Changeset 3771 for branches/2.0/wp-admin/link-categories.php

Timestamp:

05/11/2006 11:05:45 PM (20 years ago)

Author:

ryan

Message:

Backport nonces and pluggable cookies.

File:

• branches/2.0/wp-admin/link-categories.php (modified) (7 diffs)

branches/2.0/wp-admin/link-categories.php

@@ -27 +27 @@
   case 'addcat':
   {
-      check_admin_referer();
+      check_admin_referer('add-link-category');
 
       if ( !current_user_can('manage_links') )
@@ -83 +83 @@
   case 'Delete':
   {
-    check_admin_referer();
-
-    $cat_id = (int) $_GET['cat_id'];
+        $cat_id = (int) $_GET['cat_id'];
+    check_admin_referer('delete-link-category' . $cat_id);
+
     $cat_name=get_linkcatname($cat_id);
 
@@ -117 +117 @@
 
   <form name="editcat" method="post">
+  <?php wp_nonce_field('update-link-category' . $row->cat_id) ?>
       <input type="hidden" name="action" value="editedcat" />
       <input type="hidden" name="cat_id" value="<?php echo $row->cat_id ?>" />
@@ -204 +205 @@
   case "editedcat":
   {
-    check_admin_referer();
+    $cat_id = (int)$_POST["cat_id"];
+    check_admin_referer('update-link-category' . $cat_id);
 
     if ( !current_user_can('manage_links') )
@@ -211 +213 @@
     $submit=$_POST["submit"];
     if (isset($submit)) {
-
-    $cat_id = (int)$_POST["cat_id"];
 
     $cat_name= wp_specialchars($_POST["cat_name"]);
@@ -357 +357 @@
                 <td><?php echo $row->list_limit ?></td>
                 <td><a href="link-categories.php?cat_id=<?php echo $row->cat_id?>&amp;action=Edit" class="edit"><?php _e('Edit') ?></a></td>
-                <td><a href="link-categories.php?cat_id=<?php echo $row->cat_id?>&amp;action=Delete" onclick="return deleteSomething( 'link category', <?php echo $row->cat_id . ", '" . sprintf(__("You are about to delete the &quot;%s&quot; link category.\\n&quot;Cancel&quot; to stop, &quot;OK&quot; to delete."), wp_specialchars($row->cat_name,1)); ?>' );" class="delete"><?php _e('Delete') ?></a></td>
+                <td><a href="<?php echo wp_nonce_url("link-categories.php?cat_id=$row->cat_id?>&amp;action=Delete", 'delete-link-category' . $row->cat_id) ?>" "onclick="return deleteSomething( 'link category', <?php echo $row->cat_id . ", '" . sprintf(__("You are about to delete the &quot;%s&quot; link category.\\n&quot;Cancel&quot; to stop, &quot;OK&quot; to delete."), wp_specialchars($row->cat_name,1)); ?>' );" class="delete"><?php _e('Delete') ?></a></td>
               </tr>
 <?php
@@ -372 +372 @@
 <div class="wrap">
     <form name="addcat" method="post">
+    <?php wp_nonce_field('add-link-category'); ?>
       <input type="hidden" name="action" value="addcat" />
           <h2><?php _e('Add a Link Category:') ?></h2>