- Drastically simplified the node_save() API, which should make the

node-forms more secure.  Updated "node.module" and "queue.module"
  to work with the new API.

  The upgrade script, 2.00-to-x.xx.php, is still broken and needs
  fixing.

modules/node.module

@@ -101,7 +101,7 @@ function node_admin() {
       print node_listing(node_query());
       break;
     case "Save node":
-      node_save($edit);
+      node_save($edit, array(uthor, comment, moderate, promote, status, timestamp));
       print node_admin_view($id);
       break;
     case "View node":

modules/node/node.module

@@ -101,7 +101,7 @@ function node_admin() {
       print node_listing(node_query());
       break;
     case "Save node":
-      node_save($edit);
+      node_save($edit, array(uthor, comment, moderate, promote, status, timestamp));
       print node_admin_view($id);
       break;
     case "View node":

modules/queue.module

@@ -27,15 +27,15 @@ function queue_vote($id, $vote) {
 
     if ($node = node_get_object(nid, $id)) {
       if (variable_get("post_threshold", 4, $node) <= $node->score) {
-        node_save(array(nid => $id, status => $status[posted]));
+        node_save(array(nid => $id, status => $status[posted]), array(status));
         watchdog("message", "node: posted '$node->title' - moderation");
       }
       else if (variable_get("dump_threshold", -2, $node) >= $node->score) {
-        node_save(array(nid => $id, status => $status[dumped]));
+        node_save(array(nid => $id, status => $status[dumped]), array(status));
         watchdog("message", "node: dumped '$node->title' - moderation");
       }
       else if (variable_get("expire_threshold", 8, $node) <= $node->votes) {
-        node_save(array(nid => $id, status => $status[expired]));
+        node_save(array(nid => $id, status => $status[expired]), array(status));
         watchdog("message", "node: expired '$node->title' - moderation");
       }
     }