modified) (4 diffs)

trunk/wp-admin/post.php

@@ -25 +25 @@
 case 'postajaxpost':
 case 'post':
-    check_admin_referer();
+    check_admin_referer('add-post');
     
     $post_ID = 'post' == $action ? write_post() : edit_post();
@@ -79 +79 @@
 
 case 'editattachment':
-    check_admin_referer();
+    $post_id = (int) $_POST['post_ID'];
 
-    $post_id = (int) $_POST['post_ID'];
+    check_admin_referer('update-attachment' . $post_id);
 
     // Don't let these be changed
@@ -97 +97 @@
 
 case 'editpost':
-    check_admin_referer();
+    $post_ID = (int) $_POST['post_ID'];
+    check_admin_referer('update-post' . $post_ID);
     
     $post_ID = edit_post();
@@ -122 +123 @@
 
 case 'delete':
-    check_admin_referer();
-
     $post_id = (isset($_GET['post']))  ? intval($_GET['post']) : intval($_POST['post_ID']);
+    check_admin_referer('delete-post' . $post_id);
 
     $post = & get_post($post_id);