mirror of
https://github.com/gosticks/wordpress-develop.git
synced 2026-03-30 10:14:31 +00:00
Nonce from above. #2678
git-svn-id: https://develop.svn.wordpress.org/trunk@3759 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
@@ -11,7 +11,7 @@ $update = '';
|
||||
switch ($action) {
|
||||
|
||||
case 'promote':
|
||||
check_admin_referer();
|
||||
check_admin_referer('bulk-users');
|
||||
|
||||
if (empty($_POST['users'])) {
|
||||
header('Location: users.php');
|
||||
@@ -39,7 +39,7 @@ break;
|
||||
|
||||
case 'dodelete':
|
||||
|
||||
check_admin_referer();
|
||||
check_admin_referer('delete-users');
|
||||
|
||||
if ( empty($_POST['users']) ) {
|
||||
header('Location: users.php');
|
||||
@@ -72,7 +72,7 @@ break;
|
||||
|
||||
case 'delete':
|
||||
|
||||
check_admin_referer();
|
||||
check_admin_referer('bulk-users');
|
||||
|
||||
if (empty($_POST['users'])) {
|
||||
header('Location: users.php');
|
||||
@@ -86,6 +86,7 @@ case 'delete':
|
||||
include ('admin-header.php');
|
||||
?>
|
||||
<form action="" method="post" name="updateusers" id="updateusers">
|
||||
<?php wp_nonce_field('delete-users') ?>
|
||||
<div class="wrap">
|
||||
<h2><?php _e('Delete Users'); ?></h2>
|
||||
<p><?php _e('You have specified these users for deletion:'); ?></p>
|
||||
@@ -131,7 +132,7 @@ case 'delete':
|
||||
break;
|
||||
|
||||
case 'adduser':
|
||||
check_admin_referer();
|
||||
check_admin_referer('add-user');
|
||||
|
||||
$user_id = add_user();
|
||||
if ( is_wp_error( $user_id ) )
|
||||
@@ -205,6 +206,7 @@ default:
|
||||
?>
|
||||
|
||||
<form action="" method="post" name="updateusers" id="updateusers">
|
||||
<?php wp_nonce_field('bulk-users') ?>
|
||||
<div class="wrap">
|
||||
<h2><?php _e('User List by Role'); ?></h2>
|
||||
<table cellpadding="3" cellspacing="3" width="100%">
|
||||
@@ -257,6 +259,7 @@ default:
|
||||
<h2><?php _e('Add New User') ?></h2>
|
||||
<?php echo '<p>'.sprintf(__('Users can <a href="%1$s">register themselves</a> or you can manually create users here.'), get_settings('siteurl').'/wp-register.php').'</p>'; ?>
|
||||
<form action="" method="post" name="adduser" id="adduser">
|
||||
<?php wp_nonce_field('add-user') ?>
|
||||
<table class="editform" width="100%" cellspacing="2" cellpadding="5">
|
||||
<tr>
|
||||
<th scope="row" width="33%"><?php _e('Nickname') ?>
|
||||
|
||||
Reference in New Issue
Block a user