Changeset 3779

Timestamp:

05/18/06 00:59:04 (2 years ago)

Author:

ryan

Message:

Backport nonce fixes. #2678

Files:

• branches/2.0/wp-admin/admin-functions.php (modified) (1 diff)
• branches/2.0/wp-admin/edit-form-advanced.php (modified) (1 diff)

branches/2.0/wp-admin/admin-functions.php

@@ -598 +598 @@
-                    $edit = "<a href='categories.php?action=edit&amp;cat_ID=$category->cat_ID' class='edit'>".__('Edit')."</a></td>";
-                    $default_cat_id = get_option('default_category');
-
+
-                    if ($category->cat_ID != $default_cat_id)
-categories.php?action=delete&amp;cat_ID=$category->cat_ID' onclick=\"return deleteSomething( 'cat', $category->cat_ID, '".
+" . wp_nonce_url("categories.php?action=delete&amp;cat_ID=$category->cat_ID", 'delete-category' . $category->cat_ID ) . "' onclick=\"return deleteSomething( 'cat', $category->cat_ID, '" . 
-                    else
-                        $edit .= "<td style='text-align:center'>".__("Default");

branches/2.0/wp-admin/edit-form-advanced.php

@@ -267 +267 @@
-</div>
-
-
-return confirm('" . sprintf(__("You are about to delete this post \'%s\'\\n  \'Cancel\' to stop, \'OK\' to delete."), addslashes($post->post_title) ) . "')
+$delete_nonce = wp_create_nonce( 'delete-post' . $post_ID ); 
+if ( confirm('" . sprintf(__("You are about to delete this post \'%s\'\\n  \'Cancel\' to stop, \'OK\' to delete."), addslashes($post->post_title) ) . "') ) { document.forms.post._wpnonce.value = '$delete_nonce'; return true;}
-<?php endif; ?>
-