[wp-hackers] Moved from BlogWare to WordPress - Need Help

Paul Mitchell wp-hackers at paul-mitchell.me.uk
Sun May 21 12:12:05 GMT 2006


Sean Hickey wrote:
> 1. Checks the that user can edit the post via the user_can_edit_post()
> function
> 2. Type cast the $id variable and escapes it
> 3. Uses session variables and a token system to ensure the incoming
> new post data is in fact coming from the edit form.
With those issues addressed, and time permitting, I shall also give it a
grind on my localhosted test blogs, see if I can break anything. Private
feedback this time, I promise!

Paul



More information about the wp-hackers mailing list