Changeset 1032 for trunk/bp-forums.php

Timestamp:

02/09/2009 06:52:51 AM (17 years ago)

Author:

apeatling

Message:

Added nonce security checks to all BuddyPress actions. Fixes #454

File:

• trunk/bp-forums.php (modified) (1 diff)

trunk/bp-forums.php

@@ -159 +159 @@
 function bp_forums_new_post( $post_text = '', $topic_id = 0 ) {
     global $bbpress_live;
+
+    if ( !check_admin_referer( 'bp_forums_new_reply' ) ) 
+        return false;
     
     if ( !is_object( $bbpress_live ) ) {