From 0ab045e16b61444e8e5cdf79ed7ca6012de3357e Mon Sep 17 00:00:00 2001
From: Mike Jolley <mike.jolley@me.com>
Date: Wed, 18 Jan 2012 17:49:55 +0000
Subject: [PATCH] Fixed admin ajax

---
 admin/post-types/product.php    | 2 +-
 admin/post-types/shop_order.php | 4 ++--
 woocommerce-ajax.php            | 6 +++---
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/admin/post-types/product.php b/admin/post-types/product.php
index c99e090a41b..7c56791cd4b 100644
--- a/admin/post-types/product.php
+++ b/admin/post-types/product.php
@@ -114,7 +114,7 @@ function woocommerce_custom_product_columns($column) {
 			endif;
 		break;
 		case "featured" :
-			$url = wp_nonce_url( admin_url('admin-ajax.php?action=woocommerce-feature-product&product_id=' . $post->ID) );
+			$url = wp_nonce_url( admin_url('admin-ajax.php?action=woocommerce-feature-product&product_id=' . $post->ID), 'woocommerce-feature-product' );
 			echo '<a href="'.$url.'" title="'.__('Change', 'woocommerce') .'">';
 			if ($product->is_featured()) echo '<a href="'.$url.'"><img src="'.$woocommerce->plugin_url().'/assets/images/success.gif" alt="yes" />';
 			else echo '<img src="'.$woocommerce->plugin_url().'/assets/images/success-off.gif" alt="no" />';
diff --git a/admin/post-types/shop_order.php b/admin/post-types/shop_order.php
index 02340d148fb..9ed8c455b56 100644
--- a/admin/post-types/shop_order.php
+++ b/admin/post-types/shop_order.php
@@ -123,8 +123,8 @@ function woocommerce_custom_order_columns($column) {
 		case "order_actions" :
 			
 			?><p>
-				<?php if (in_array($order->status, array('pending', 'on-hold'))) : ?><a class="button" href="<?php echo wp_nonce_url( admin_url('admin-ajax.php?action=woocommerce-mark-order-processing&order_id=' . $post->ID) ); ?>"><?php _e('Processing', 'woocommerce'); ?></a><?php endif; ?>
-				<?php if (in_array($order->status, array('pending', 'on-hold', 'processing'))) : ?><a class="button" href="<?php echo wp_nonce_url( admin_url('admin-ajax.php?action=woocommerce-mark-order-complete&order_id=' . $post->ID) ); ?>"><?php _e('Complete', 'woocommerce'); ?></a><?php endif; ?>
+				<?php if (in_array($order->status, array('pending', 'on-hold'))) : ?><a class="button" href="<?php echo wp_nonce_url( admin_url('admin-ajax.php?action=woocommerce-mark-order-processing&order_id=' . $post->ID), 'woocommerce-mark-order-processing' ); ?>"><?php _e('Processing', 'woocommerce'); ?></a><?php endif; ?>
+				<?php if (in_array($order->status, array('pending', 'on-hold', 'processing'))) : ?><a class="button" href="<?php echo wp_nonce_url( admin_url('admin-ajax.php?action=woocommerce-mark-order-complete&order_id=' . $post->ID), 'woocommerce-mark-order-complete' ); ?>"><?php _e('Complete', 'woocommerce'); ?></a><?php endif; ?>
 				<a class="button" href="<?php echo admin_url('post.php?post='.$post->ID.'&action=edit'); ?>"><?php _e('View', 'woocommerce'); ?></a>
 			</p><?php
 			
diff --git a/woocommerce-ajax.php b/woocommerce-ajax.php
index 5cf933ce817..a2d09b3f128 100644
--- a/woocommerce-ajax.php
+++ b/woocommerce-ajax.php
@@ -186,7 +186,7 @@ function woocommerce_feature_product() {
 	
 	if( !current_user_can('edit_posts') ) wp_die( __('You do not have sufficient permissions to access this page.', 'woocommerce') );
 	
-	if( !check_admin_referer()) wp_die( __('You have taken too long. Please go back and retry.', 'woocommerce') );
+	if( !check_admin_referer('woocommerce-feature-product')) wp_die( __('You have taken too long. Please go back and retry.', 'woocommerce') );
 	
 	$post_id = isset($_GET['product_id']) && (int)$_GET['product_id'] ? (int)$_GET['product_id'] : '';
 	
@@ -215,7 +215,7 @@ function woocommerce_mark_order_complete() {
 
 	if( !is_admin() ) die;
 	if( !current_user_can('edit_posts') ) wp_die( __('You do not have sufficient permissions to access this page.', 'woocommerce') );
-	if( !check_admin_referer()) wp_die( __('You have taken too long. Please go back and retry.', 'woocommerce') );
+	if( !check_admin_referer('woocommerce-mark-order-complete')) wp_die( __('You have taken too long. Please go back and retry.', 'woocommerce') );
 	$order_id = isset($_GET['order_id']) && (int) $_GET['order_id'] ? (int) $_GET['order_id'] : '';
 	if(!$order_id) die;
 	
@@ -234,7 +234,7 @@ function woocommerce_mark_order_processing() {
 
 	if( !is_admin() ) die;
 	if( !current_user_can('edit_posts') ) wp_die( __('You do not have sufficient permissions to access this page.', 'woocommerce') );
-	if( !check_admin_referer()) wp_die( __('You have taken too long. Please go back and retry.', 'woocommerce') );
+	if( !check_admin_referer('woocommerce-mark-order-processing')) wp_die( __('You have taken too long. Please go back and retry.', 'woocommerce') );
 	$order_id = isset($_GET['order_id']) && (int) $_GET['order_id'] ? (int) $_GET['order_id'] : '';
 	if(!$order_id) die;