Changeset 3771 for branches/2.0/wp-admin/post.php

Timestamp:

05/11/2006 11:05:45 PM (20 years ago)

Author:

ryan

Message:

Backport nonces and pluggable cookies.

File:

• branches/2.0/wp-admin/post.php (modified) (9 diffs)

branches/2.0/wp-admin/post.php

@@ -31 +31 @@
 switch($action) {
 case 'post':
-        check_admin_referer();
+        check_admin_referer('add-post');
         
         $post_ID = write_post();
@@ -88 +88 @@
 
 case 'editattachment':
-        check_admin_referer();
-
         $post_id = (int) $_POST['post_ID'];
+
+        check_admin_referer('update-attachment' . $post_id);
 
         // Don't let these be changed
@@ -106 +106 @@
 
 case 'editpost':
-        check_admin_referer();
+        $post_ID = (int) $_POST['post_ID'];
+        check_admin_referer('update-post' . $post_ID);
         
         $post_ID = edit_post();
@@ -131 +132 @@
 
 case 'delete':
-        check_admin_referer();
-
         $post_id = (isset($_GET['post']))  ? intval($_GET['post']) : intval($_POST['post_ID']);
+        check_admin_referer('delete-post' . $post_id);
 
         $post = & get_post($post_id);
@@ -213 +213 @@
 
 case 'deletecomment':
-
-        check_admin_referer();
-
-        $comment = (int) $_GET['comment'];
+        $comment = (int) $_GET['comment'];
+        check_admin_referer('delete-comment' . $comment);
+
         $p = (int) $_GET['p'];
         if (isset($_GET['noredir'])) {
@@ -244 +243 @@
 
 case 'unapprovecomment':
-
-        check_admin_referer();
-
-        $comment = (int) $_GET['comment'];
+        $comment = (int) $_GET['comment'];
+        check_admin_referer('unapprove-comment' . $comment);
+
         $p = (int) $_GET['p'];
         if (isset($_GET['noredir'])) {
@@ -272 +270 @@
 
 case 'mailapprovecomment':
-
-        $comment = (int) $_GET['comment'];
+        $comment = (int) $_GET['comment'];
+        check_admin_referer('approve-comment' . $comment);
 
         if ( ! $comment = get_comment($comment) )
@@ -292 +290 @@
 
 case 'approvecomment':
-
-        check_admin_referer();
-
-        $comment = (int) $_GET['comment'];
+        $comment = (int) $_GET['comment'];
+        check_admin_referer('approve-comment' . $comment);
+
         $p = (int) $_GET['p'];
         if (isset($_GET['noredir'])) {
@@ -325 +322 @@
 case 'editedcomment':
 
-        check_admin_referer();
+        check_admin_referer('update-comment');
 
         edit_comment();