Changeset 5404 for trunk/wp-admin/import/wordpress.php

Timestamp:

05/07/2007 03:56:53 PM (18 years ago)

Author:

ryan

Message:

Add nonces to importers

File:

• trunk/wp-admin/import/wordpress.php (modified) (2 diffs)

trunk/wp-admin/import/wordpress.php

@@ -160 +160 @@
         echo '<ol id="authors">';
         echo '<form action="?import=wordpress&amp;step=2&amp;id=' . $this->id . '" method="post">';
+        wp_nonce_field('import-wordpress');
         $j = -1;
         foreach ($authors as $author) {
@@ -364 +365 @@
                 break;
             case 1 :
+                check_admin_referer('import-upload');
                 $this->select_authors();
                 break;
             case 2:
+                check_admin_referer('import-wordpress');
                 $this->import();
                 break;