X-Git-Url: https://scripts.mit.edu/gitweb/autoinstalls/wordpress.git/blobdiff_plain/85ad385665744d9cc3bcd939906309be7268edb3..849f15aeed7a5e39314057bdc0064d8edd60dd7d:/wp-admin/post.php diff --git a/wp-admin/post.php b/wp-admin/post.php index a4f5cc74..805c46e6 100644 --- a/wp-admin/post.php +++ b/wp-admin/post.php @@ -106,6 +106,10 @@ case 'post-quickdraft-save': // Check nonce and capabilities $nonce = $_REQUEST['_wpnonce']; $error_msg = false; + + // For output of the quickdraft dashboard widget + require_once ABSPATH . 'wp-admin/includes/dashboard.php'; + if ( ! wp_verify_nonce( $nonce, 'add-post' ) ) $error_msg = __( 'Unable to submit this form, please refresh and try again.' ); @@ -122,11 +126,8 @@ case 'post-quickdraft-save': $_POST['ping_status'] = get_option( 'default_ping_status' ); edit_post(); - // output the quickdraft dashboard widget - require_once(ABSPATH . 'wp-admin/includes/dashboard.php'); wp_dashboard_quick_press(); exit; - break; case 'postajaxpost': case 'post': @@ -134,7 +135,6 @@ case 'post': $post_id = 'postajaxpost' == $action ? edit_post() : write_post(); redirect_post( $post_id ); exit(); - break; case 'edit': $editing = true; @@ -229,13 +229,13 @@ case 'editpost': $post_id = edit_post(); // Session cookie flag that the post was saved - if ( isset( $_COOKIE['wp-saving-post-' . $post_id] ) ) - setcookie( 'wp-saving-post-' . $post_id, 'saved' ); + if ( isset( $_COOKIE['wp-saving-post'] ) && $_COOKIE['wp-saving-post'] === $post_id . '-check' ) { + setcookie( 'wp-saving-post', $post_id . '-saved', time() + DAY_IN_SECONDS ); + } redirect_post($post_id); // Send user on their way while we keep working exit(); - break; case 'trash': check_admin_referer('trash-post_' . $post_id); @@ -259,7 +259,6 @@ case 'trash': wp_redirect( add_query_arg( array('trashed' => 1, 'ids' => $post_id), $sendback ) ); exit(); - break; case 'untrash': check_admin_referer('untrash-post_' . $post_id); @@ -278,7 +277,6 @@ case 'untrash': wp_redirect( add_query_arg('untrashed', 1, $sendback) ); exit(); - break; case 'delete': check_admin_referer('delete-post_' . $post_id); @@ -304,20 +302,17 @@ case 'delete': wp_redirect( add_query_arg('deleted', 1, $sendback) ); exit(); - break; case 'preview': - check_admin_referer( 'autosave', 'autosavenonce' ); + check_admin_referer( 'update-post_' . $post_id ); $url = post_preview(); wp_redirect($url); exit(); - break; default: wp_redirect( admin_url('edit.php') ); exit(); - break; } // end switch include( ABSPATH . 'wp-admin/admin-footer.php' );