Changeset 6761 for trunk/wp-admin/admin-ajax.php

Timestamp:

02/08/2008 07:57:50 PM (19 years ago)

Author:

ryan

Message:

Postbox save updates and admin js refactoring from nbachiyski. fixes #5799

File:

• trunk/wp-admin/admin-ajax.php (modified) (1 diff)

trunk/wp-admin/admin-ajax.php

@@ -514 +514 @@
 break;
 case 'closed-postboxes' :
-        check_ajax_referer( $action );
-        $closed = explode(',', $_POST['closed']);
+        check_ajax_referer( 'closedpostboxes', 'closedpostboxesnonce' );
+        $closed = isset( $_POST['closed'] )? $_POST['closed'] : '';
+        $closed = explode( ',', $_POST['closed'] );
+        $page = isset( $_POST['page'] )? $_POST['page'] : '';
+        if ( !preg_match( '/^[a-z-]+$/', $page ) ) {
+                die(-1);
+        }
         if (!is_array($closed)) break;
         $current_user = wp_get_current_user();
-        update_usermeta($current_user->ID, 'closedpostboxes', $closed);
+        update_usermeta($current_user->ID, 'closedpostboxes_'.$page, $closed);
 break;
 case 'sample-permalink':