Ticket #2329: 2329.diff

bp-groups.php

@@ -286 +286 @@
 
         if ( isset($bp->action_variables) && in_array( 'accept', (array)$bp->action_variables ) && is_numeric($group_id) ) {
                 /* Check the nonce */
-                if ( !check_admin_referer( 'groups_accept_invite' ) )
+                if ( !check_admin_referer( 'groups_accept_invite_' . $group_id ) )
                         return false;
 
                 if ( !groups_accept_invite( $bp->loggedin_user->id, $group_id ) ) {
@@ -2565 +2565 @@
 add_action( 'groups_created_group', 'bp_core_clear_cache' );
 add_action( 'groups_group_avatar_updated', 'bp_core_clear_cache' );
 
-?>
- No newline at end of file
+?>

bp-groups/bp-groups-templatetags.php

@@ -979 +979 @@
                 if ( !$group )
                         $group =& $groups_template->group;
 
-                return apply_filters( 'bp_get_group_accept_invite_link', wp_nonce_url( $bp->loggedin_user->domain . $bp->groups->slug . '/invites/accept/' . $group->id, 'groups_accept_invite' ) );
+                return apply_filters( 'bp_get_group_accept_invite_link', wp_nonce_url( $bp->loggedin_user->domain . $bp->groups->slug . '/invites/accept/' . $group->id, 'groups_accept_invite_' . $group->id ) );
         }
 
 function bp_group_reject_invite_link() {
@@ -2133 +2133 @@
                 $name = apply_filters( 'bp_get_group_name', $bp->groups->current_group->name );
                 return apply_filters( 'bp_get_current_group_name', $name );
         }
-?>
- No newline at end of file
+?>