Changeset 2895

Timestamp:

04/05/2016 03:13:51 PM (9 years ago)

Author:

kovshenin

Message:

WordCamp Post Types: Check core's update-post nonce before handling metadata fields for WordCamps.

File:

• sites/branches/application-tracking/wordcamp.org/public_html/wp-content/plugins/wcpt/wcpt-wordcamp/wordcamp-admin.php (modified) (1 diff)

sites/branches/application-tracking/wordcamp.org/public_html/wp-content/plugins/wcpt/wcpt-wordcamp/wordcamp-admin.php

@@ -153 +153 @@
         // WordCamp post type only
         if ( WCPT_POST_TYPE_ID != get_post_type() ) {
+            return;
+        }
+
+        // Make sure the requset came from the edit post screen.
+        if ( empty( $_POST['_wpnonce'] ) || ! wp_verify_nonce( $_POST['_wpnonce'], 'update-post_' . $post_id ) ) {
             return;
         }