using check_admin_referer for plugin (de)activation

git-svn-id: https://develop.svn.wordpress.org/trunk@1299 602fd350-edb4-49c9-b593-d223f7449a82
2004-05-17 20:16:54 +00:00 · 2004-05-17 20:16:54 +00:00 · eac2b46462
parent b18dff0309
commit eac2b46462
1 changed files with 3 additions and 0 deletions
--- a/wp-admin/plugins.php
+++ b/wp-admin/plugins.php
@ -3,6 +3,9 @@
 if (isset($_GET['action'])) {
 	$standalone = 1;
 	require_once('admin-header.php');
+
+	check_admin_referer();
+
 	if ('activate' == $_GET['action']) {
 		$current = "\n" . get_settings('active_plugins') . "\n";
 		$current = preg_replace("|(\n)+\s*|", "\n", $current);