Changeset 3759 for trunk/wp-admin/users.php

Timestamp:

05/02/2006 10:36:06 PM (19 years ago)

Author:

ryan

Message:

Nonce from above. #2678

File:

• trunk/wp-admin/users.php (modified) (7 diffs)

trunk/wp-admin/users.php

@@ -12 +12 @@
 
 case 'promote':
-    check_admin_referer();
+    check_admin_referer('bulk-users');
 
     if (empty($_POST['users'])) {
@@ -40 +40 @@
 case 'dodelete':
 
-    check_admin_referer();
+    check_admin_referer('delete-users');
 
     if ( empty($_POST['users']) ) {
@@ -73 +73 @@
 case 'delete':
 
-    check_admin_referer();
+    check_admin_referer('bulk-users');
 
     if (empty($_POST['users'])) {
@@ -87 +87 @@
 ?>
 <form action="" method="post" name="updateusers" id="updateusers">
+<?php wp_nonce_field('delete-users') ?>
 <div class="wrap">
 <h2><?php _e('Delete Users'); ?></h2>
@@ -132 +133 @@
 
 case 'adduser':
-    check_admin_referer();
+    check_admin_referer('add-user');
 
     $user_id = add_user();
@@ -206 +207 @@
 
 <form action="" method="post" name="updateusers" id="updateusers">
+<?php wp_nonce_field('bulk-users') ?>
 <div class="wrap">
     <h2><?php _e('User List by Role'); ?></h2>
@@ -258 +260 @@
 <?php echo '<p>'.sprintf(__('Users can <a href="%1$s">register themselves</a> or you can manually create users here.'), get_settings('siteurl').'/wp-register.php').'</p>'; ?>
 <form action="" method="post" name="adduser" id="adduser">
+  <?php wp_nonce_field('add-user') ?>
   <table class="editform" width="100%" cellspacing="2" cellpadding="5">
     <tr>