Add referer checks. Props masquerade.

git-svn-id: https://develop.svn.wordpress.org/trunk@3618 602fd350-edb4-49c9-b593-d223f7449a82

wp-admin/post.php

@@ -23,7 +23,8 @@ $action = "delete";
 
 switch($action) {
 case 'post':
-
+	check_admin_referer();
+	
 	$post_ID = write_post();
 
 	// Redirect.
@@ -92,6 +93,8 @@ case 'editattachment':
 		add_post_meta($post_id, '_wp_attachment_metadata', $newmeta);
 
 case 'editpost':
+	check_admin_referer();
+	
 	$post_ID = edit_post();
 
 	if ($_POST['save']) {