sergiotarxz/Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add some noncing. Props andy.

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@8023 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ryan Boren 2008-05-30 20:43:36 +00:00
parent dd60c22172
commit 74226b61d4
2 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
wp-admin/async-upload.php
View File

@ -26,6 +26,8 @@ if ( ($id = intval($_REQUEST['attachment_id'])) && $_REQUEST['fetch'] ) {
exit; exit;
} }
check_admin_referer('media-form');
$id = media_handle_upload('async-upload', $_REQUEST['post_id']); $id = media_handle_upload('async-upload', $_REQUEST['post_id']);
if (is_wp_error($id)) { if (is_wp_error($id)) {
echo '<div id="media-upload-error">'.wp_specialchars($id->get_error_message()).'</div>'; echo '<div id="media-upload-error">'.wp_specialchars($id->get_error_message()).'</div>';

1
wp-admin/includes/media.php
View File

@ -790,6 +790,7 @@ jQuery(function($){
post_params : { post_params : {
"post_id" : "<?php echo $post_id; ?>", "post_id" : "<?php echo $post_id; ?>",
"auth_cookie" : "<?php echo $_COOKIE[AUTH_COOKIE]; ?>", "auth_cookie" : "<?php echo $_COOKIE[AUTH_COOKIE]; ?>",
"_wpnonce" : "<?php echo wp_create_nonce('media-form'); ?>",
"type" : "<?php echo $type; ?>", "type" : "<?php echo $type; ?>",
"tab" : "<?php echo $tab; ?>", "tab" : "<?php echo $tab; ?>",
"short" : "1" "short" : "1"