Changeset 3760 for trunk/wp-admin/user-edit.php

Timestamp:

05/04/2006 09:20:44 AM (20 years ago)

Author:

ryan

Message:

A couple more nonces. #2678

File:

• trunk/wp-admin/user-edit.php (modified) (2 diffs)

trunk/wp-admin/user-edit.php

@@ -33 +33 @@
 case 'update':
 
-check_admin_referer();
+check_admin_referer('update-user' . $user_id);
 
 if (!current_user_can('edit_users'))
@@ -75 +75 @@
 
 <form name="profile" id="your-profile" action="user-edit.php" method="post">
+<?php wp_nonce_field('update-user' . $user_ID) ?>
 <p>
 <input type="hidden" name="from" value="profile" />