Make WordPress Core


Ignore:
Timestamp:
12/24/2009 04:08:15 PM (17 years ago)
Author:
ryan
Message:

Some hardening for 2.8

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/2.8/wp-includes/pluggable.php

    r11616 r12539  
    100100
    101101        if ( ! $user = wp_validate_auth_cookie() ) {
    102                  if ( empty($_COOKIE[LOGGED_IN_COOKIE]) || !$user = wp_validate_auth_cookie($_COOKIE[LOGGED_IN_COOKIE], 'logged_in') ) {
     102                 if ( is_admin() || empty($_COOKIE[LOGGED_IN_COOKIE]) || !$user = wp_validate_auth_cookie($_COOKIE[LOGGED_IN_COOKIE], 'logged_in') ) {
    103103                        wp_set_current_user(0);
    104104                        return false;
Note: See TracChangeset for help on using the changeset viewer.