Make WordPress Core


Ignore:
Timestamp:
05/07/2007 03:56:53 PM (19 years ago)
Author:
ryan
Message:

Add nonces to importers

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/import/blogger.php

    r5087 r5404  
    744744    // Step 9: Congratulate the user
    745745    function congrats() {
     746        $blog = (int) $_GET['blog'];
    746747        echo '<h1>'.__('Congratulations!').'</h1><p>'.__('Now that you have imported your Blogger blog into WordPress, what are you going to do? Here are some suggestions:').'</p><ul><li>'.__('That was hard work! Take a break.').'</li>';
    747748        if ( count($this->import['blogs']) > 1 )
    748749            echo '<li>'.__('In case you haven\'t done it already, you can import the posts from your other blogs:'). $this->show_blogs() . '</li>';
    749         if ( $n = count($this->import['blogs'][$_GET['blog']]['newusers']) )
     750        if ( $n = count($this->import['blogs'][$blog]['newusers']) )
    750751            echo '<li>'.sprintf(__('Go to <a href="%s" target="%s">Authors &amp; Users</a>, where you can modify the new user(s) or delete them. If you want to make all of the imported posts yours, you will be given that option when you delete the new authors.'), 'users.php', '_parent').'</li>';
    751752        echo '<li>'.__('For security, click the link below to reset this importer.').'</li>';
     
    766767        if ( isset( $_REQUEST['blog'] ) ) {
    767768            $blog = is_array($_REQUEST['blog']) ? array_shift( array_keys( $_REQUEST['blog'] ) ) : $_REQUEST['blog'];
     769            $blog = (int) $blog;
    768770            $this->import_blog( $blog );
    769771        } elseif ( isset($_GET['token']) )
Note: See TracChangeset for help on using the changeset viewer.