save_post action hook called before post-new.php is loaded
|Reported by:||duck_||Owned by:|
Since r12987 new posts/pages are being saved into database as auto-drafts, this means that the save_post action hook is called as post-new.php is loading ($post = get_default_post_to_edit( $post_type, true ); on line 55).
Unfortunately any plugin or theme following the codex on adding meta boxes may run into trouble with nonce protection. Whenever a user goes to create a new post/page myplugin_save_postdata (function from codex example) will be called (because of the save_post action). However, the custom nonce will not exist since the function to create the meta box hasn't been called.
I guess best fix might be just to change the instructions.
Change History (4)
- Component changed from General to Inline Docs
- Milestone changed from Awaiting Review to WordPress.org site