Changeset 3827

Timestamp:

06/01/2006 04:59:55 PM (20 years ago)

Author:

ryan

Message:

Comment nonce fixes from Mark Jaquith and mdawaffe. fixes #2760

Location:

trunk/wp-admin

Files:

• comment.php (modified) (2 diffs)
• edit-form-comment.php (modified) (1 diff)

trunk/wp-admin/comment.php

@@ -185 +185 @@
 case 'editedcomment':
 
-    check_admin_referer('update-comment');
+    $comment_id = (int) $_POST['comment_ID'];
+
+    check_admin_referer('update-comment_' . $comment_id);
 
     edit_comment();
@@ -193 +195 @@
         header('Location: ' . $referredby);
     } else {
-        header ("Location: edit.php?p=$comment_post_ID&c=1#comments");
+        header ("Location: edit.php?p=$comment_id&c=1#comments");
     }
 

trunk/wp-admin/edit-form-comment.php

@@ -7 +7 @@
 
 <form name="post" action="comment.php" method="post" id="post">
-<?php wp_nonce_field('update-comment' . $comment->comment_ID) ?>
+<?php wp_nonce_field('update-comment_' . $comment->comment_ID) ?>
 <div class="wrap">
 <input type="hidden" name="user_ID" value="<?php echo $user_ID ?>" />