Changeset 3764

Show
Ignore:
Timestamp:
05/05/06 09:09:13 (2 years ago)
Author:
ryan
Message:

nonce approve/delete comment confirmations. #2678

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved
  • trunk/wp-admin/comment.php

    r3759 r3764  
    5252    $p = (int) $_GET['p']; 
    5353    $formaction = 'confirmdeletecomment' == $action ? 'deletecomment' : 'approvecomment'; 
     54    $nonce_action = 'confirmdeletecomment' == $action ? 'delete-comment' : 'approve-comment'; 
     55    $nonce_action .= $comment; 
    5456 
    5557    if ( ! $comment = get_comment($comment) ) 
     
    7577 
    7678    echo "<form action='".get_settings('siteurl')."/wp-admin/comment.php' method='get'>\n"; 
     79    wp_nonce_field($nonce_action); 
    7780    echo "<input type='hidden' name='action' value='$formaction' />\n"; 
    7881    if ( 'spam' == $_GET['delete_type'] )