[wp-hackers] Rethinking check_admin_referer()

[David House]

On 17/04/06, Paul Mitchell <wp-hackers at paul-mitchell.me.uk> wrote:
> This makes wp-admin/edit-comments.php and wp-admin/moderation.php
> extremely dangerous as the admin referer check is ineffective.

Yeah, this is a flaw in the current system. I _think_ nonces would fix
this, someone else would have to verify that.

--
-David House, dmhouse at gmail.com, http://xmouse.ithium.net