mirror_php/wordpress
1
0
Fork 0
mirror of git://develop.git.wordpress.org/ synced 2025-01-17 12:58:25 +01:00
Code Issues Actions 98 Packages Projects Releases Wiki Activity

Add some nonce checks to the uploaders. Props duck_. For 3.1.

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/branches/3.1@17569 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ryan Boren 2011-03-28 21:32:01 +00:00
parent 306f975eef
commit 1815de3619
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
wp-admin/includes/media.php
View File

@ -499,6 +499,7 @@ function media_upload_image() {
$id = 0; $id = 0;
if ( isset($_POST['html-upload']) && !empty($_FILES) ) { if ( isset($_POST['html-upload']) && !empty($_FILES) ) {
check_admin_referer('media-form');
// Upload File button was clicked // Upload File button was clicked
$id = media_handle_upload('async-upload', $_REQUEST['post_id']); $id = media_handle_upload('async-upload', $_REQUEST['post_id']);
unset($_FILES); unset($_FILES);
@ -604,6 +605,7 @@ function media_upload_audio() {
$id = 0; $id = 0;
if ( isset($_POST['html-upload']) && !empty($_FILES) ) { if ( isset($_POST['html-upload']) && !empty($_FILES) ) {
check_admin_referer('media-form');
// Upload File button was clicked // Upload File button was clicked
$id = media_handle_upload('async-upload', $_REQUEST['post_id']); $id = media_handle_upload('async-upload', $_REQUEST['post_id']);
unset($_FILES); unset($_FILES);
@ -662,6 +664,7 @@ function media_upload_video() {
$id = 0; $id = 0;
if ( isset($_POST['html-upload']) && !empty($_FILES) ) { if ( isset($_POST['html-upload']) && !empty($_FILES) ) {
check_admin_referer('media-form');
// Upload File button was clicked // Upload File button was clicked
$id = media_handle_upload('async-upload', $_REQUEST['post_id']); $id = media_handle_upload('async-upload', $_REQUEST['post_id']);
unset($_FILES); unset($_FILES);
@ -720,6 +723,7 @@ function media_upload_file() {
$id = 0; $id = 0;
if ( isset($_POST['html-upload']) && !empty($_FILES) ) { if ( isset($_POST['html-upload']) && !empty($_FILES) ) {
check_admin_referer('media-form');
// Upload File button was clicked // Upload File button was clicked
$id = media_handle_upload('async-upload', $_REQUEST['post_id']); $id = media_handle_upload('async-upload', $_REQUEST['post_id']);
unset($_FILES); unset($_FILES);

1
wp-admin/media-upload.php
View File

@ -38,6 +38,7 @@ if ( isset($_GET['inline']) ) {
$errors = array(); $errors = array();
if ( isset($_POST['html-upload']) && !empty($_FILES) ) { if ( isset($_POST['html-upload']) && !empty($_FILES) ) {
check_admin_referer('media-form');
// Upload File button was clicked // Upload File button was clicked
$id = media_handle_upload('async-upload', $_REQUEST['post_id']); $id = media_handle_upload('async-upload', $_REQUEST['post_id']);
unset($_FILES); unset($_FILES);