Changeset 5406 for branches/2.0/wp-admin/import/greymatter.php

Timestamp:

05/07/2007 04:10:20 PM (19 years ago)

Author:

ryan

Message:

Add nonces to importers

File:

• branches/2.0/wp-admin/import/greymatter.php (modified) (13 diffs)

branches/2.0/wp-admin/import/greymatter.php

@@ -7 +7 @@
         function header() {
                 echo '<div class="wrap">';
-                echo '<h2>'.__('Import Greymatter').'</h2>';
+                echo '<h2>'.__('Import GreyMatter').'</h2>';
         }
 
@@ -35 +35 @@
 <input type="hidden" name="import" value="greymatter" />
 <input type="hidden" name="step" value="1" />
+<?php wp_nonce_field('import-greymatter'); ?>
 <h3><?php _e('Second step: GreyMatter details:') ?></h3>
 <p><table cellpadding="0">
@@ -67 +68 @@
                 return($string);
         }
-        
+
         function import() {
                 global $wpdb;
-        
+
                 $wpvarstoreset = array('gmpath', 'archivespath', 'lastentry');
                 for ($i=0; $i<count($wpvarstoreset); $i += 1) {
@@ -88 +89 @@
 
                 if (!chdir($archivespath))
-                        die(sprintf(__("Wrong path, %s\ndoesn't exist\non the server"), $archivespath));
+                        wp_die(__("Wrong path, the path to the GM entries does not exist on the server"));
 
                 if (!chdir($gmpath))
-                        die(sprintf(__("Wrong path, %s\ndoesn't exist\non the server"), $gmpath));
-                        
+                        wp_die(__("Wrong path, the path to the GM files does not exist on the server"));
+
+                $lastentry = (int) $lastentry;
+
                 $this->header();
 ?>
@@ -129 +132 @@
                 $user_id = wp_insert_user($user_info);
                 $this->gmnames[$userdata[0]] = $user_id;
-                
+
                 printf('<li>'.__('user %s...').' <strong>'.__('Done').'</strong></li>', "<em>$user_login</em>");
         }
@@ -137 +140 @@
 
         chdir($archivespath);
-        
+
         for($i = 0; $i <= $lastentry; $i = $i + 1) {
-                
+
                 $entryfile = "";
-                
+
                 if ($i<10000000) {
                         $entryfile .= "0";
@@ -195 +198 @@
                         $comment_status = 'open';
                         $ping_status = 'closed';
-                        
+
                         if ($post_ID = post_exists($post_title, '', $post_date)) {
                                 echo ' ';
@@ -214 +217 @@
                                         $user_url=$wpdb->escape("");
                                         $user_joindate=$wpdb->escape($user_joindate);
-                                        
+
                                         $user_info = array("user_login"=>$user_login, "user_pass"=>$pass1, "user_nickname"=>$user_nickname, "user_email"=>$user_email, "user_url"=>$user_url, "user_ip"=>$user_ip, "user_domain"=>$user_domain, "user_browser"=>$user_browser, "dateYMDhour"=>$user_joindate, "user_level"=>0, "user_idmode"=>"nickname");
                                         $user_id = wp_insert_user($user_info);
                                         $this->gmnames[$postinfo[1]] = $user_id;
-                                        
+
                                         echo ': ';
                                         printf(__('registered deleted user %s at level 0 '), "<em>$user_login</em>");
                                 }
-                        
+
                                 if (array_key_exists($postinfo[1], $this->gmnames)) {
                                         $post_author = $this->gmnames[$postinfo[1]];
@@ -228 +231 @@
                                         $post_author = $user_id;
                                 }
-                        
+
                                 $postdata = compact('post_author', 'post_date', 'post_date_gmt', 'post_content', 'post_title', 'post_excerpt', 'post_status', 'comment_status', 'ping_status', 'post_modified', 'post_modified_gmt');
                                 $post_ID = wp_insert_post($postdata);
@@ -282 +285 @@
 </ul><strong><?php _e('Done') ?></strong></li></ul>
 <p>&nbsp;</p>
-<p><?php _e('Completed Greymatter import!') ?></p>
+<p><?php _e('Completed GreyMatter import!') ?></p>
 <?php
         $this->footer();
@@ -298 +301 @@
                                 break;
                         case 1:
+                                check_admin_referer('import-greymatter');
                                 $this->import();
                                 break;
@@ -304 +308 @@
 
         function GM_Import() {
-                // Nothing.     
+                // Nothing.
         }
 }
@@ -310 +314 @@
 $gm_import = new GM_Import();
 
-register_importer('greymatter', __('Greymatter'), __('Import posts and comments from your Greymatter blog'), array ($gm_import, 'dispatch'));
+register_importer('greymatter', __('GreyMatter'), __('Import users, posts, and comments from a Greymatter blog'), array ($gm_import, 'dispatch'));
 ?>