Add referer check. Props masquerade.

git-svn-id: http://svn.automattic.com/wordpress/branches/2.0@3620 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2006-03-06 08:32:03 +00:00 · 2006-03-06 08:32:03 +00:00 · 5f17bc2a8c
parent 084d69c9ae
commit 5f17bc2a8c
1 changed files with 2 additions and 0 deletions
--- a/wp-admin/post.php
+++ b/wp-admin/post.php
@ -87,6 +87,8 @@ case 'edit':
 	break;

 case 'editattachment':
+	check_admin_referer();
+
 	$post_id = (int) $_POST['post_ID'];

 	// Don't let these be changed