Changeset 10720

Timestamp:

03/05/2009 09:43:35 PM (16 years ago)

Author:

ryan

Message:

Fire nopriv actions from post and ajax handlers when user is not logged in.

Location:

trunk/wp-admin

Files:

• admin-ajax.php (modified) (1 diff)
• admin-post.php (modified) (2 diffs)

trunk/wp-admin/admin-ajax.php

@@ -37 +37 @@
             $x->send();
     }
+
+    if ( !empty( $_POST['action']) )
+        do_action( 'wp_ajax_nopriv_' . $_POST['action'] );
 
     die('-1');

trunk/wp-admin/admin-post.php

@@ -17 +17 @@
 require_once(ABSPATH . 'wp-admin/includes/admin.php');
 
-if ( !wp_validate_auth_cookie() )
-    wp_die(__('Cheatin’ uh?'));
-
 nocache_headers();
 
@@ -25 +22 @@
 
 $action = 'admin_post';
+
+if ( !wp_validate_auth_cookie() )
+    $action .= '_nopriv';
+
 if ( !empty($_REQUEST['action']) )
     $action .= '_' . $_REQUEST['action'];