Changeset 3827

Show
Ignore:
Timestamp:
06/01/06 16:59:55 (2 years ago)
Author:
ryan
Message:

Comment nonce fixes from Mark Jaquith and mdawaffe. fixes #2760

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • trunk/wp-admin/comment.php

    r3804 r3827  
    185185case 'editedcomment': 
    186186 
    187     check_admin_referer('update-comment'); 
     187    $comment_id = (int) $_POST['comment_ID']; 
     188 
     189    check_admin_referer('update-comment_' . $comment_id); 
    188190 
    189191    edit_comment(); 
    …… 
    193195        header('Location: ' . $referredby); 
    194196    } else { 
    195         header ("Location: edit.php?p=$comment_post_ID&c=1#comments"); 
     197        header ("Location: edit.php?p=$comment_id&c=1#comments"); 
    196198    } 
    197199 

  • trunk/wp-admin/edit-form-comment.php

    r3759 r3827  
    77 
    88<form name="post" action="comment.php" method="post" id="post"> 
    9 <?php wp_nonce_field('update-comment' . $comment->comment_ID) ?> 
     9<?php wp_nonce_field('update-comment_' . $comment->comment_ID) ?> 
    1010<div class="wrap"> 
    1111<input type="hidden" name="user_ID" value="<?php echo $user_ID ?>" />