[wp-trac] Re: [WordPress Trac] #2760: Comment Editing Generates AYS

WordPress Trac wp-trac at lists.automattic.com
Thu Jun 1 15:13:01 GMT 2006


#2760: Comment Editing Generates AYS
----------------------------+-----------------------------------------------
       Id:  2760            |      Status:  assigned                
Component:  Administration  |    Modified:  Thu Jun  1 15:13:01 2006
 Severity:  normal          |   Milestone:                          
 Priority:  high            |     Version:  2.0.2                   
    Owner:  markjaquith     |    Reporter:  markjaquith             
----------------------------+-----------------------------------------------
Changes (by markjaquith):

  * keywords:  => has-patch commit
  * status:  new => assigned
  * owner:  anonymous => markjaquith

Comment:

 Patch fixes it.  Problem should be obvious:

 {{{
 wp_nonce_field('update-comment' . $comment->comment_ID)
 }}}

 vs

 {{{
 check_admin_referer('update-comment');
 }}}

 thus, the nonce is invalid.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/2760>
WordPress Trac <http://wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list