Add referer check. Props masquerade.

git-svn-id: https://develop.svn.wordpress.org/trunk@3621 602fd350-edb4-49c9-b593-d223f7449a82
2006-03-06 08:32:20 +00:00 · 2006-03-06 08:32:20 +00:00 · e758b74575
parent 5b484ee182
commit e758b74575
1 changed files with 2 additions and 0 deletions
--- a/wp-admin/post.php
+++ b/wp-admin/post.php
@ -77,6 +77,8 @@ case 'edit':
 	break;

 case 'editattachment':
+	check_admin_referer();
+
 	$post_id = (int) $_POST['post_ID'];

 	// Don't let these be changed