From a0b579b5e4e8f2ec6d73f6fac44fd4183e128ed6 Mon Sep 17 00:00:00 2001
From: Ryan Boren <ryan@git.wordpress.org>
Date: Thu, 23 Dec 2010 15:56:32 +0000
Subject: [PATCH] Check bulk-themes nonce before bulk delete. fixes #15922

git-svn-id: https://develop.svn.wordpress.org/trunk@17121 602fd350-edb4-49c9-b593-d223f7449a82
---
 wp-admin/network/themes.php | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/wp-admin/network/themes.php b/wp-admin/network/themes.php
index dd7b6e6999..4105647017 100644
--- a/wp-admin/network/themes.php
+++ b/wp-admin/network/themes.php
@@ -85,7 +85,7 @@ if ( $action ) {
 
 			$main_theme = get_current_theme();
 			$files_to_delete = $theme_info = array();
-			foreach( $themes as $key => $theme ) {
+			foreach ( $themes as $key => $theme ) {
 				$data = get_theme_data( WP_CONTENT_DIR . '/themes/' . $theme . '/style.css' );
 				if ( $data['Name'] == $main_theme ) {
 					unset( $themes[$key] );
@@ -99,7 +99,7 @@ if ( $action ) {
 				wp_redirect( add_query_arg( 'error', 'main', wp_get_referer() ) );
 				exit;
 			}
-			
+
 			include(ABSPATH . 'wp-admin/update.php');
 
 			$parent_file = 'themes.php';
@@ -148,8 +148,9 @@ if ( $action ) {
 				<?php
 				require_once(ABSPATH . 'wp-admin/admin-footer.php');
 				exit;
-			} //Endif verify-delete
-			foreach( $themes as $theme )
+			} // Endif verify-delete
+			check_admin_referer('bulk-themes');
+			foreach ( $themes as $theme )
 				$delete_result = delete_theme( $theme );
 			wp_redirect( network_admin_url( 'themes.php?deleted=true' ) );
 			exit;