Add referer check. Props masquerade.

git-svn-id: http://svn.automattic.com/wordpress/trunk@3621 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2006-03-06 08:32:20 +00:00 · 2006-03-06 08:32:20 +00:00 · b8bbbd656e
parent 75a62f2e1e
commit b8bbbd656e
1 changed files with 2 additions and 0 deletions
--- a/wp-admin/post.php
+++ b/wp-admin/post.php
@ -77,6 +77,8 @@ case 'edit':
 	break;

 case 'editattachment':
+	check_admin_referer();
+
 	$post_id = (int) $_POST['post_ID'];

 	// Don't let these be changed