Wordpress 3.0.6-scripts

[autoinstalls/wordpress.git] / wp-includes / pluggable.php

diff --git a/wp-includes/pluggable.php b/wp-includes/pluggable.php
index b519832303d522b0954a68d957d8053693d00124..a36bd1ed2a17c96ea16a1530b1cf652f8709c05a 100644 (file)
--- a/wp-includes/pluggable.php
+++ b/wp-includes/pluggable.php
@@ -825,7 +825,7 @@ function check_admin_referer($action = -1, $query_arg = '_wpnonce') {
        $adminurl = strtolower(admin_url());
        $referer = strtolower(wp_get_referer());
        $result = isset($_REQUEST[$query_arg]) ? wp_verify_nonce($_REQUEST[$query_arg], $action) : false;
-       if ( !$result && !(-1 == $action && strpos($referer, $adminurl) !== false) ) {
+       if ( !$result && !(-1 == $action && strpos($referer, $adminurl) === 0) ) {
                wp_nonce_ays($action);
                die();
        }