From 12de05107e4c8b006bde6ee8916f34eb476d08da Mon Sep 17 00:00:00 2001 From: donncha Date: Fri, 13 Jun 2008 17:21:00 +0000 Subject: WP Merge with revision 8075 git-svn-id: http://svn.automattic.com/wordpress-mu/trunk@1328 7be80a69-a1ef-0310-a953-fb0f7c49ff36 --- wp-admin/media.php | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) (limited to 'wp-admin/media.php') diff --git a/wp-admin/media.php b/wp-admin/media.php index 03b3749..150dea7 100644 --- a/wp-admin/media.php +++ b/wp-admin/media.php @@ -17,6 +17,12 @@ case 'editattachment' : $errors = media_upload_form_handler(); + + check_admin_referer('media-form'); + + if ( !current_user_can('edit_post', $attachment_id) ) + wp_die ( __('You are not allowed to edit this attachment.') ); + if ( empty($errors) ) { $location = 'media.php'; if ( $referer = wp_get_original_referer() ) { @@ -54,7 +60,8 @@ case 'edit' : add_filter('attachment_fields_to_edit', 'media_single_attachment_fields_to_edit', 10, 2); wp_enqueue_script( 'wp-ajax-response' ); - add_action('admin_head', 'media_admin_css'); + wp_admin_css( 'media' ); + require( 'admin-header.php' ); -- cgit