WordPress.org

Make WordPress Core

Changeset 17386


Ignore:
Timestamp:
02/03/2011 08:42:10 PM (7 years ago)
Author:
markjaquith
Message:

Improvement to check_admin_referer() when called without first argument (PLUGIN AUTHORS: STOP DOING THAT). props indie-ulf. fixes #16449 for 3.1

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/3.1/wp-includes/pluggable.php

    r17227 r17386  
    836836    $referer = strtolower(wp_get_referer());
    837837    $result = isset($_REQUEST[$query_arg]) ? wp_verify_nonce($_REQUEST[$query_arg], $action) : false;
    838     if ( !$result && !(-1 == $action && strpos($referer, $adminurl) !== false) ) {
     838    if ( !$result && !(-1 == $action && strpos($referer, $adminurl) === 0) ) {
    839839        wp_nonce_ays($action);
    840840        die();
Note: See TracChangeset for help on using the changeset viewer.