From 7a2c1664ee16146d4074581dbb3fba4642793681 Mon Sep 17 00:00:00 2001
From: Ryan Boren <ryan@git.wordpress.org>
Date: Thu, 4 May 2006 09:20:44 +0000
Subject: [PATCH] A couple more nonces. #2678

git-svn-id: https://develop.svn.wordpress.org/trunk@3760 602fd350-edb4-49c9-b593-d223f7449a82
---
 wp-admin/link-import.php | 3 ++-
 wp-admin/user-edit.php   | 3 ++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/wp-admin/link-import.php b/wp-admin/link-import.php
index 73a7ae17b3..352b6e7c96 100644
--- a/wp-admin/link-import.php
+++ b/wp-admin/link-import.php
@@ -24,6 +24,7 @@ switch ($step) {
 <div class="wrap">
 <h2><?php _e('Import your blogroll from another system') ?> </h2>
 <form enctype="multipart/form-data" action="link-import.php" method="post" name="blogroll">
+<?php wp_nonce_field('import-bookmarks') ?>
 
 <p><?php _e('If a program or website you use allows you to export your bookmarks or subscriptions as OPML you may import them here.'); ?>
 <div style="width: 70%; margin: auto; height: 8em;">
@@ -63,7 +64,7 @@ foreach ($categories as $category) {
             } // end case 0
 
     case 1: {
-		check_admin_referer();
+		check_admin_referer('import-bookmarks');
 
                 include_once('admin-header.php');
                 if ( !current_user_can('manage_links') )
diff --git a/wp-admin/user-edit.php b/wp-admin/user-edit.php
index 615e0cf11e..f81884aab3 100644
--- a/wp-admin/user-edit.php
+++ b/wp-admin/user-edit.php
@@ -32,7 +32,7 @@ break;
 
 case 'update':
 
-check_admin_referer();
+check_admin_referer('update-user' . $user_id);
 
 if (!current_user_can('edit_users'))
 	$errors = new WP_Error('head', __('You do not have permission to edit this user.'));
@@ -74,6 +74,7 @@ if (!current_user_can('edit_users'))
 <h2><?php _e('Edit User'); ?></h2>
 
 <form name="profile" id="your-profile" action="user-edit.php" method="post">
+<?php wp_nonce_field('update-user' . $user_ID) ?>
 <p>
 <input type="hidden" name="from" value="profile" />
 <input type="hidden" name="checkuser_id" value="<?php echo $user_ID ?>" />