Changeset 8023

Timestamp:

05/30/2008 08:43:36 PM (17 years ago)

Author:

ryan

Message:

Add some noncing. Props andy.

Location:

trunk/wp-admin

Files:

• async-upload.php (modified) (1 diff)
• includes/media.php (modified) (1 diff)

trunk/wp-admin/async-upload.php

@@ -27 +27 @@
 }
 
+check_admin_referer('media-form');
+
 $id = media_handle_upload('async-upload', $_REQUEST['post_id']);
 if (is_wp_error($id)) {

trunk/wp-admin/includes/media.php

@@ -791 +791 @@
                 "post_id" : "<?php echo $post_id; ?>",
                 "auth_cookie" : "<?php echo $_COOKIE[AUTH_COOKIE]; ?>",
+                "_wpnonce" : "<?php echo wp_create_nonce('media-form'); ?>",
                 "type" : "<?php echo $type; ?>",
                 "tab" : "<?php echo $tab; ?>",