| CARVIEW |
Select Language
HTTP/2 200
server: nginx
date: Sat, 11 Oct 2025 16:13:23 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
etag: W/"anonymous/Mon, 28 Mar 2011 21:32:01 GMT/02451e22d8cfd79f05e152afc7a7e4b3"
cache-control: must-revalidate
alt-svc: h3=":443"; ma=86400
x-nc: MISS
content-encoding: gzip
Changeset 17569 – WordPress Trac
Changeset 17569
- Timestamp:
- 03/28/2011 09:32:01 PM (15 years ago)
- Author:
- ryan
- Message:
-
Add some nonce checks to the uploaders. Props duck_. For 3.1.
- Location:
- branches/3.1/wp-admin
- Files:
-
- 2 edited
-
includes/media.php (modified) (4 diffs)
-
media-upload.php (modified) (1 diff)
Legend:
- Unmodified
- Added
- Removed
-
branches/3.1/wp-admin/includes/media.php
r17347 r17569 500 500 501 501 if ( isset($_POST['html-upload']) && !empty($_FILES) ) { 502 check_admin_referer('media-form'); 502 503 // Upload File button was clicked 503 504 $id = media_handle_upload('async-upload', $_REQUEST['post_id']); … … 605 606 606 607 if ( isset($_POST['html-upload']) && !empty($_FILES) ) { 608 check_admin_referer('media-form'); 607 609 // Upload File button was clicked 608 610 $id = media_handle_upload('async-upload', $_REQUEST['post_id']); … … 663 665 664 666 if ( isset($_POST['html-upload']) && !empty($_FILES) ) { 667 check_admin_referer('media-form'); 665 668 // Upload File button was clicked 666 669 $id = media_handle_upload('async-upload', $_REQUEST['post_id']); … … 721 724 722 725 if ( isset($_POST['html-upload']) && !empty($_FILES) ) { 726 check_admin_referer('media-form'); 723 727 // Upload File button was clicked 724 728 $id = media_handle_upload('async-upload', $_REQUEST['post_id']); -
branches/3.1/wp-admin/media-upload.php
r16847 r17569 39 39 40 40 if ( isset($_POST['html-upload']) && !empty($_FILES) ) { 41 check_admin_referer('media-form'); 41 42 // Upload File button was clicked 42 43 $id = media_handle_upload('async-upload', $_REQUEST['post_id']);
Note: See TracChangeset
for help on using the changeset viewer.