WordPress.org

Make WordPress Core

Changeset 17385


Ignore:
Timestamp:
02/03/11 20:42:00 (5 years ago)
Author:
markjaquith
Message:

Improvement to check_admin_referer() when called without first argument (PLUGIN AUTHORS: STOP DOING THAT). props indie-ulf. fixes #16449 for trunk

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-includes/pluggable.php

    r17227 r17385  
    836836    $referer = strtolower(wp_get_referer()); 
    837837    $result = isset($_REQUEST[$query_arg]) ? wp_verify_nonce($_REQUEST[$query_arg], $action) : false; 
    838     if ( !$result && !(-1 == $action && strpos($referer, $adminurl) !== false) ) { 
     838    if ( !$result && !(-1 == $action && strpos($referer, $adminurl) === 0) ) { 
    839839        wp_nonce_ays($action); 
    840840        die(); 
Note: See TracChangeset for help on using the changeset viewer.