Wordpress 2.0.4

[autoinstalls/wordpress.git] / wp-admin / user-edit.php

diff --git a/wp-admin/user-edit.php b/wp-admin/user-edit.php
index 430c82337095da43ea9f8612e4a5c1004723d474..ac6d4d6e7ec97d38c76c6853237ddeb8b410bc02 100644 (file)
--- a/wp-admin/user-edit.php
+++ b/wp-admin/user-edit.php
@@ -32,7 +32,7 @@ break;
 
 case 'update':
 
 
 case 'update':
 

-check_admin_referer();
+check_admin_referer('update-user_' . $user_id);

 
 $errors = array();
 
 
 $errors = array();
 


@@ -42,7 +42,7 @@ else
        $errors = edit_user($user_id);
 
 if(count($errors) == 0) {
        $errors = edit_user($user_id);
 
 if(count($errors) == 0) {

-       header("Location: user-edit.php?user_id=$user_id&updated=true");
+       wp_redirect("user-edit.php?user_id=$user_id&updated=true");

        exit;
 }
 
        exit;
 }
 


@@ -73,6 +73,7 @@ if (!current_user_can('edit_users')) $errors['head'] = __('You do not have permi
 <h2><?php _e('Edit User'); ?></h2>
 
 <form name="profile" id="your-profile" action="user-edit.php" method="post">
 <h2><?php _e('Edit User'); ?></h2>
 
 <form name="profile" id="your-profile" action="user-edit.php" method="post">

+<?php wp_nonce_field('update-user_' . $user_id) ?>

 <p>
 <input type="hidden" name="from" value="profile" />
 <input type="hidden" name="checkuser_id" value="<?php echo $user_ID ?>" />
 <p>
 <input type="hidden" name="from" value="profile" />
 <input type="hidden" name="checkuser_id" value="<?php echo $user_ID ?>" />