sergiotarxz/Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Use check_ajax_referer()

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@14722 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ryan Boren 2010-05-18 14:51:15 +00:00
parent e005e28966
commit 797463a31a
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
wp-admin/admin-ajax.php
View File

@ -401,7 +401,7 @@ case 'delete-link' :
break;
case 'delete-menu-item' :
$menu_item_id = (int) $_POST['menu-item'];
check_admin_referer( 'delete-menu_item_' . $menu_item_id );
check_ajax_referer( 'delete-menu_item_' . $menu_item_id );
if ( ! current_user_can( 'edit_theme_options' ) )
die('-1');
@ -823,7 +823,7 @@ case 'add-menu-item' :
if ( ! current_user_can( 'edit_theme_options' ) )
die('-1');
check_admin_referer( 'add-menu_item', 'menu-settings-column-nonce' );
check_ajax_referer( 'add-menu_item', 'menu-settings-column-nonce' );
require_once ABSPATH . 'wp-admin/includes/nav-menu.php';