Changeset 3826

Timestamp:

06/01/2006 04:58:44 PM (20 years ago)

Author:

ryan

Message:

Comment nonce fixes from Mark Jaquith and mdawaffe. fixes #2760

Location:

branches/2.0/wp-admin

Files:

• edit-form-comment.php (modified) (1 diff)
• post.php (modified) (1 diff)

branches/2.0/wp-admin/edit-form-comment.php

@@ -7 +7 @@
 
 <form name="post" action="post.php" method="post" id="post">
-<?php wp_nonce_field('update-comment' . $comment->comment_ID) ?>
+<?php wp_nonce_field('update-comment_' . $comment->comment_ID) ?>
 <div class="wrap">
 <input type="hidden" name="user_ID" value="<?php echo $user_ID ?>" />

branches/2.0/wp-admin/post.php

@@ -323 +323 @@
 case 'editedcomment':
 
-    check_admin_referer('update-comment');
+    $comment_id = (int) $_POST['comment_ID'];
+    check_admin_referer('update-comment_' . $comment_id);
 
     edit_comment();