Make WordPress Core


Ignore:
Timestamp:
05/02/2006 10:36:06 PM (20 years ago)
Author:
ryan
Message:

Nonce from above. #2678

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/themes.php

    r3517 r3759  
    33
    44if ( isset($_GET['action']) ) {
    5     check_admin_referer();
     5    check_admin_referer('switch-theme' . $_GET['template']);
    66
    77    if ('activate' == $_GET['action']) {
     
    7070    $screenshot = $themes[$theme_name]['Screenshot'];
    7171    $stylesheet_dir = $themes[$theme_name]['Stylesheet Dir'];
    72     $activate_link = "themes.php?action=activate&template=$template&stylesheet=$stylesheet";
     72    $activate_link = wp_nonce_url("themes.php?action=activate&template=$template&stylesheet=$stylesheet", 'switch-theme' . $template);
    7373?>
    7474<div class="available-theme">
Note: See TracChangeset for help on using the changeset viewer.