mirror of
https://github.com/gosticks/wordpress-develop.git
synced 2026-07-01 15:50:09 +00:00
using check_admin_referer for moves/deletions
git-svn-id: https://develop.svn.wordpress.org/trunk@1300 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
@@ -24,6 +24,9 @@ switch ($action) {
|
||||
case 'adduser':
|
||||
$standalone = 1;
|
||||
require_once('admin-header.php');
|
||||
|
||||
check_admin_referer()
|
||||
|
||||
function filter($value) {
|
||||
return ereg('^[a-zA-Z0-9\_-\|]+$',$value);
|
||||
}
|
||||
@@ -101,6 +104,8 @@ case 'promote':
|
||||
$standalone = 1;
|
||||
require_once('admin-header.php');
|
||||
|
||||
check_admin_referer()
|
||||
|
||||
if (empty($_GET['prom'])) {
|
||||
header('Location: users.php');
|
||||
}
|
||||
@@ -133,6 +138,8 @@ case 'delete':
|
||||
$standalone = 1;
|
||||
require_once('admin-header.php');
|
||||
|
||||
check_admin_referer()
|
||||
|
||||
$id = intval($_GET['id']);
|
||||
|
||||
if (!$id) {
|
||||
|
||||
Reference in New Issue
Block a user