diff options
| author | Christian Fowler <spider@viovio.com> | 2008-07-01 17:57:08 +0000 |
|---|---|---|
| committer | Christian Fowler <spider@viovio.com> | 2008-07-01 17:57:08 +0000 |
| commit | f26b1992e2f3fc82a9944d3f1c5b20ca9d015374 (patch) | |
| tree | 3dbaeb0cba945c43db661f68c18598ea564ff6b2 /post.php | |
| parent | cd0b39c505fab761ef4b38f70258376d030d1fd1 (diff) | |
| download | blogs-f26b1992e2f3fc82a9944d3f1c5b20ca9d015374.tar.gz blogs-f26b1992e2f3fc82a9944d3f1c5b20ca9d015374.tar.bz2 blogs-f26b1992e2f3fc82a9944d3f1c5b20ca9d015374.zip | |
move verifyTicket to only happen prior to store
Diffstat (limited to 'post.php')
| -rw-r--r-- | post.php | 6 |
1 files changed, 3 insertions, 3 deletions
@@ -1,6 +1,6 @@ <?php /** - * @version $Header: /cvsroot/bitweaver/_bit_blogs/post.php,v 1.59 2008/06/25 22:21:07 spiderr Exp $ + * @version $Header: /cvsroot/bitweaver/_bit_blogs/post.php,v 1.60 2008/07/01 17:57:08 spiderr Exp $ * @package blogs * @subpackage functions @@ -37,8 +37,6 @@ if( $gContent->isValid() ) { $gBitSystem->verifyPermission( 'p_blogs_post' ); } -// Editing page needs general ticket verification -$gBitUser->verifyTicket(); // nuke post if requested if( !empty( $_REQUEST['action'] ) ) { @@ -83,6 +81,8 @@ if (isset($_REQUEST["preview"])) { */ $gBitSmarty->assign('parsed_data', $post['parsed_data']); } elseif (isset($_REQUEST['save_post']) || isset($_REQUEST['save_post_exit'])) { + // Editing page needs general ticket verification + $gBitUser->verifyTicket(); if( $gContent->store( $_REQUEST ) ) { $postid = $gContent->mPostId; $gBitSmarty->assign('post_id', $gContent->mPostId); |
