diff --git a/wp-admin/post.php b/wp-admin/post.php index 9bbf042e7b..ff0e7fefad 100644 --- a/wp-admin/post.php +++ b/wp-admin/post.php @@ -376,8 +376,8 @@ switch($action) { if ($user_level == 0) die ('Cheatin’ uh?'); - $post_id = $HTTP_GET_VARS['post']; - $postdata = get_postdata($post) or die('Oops, no post with this ID. Go back!'); + $post_id = intval($HTTP_GET_VARS['post']); + $postdata = get_postdata($post_id) or die('Oops, no post with this ID. Go back!'); $authordata = get_userdata($postdata['Author_ID']); if ($user_level < $authordata->user_level)