Changeset 9607 for trunk/wp-admin/edit-pages.php

Timestamp:

11/11/2008 11:34:08 AM (18 years ago)

Author:

azaozz

Message:

Add check for bulk-edit when deleting posts/pages, see #8135

File:

• trunk/wp-admin/edit-pages.php (modified) (4 diffs)

trunk/wp-admin/edit-pages.php

@@ -16 +16 @@
         switch ( $doaction ) {
                 case 'delete':
-                        if ( isset($_GET['post']) && (isset($_GET['doaction']) || isset($_GET['doaction2'])) ) {
+                        if ( isset($_GET['post']) && ! isset($_GET['bulk_edit']) && (isset($_GET['doaction']) || isset($_GET['doaction2'])) ) {
                                 check_admin_referer('bulk-pages');
                                 foreach( (array) $_GET['post'] as $post_id_del ) {
@@ -35 +35 @@
                         break;
                 case 'edit':
-                        if ( isset($_GET['post']) ) {
+                        if ( isset($_GET['post']) && isset($_GET['bulk_edit']) ) {
                                 check_admin_referer('bulk-pages');
 
@@ -49 +49 @@
                         break;
         }
+
         $sendback = wp_get_referer();
         if (strpos($sendback, 'page.php') !== false) $sendback = admin_url('page-new.php');
@@ -121 +122 @@
         printf( __ngettext( '%s page not updated, somebody is editing it.', '%s pages not updated, somebody is editing them.', $_GET['locked'] ), number_format_i18n( $_GET['skipped'] ) );
         unset($_GET['locked']);
-} ?>
+}
+$_SERVER['REQUEST_URI'] = remove_query_arg( array('locked', 'skipped', 'updated'), $_SERVER['REQUEST_URI'] );
+?>
 </p></div>
 <?php } ?>