golem
/
twentyGOLEM
9
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

using check_admin_referer for deletions 

git-svn-id: http://svn.automattic.com/wordpress/trunk@1298 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
michelvaldrighi 2004-05-17 19:44:53 +00:00
parent 9af64b9a69
commit cc35b0c6bd
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
wp-admin/categories.php
View File

@ -62,6 +62,8 @@ case 'Delete':
$standalone = 1;
require_once('admin-header.php');
check_admin_referer();
$cat_ID = intval($_GET["cat_ID"]);
$cat_name = get_catname($cat_ID);
$cat_name = addslashes($cat_name);

6
wp-admin/post.php
View File

@ -429,6 +429,8 @@ case 'delete':
$standalone = 1;
require_once('./admin-header.php');
check_admin_referer();
if ($user_level == 0)
die ('Cheatin’ uh?');
@ -527,6 +529,8 @@ case 'deletecomment':
$standalone = 1;
require_once('./admin-header.php');
check_admin_referer();
if ($user_level == 0)
die (__('Cheatin’ uh?'));
@ -562,6 +566,8 @@ case 'unapprovecomment':
$standalone = 1;
require_once('./admin-header.php');
check_admin_referer();
if ($user_level == 0)
die (__('Cheatin’ uh?'));