Move check admin referrer after request checks.

Michiel Verkoijen · Michiel Verkoijen · commit 1e3b38c57bdf · 2016-07-16T00:46:31.000+02:00
diff --git a/src/class-tiny-plugin.php b/src/class-tiny-plugin.php
@@ -330,7 +330,6 @@ public function ajax_optimization_statistics() {
 	}
 
 	public function media_library_bulk_action() {
-		check_admin_referer( 'bulk-media' );
 
 		if ( empty( $_REQUEST['action'] ) || (
 				'tiny_bulk_action' != $_REQUEST['action'] &&
@@ -342,6 +341,7 @@ public function media_library_bulk_action() {
 			return;
 		}
 
+		check_admin_referer( 'bulk-media' );
 		$ids = implode( '-', array_map( 'intval', $_REQUEST['media'] ) );
 		wp_redirect(add_query_arg(
 			'_wpnonce',

Original file line number	Diff line number	Diff line change
`@@ -330,7 +330,6 @@ public function ajax_optimization_statistics() {`
`330`	`330`	`}`
`331`	`331`
`332`	`332`	`public function media_library_bulk_action() {`
`333`		`- check_admin_referer( 'bulk-media' );`
`334`	`333`
`335`	`334`	`if ( empty( $_REQUEST['action'] ) \|\| (`
`336`	`335`	`'tiny_bulk_action' != $_REQUEST['action'] &&`
`@@ -342,6 +341,7 @@ public function media_library_bulk_action() {`
`342`	`341`	`return;`
`343`	`342`	`}`
`344`	`343`
	`344`	`+ check_admin_referer( 'bulk-media' );`
`345`	`345`	`$ids = implode( '-', array_map( 'intval', $_REQUEST['media'] ) );`
`346`	`346`	`wp_redirect(add_query_arg(`
`347`	`347`	`'_wpnonce',`