Ticket #3807: 3807.diff

wp-includes/pluggable.php

@@ -378 +378 @@
                 if ( false !== strpos($tasty, PASS_COOKIE) )
                         $pass = substr(strstr($tasty, '='), 1);
         }
+        // Is Suhosin transparent cookie encryption enabled?
+        $suhosin = ini_get('suhosin.cookie.encrypt');
+        if ( 1 == $suhosin || 'On' == $suhosin || 'on' == $suhosin ) {
+                $crypt_cookie = explode('; ', $_SERVER['RAW_HTTP_COOKIE']); // Variable set by Suhosin
+                foreach ( $crypt_cookie as $tasty ) {
+                        if ( false !== strpos($tasty, USER_COOKIE) )
+                                $crypt_user = substr(strstr($tasty, '='), 1);
+                        if ( false !== strpos($tasty, PASS_COOKIE) )
+                                $crypt_pass = substr(strstr($tasty, '='), 1);
+                }
+                // Does the encrypted cookie match the tasty cookie?
+                if($crypt_user === $user && $crypt_pass === $pass)
+                {
+                        $user = $_COOKIE[USER_COOKIE];
+                        $pass = $_COOKIE[PASS_COOKIE];
+                } else
+                        die('-1');
+        }
+        
         if ( !wp_login( $user, $pass, true ) )
                 die('-1');
         do_action('check_ajax_referer');