Add nonce to menu-locations-save. Props koopersmith. see #13378

git-svn-id: http://svn.automattic.com/wordpress/trunk@14725 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2010-05-18 15:16:58 +00:00
parent 0ce5224be6
commit bc1bf148e4
4 changed files with 15 additions and 4 deletions
@@ -1106,6 +1106,7 @@ case 'menu-quick-search':
 case 'menu-locations-save':
 	if ( ! current_user_can( 'edit_theme_options' ) )
 		die('-1');
+	check_ajax_referer( 'add-menu_item', 'menu-settings-column-nonce' );
 	if ( ! isset( $_POST['menu-locations' ] ) )
 		die('0');
 	set_theme_mod( 'nav_menu_locations', $_POST['menu-locations'] );