A couple more nonces. #2678
git-svn-id: http://svn.automattic.com/wordpress/trunk@3760 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
parent
3f57a94f4c
commit
547a3c96d7
|
@ -24,6 +24,7 @@ switch ($step) {
|
|||
<div class="wrap">
|
||||
<h2><?php _e('Import your blogroll from another system') ?> </h2>
|
||||
<form enctype="multipart/form-data" action="link-import.php" method="post" name="blogroll">
|
||||
<?php wp_nonce_field('import-bookmarks') ?>
|
||||
|
||||
<p><?php _e('If a program or website you use allows you to export your bookmarks or subscriptions as OPML you may import them here.'); ?>
|
||||
<div style="width: 70%; margin: auto; height: 8em;">
|
||||
|
@ -63,7 +64,7 @@ foreach ($categories as $category) {
|
|||
} // end case 0
|
||||
|
||||
case 1: {
|
||||
check_admin_referer();
|
||||
check_admin_referer('import-bookmarks');
|
||||
|
||||
include_once('admin-header.php');
|
||||
if ( !current_user_can('manage_links') )
|
||||
|
|
|
@ -32,7 +32,7 @@ break;
|
|||
|
||||
case 'update':
|
||||
|
||||
check_admin_referer();
|
||||
check_admin_referer('update-user' . $user_id);
|
||||
|
||||
if (!current_user_can('edit_users'))
|
||||
$errors = new WP_Error('head', __('You do not have permission to edit this user.'));
|
||||
|
@ -74,6 +74,7 @@ if (!current_user_can('edit_users'))
|
|||
<h2><?php _e('Edit User'); ?></h2>
|
||||
|
||||
<form name="profile" id="your-profile" action="user-edit.php" method="post">
|
||||
<?php wp_nonce_field('update-user' . $user_ID) ?>
|
||||
<p>
|
||||
<input type="hidden" name="from" value="profile" />
|
||||
<input type="hidden" name="checkuser_id" value="<?php echo $user_ID ?>" />
|
||||
|
|
Loading…
Reference in New Issue