golem
/
twentyGOLEM
9
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

nonce checks for site-themes. Props PeteMall. see #15969 

git-svn-id: http://svn.automattic.com/wordpress/trunk@17134 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
ryan 2010-12-24 17:59:58 +00:00
parent a60f2f3e82
commit 9e7327963f
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
wp-admin/network/site-themes.php
View File

@ -60,6 +60,7 @@ if ( $action ) {
switch ( $action ) {
case 'enable':
check_admin_referer( 'enable-theme_' . $_GET['theme'] );
$theme = $_GET['theme'];
$update = 'enabled';
if ( !$allowed_themes )
@ -68,6 +69,7 @@ if ( $action ) {
$allowed_themes[$theme] = true;
break;
case 'disable':
check_admin_referer( 'disable-theme_' . $_GET['theme'] );
$theme = $_GET['theme'];
$update = 'disabled';
if ( !$allowed_themes )
@ -76,6 +78,7 @@ if ( $action ) {
unset( $allowed_themes[$theme] );
break;
case 'enable-selected':
check_admin_referer( 'bulk-themes' );
if ( isset( $_POST['checked'] ) ) {
$update = 'enable';
$themes = (array) $_POST['checked'];
@ -86,6 +89,7 @@ if ( $action ) {
}
break;
case 'disable-selected':
check_admin_referer( 'bulk-themes' );
if ( isset( $_POST['checked'] ) ) {
$update = 'disable';
$themes = (array) $_POST['checked'];