[wp-trac] [WordPress Trac] #12049: QuickPress POST request returns 403 forbidden error/WordPress failure notice. POST requests multiply when button is clicked again.

[WordPress Trac]

#12049: QuickPress POST request returns 403 forbidden error/WordPress failure
notice. POST requests multiply when button is clicked again.
--------------------------+-------------------------------------------------
 Reporter:  beatpanda     |       Owner:  azaozz   
     Type:  defect (bug)  |      Status:  new      
 Priority:  normal        |   Milestone:  3.0      
Component:  Widgets       |     Version:  3.0      
 Severity:  major         |    Keywords:  has-patch
--------------------------+-------------------------------------------------
Changes (by nacin):

  * keywords:  => has-patch


Comment:

 There used to be check_admin_referer('add_post'). Now it's
 "add_{$post_type}", which QuickPress doesn't specify.

 The simple fix would be to have QuickPress also pass a post type. A bigger
 fix would be  to always set $post_type to 'post' when otherwise not
 specified, and there may be a backwards compatibility argument for that,
 though that will require some refactoring.

 Related #9674. Other recent QuickPress tickets that jump out when testing
 this are #11504 (E_NOTICEs) and #10680 (ugly placement of spinner).

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/12049#comment:2>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software