WordPress.org

Make WordPress Core

Ticket #12122: 12122.diff

File 12122.diff, 463 bytes (added by sivel, 4 years ago)

Since admin-ajax.php requires $_REQUESTaction? just die early on if it's not set

  • wp-admin/admin-ajax.php

     
    1414define('DOING_AJAX', true); 
    1515define('WP_ADMIN', true); 
    1616 
     17if ( ! isset( $_REQUEST['action'] ) ) 
     18        die('-1'); 
     19 
    1720require_once('../wp-load.php'); 
    1821require_once('includes/admin.php'); 
    1922@header('Content-Type: text/html; charset=' . get_option('blog_charset'));