Changeset 3771 for branches/2.0/wp-admin/categories.php

Timestamp:

05/11/2006 11:05:45 PM (20 years ago)

Author:

ryan

Message:

Backport nonces and pluggable cookies.

File:

• branches/2.0/wp-admin/categories.php (modified) (5 diffs)

branches/2.0/wp-admin/categories.php

@@ -26 +26 @@
 case 'addcat':
 
-    check_admin_referer();
+    check_admin_referer('add-category');
 
     if ( !current_user_can('manage_categories') )
@@ -37 +37 @@
 
 case 'delete':
-
-    check_admin_referer();
+    $cat_ID = (int) $_GET['cat_ID'];
+    check_admin_referer('delete-category' .  $cat_ID);
 
     if ( !current_user_can('manage_categories') )
         die (__('Cheatin’ uh?'));
 
-    $cat_ID = (int) $_GET['cat_ID'];
     $cat_name = get_catname($cat_ID);
 
@@ -65 +64 @@
  <h2><?php _e('Edit Category') ?></h2>
  <form name="editcat" action="categories.php" method="post">
+      <?php wp_nonce_field('update-category' .  $category->cat_ID); ?>
       <table class="editform" width="100%" cellspacing="2" cellpadding="5">
         <tr>
@@ -97 +97 @@
 
 case 'editedcat':
-    check_admin_referer();
+    $cat_ID = (int) $_POST['cat_ID'];
+    check_admin_referer('update-category' . $cat_ID);
 
     if ( !current_user_can('manage_categories') )
@@ -151 +152 @@
     <h2><?php _e('Add New Category') ?></h2>
     <form name="addcat" id="addcat" action="categories.php" method="post">
-        
+    <?php wp_nonce_field('add-category'); ?>
         <p><?php _e('Name:') ?><br />
         <input type="text" name="cat_name" value="" /></p>