Use check_ajax_referer()
git-svn-id: http://svn.automattic.com/wordpress/trunk@14722 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
parent
77a67b3fed
commit
4315c69c17
|
@ -401,7 +401,7 @@ case 'delete-link' :
|
||||||
break;
|
break;
|
||||||
case 'delete-menu-item' :
|
case 'delete-menu-item' :
|
||||||
$menu_item_id = (int) $_POST['menu-item'];
|
$menu_item_id = (int) $_POST['menu-item'];
|
||||||
check_admin_referer( 'delete-menu_item_' . $menu_item_id );
|
check_ajax_referer( 'delete-menu_item_' . $menu_item_id );
|
||||||
if ( ! current_user_can( 'edit_theme_options' ) )
|
if ( ! current_user_can( 'edit_theme_options' ) )
|
||||||
die('-1');
|
die('-1');
|
||||||
|
|
||||||
|
@ -823,7 +823,7 @@ case 'add-menu-item' :
|
||||||
if ( ! current_user_can( 'edit_theme_options' ) )
|
if ( ! current_user_can( 'edit_theme_options' ) )
|
||||||
die('-1');
|
die('-1');
|
||||||
|
|
||||||
check_admin_referer( 'add-menu_item', 'menu-settings-column-nonce' );
|
check_ajax_referer( 'add-menu_item', 'menu-settings-column-nonce' );
|
||||||
|
|
||||||
require_once ABSPATH . 'wp-admin/includes/nav-menu.php';
|
require_once ABSPATH . 'wp-admin/includes/nav-menu.php';
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue