From 055a8a215fa83cd334d71120c1bd049672cea531 Mon Sep 17 00:00:00 2001
From: woodandgold <manne.schutt@gmail.com>
Date: Sun, 4 Mar 2012 21:22:01 +0100
Subject: [PATCH 1/2] updated wpuf_edit_attachment() so it's wrapped in a form
 to get rid of nonce error.

---
 wpuf-functions.php | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/wpuf-functions.php b/wpuf-functions.php
index 3c4a1a55a..e16163962 100755
--- a/wpuf-functions.php
+++ b/wpuf-functions.php
@@ -302,12 +302,19 @@ function wpuf_edit_attachment( $post_id ) {
     if ( $attach ) {
         $count = 1;
         foreach ($attach as $a) {
-            $param = "?pid={$post_id}&attach_id={$a['id']}&action=del";
-            $text .= 'Attachment ' . $count . ': <a href="' . $a['url'] . '">' . $a['title'] . '</a>';
-            $text .= ' - <a href="' . wp_nonce_url( $param, 'wpuf_attach_del' ) . '" onclick="return confirm(\'Are you sure to delete this attachment?\');">Delete</a><br>';
+            
+            echo     'Attachment ' . $count . ': <a href="' . $a['url'] . '">' . $a['title'] . '</a>';
+			echo  	"<form name=\"wpuf_edit_attachment\" id=\"wpuf_edit_attachment_{$post_id}\" action=\"\" method=\"POST\">";
+			echo 	"<input type=\"hidden\" name=\"attach_id\" value=\"{$a['id']}\" />";
+			echo 	"<input type=\"hidden\" name=\"action\" value=\"del\" />";
+			wp_nonce_field( 'wpuf_attach_del');
+			echo  	'<input class="wpuf_attachment_delete" type="submit" name="wpuf_attachment_delete" value="delete" onclick="return confirm(\'Are you sure to delete this attachment?\');">';
+			echo 	"</form>";
+            echo    "<br>";
             $count++;
+            
         }
-        echo $text;
+    
     }
 }
 

From a2dff3dcc95d01ab4c94f8a81ca8caa5b6189050 Mon Sep 17 00:00:00 2001
From: woodandgold <manne.schutt@gmail.com>
Date: Sun, 4 Mar 2012 21:24:56 +0100
Subject: [PATCH 2/2] moved wpuf_edit_attachment() to get rid of nonce error

---
 wpuf-edit-post.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/wpuf-edit-post.php b/wpuf-edit-post.php
index a4b718349..8085f303a 100755
--- a/wpuf-edit-post.php
+++ b/wpuf-edit-post.php
@@ -133,7 +133,7 @@ function wpuf_edit_show_form( $post ) {
             <?php } ?>
 
             <?php wpuf_attachment_fields(); ?>
-            <?php wpuf_edit_attachment( $post->ID ); ?>
+            
             <?php do_action( 'wpuf_add_post_form_tags', $post_type ); ?>
             <?php wpuf_build_custom_field_form( 'bottom', true, $post->ID ); ?>
 
@@ -145,6 +145,10 @@ function wpuf_edit_show_form( $post ) {
             </li>
         </ul>
     </form>
+    <div class="wpuf-edit-attachment">
+        <?php wpuf_edit_attachment( $post->ID ); ?>
+    </div>
+        
     <?php
 }