WordPress.org

Make WordPress Core

Changeset 17387


Ignore:
Timestamp:
02/03/2011 08:42:18 PM (8 years ago)
Author:
markjaquith
Message:

Improvement to check_admin_referer() when called without first argument (PLUGIN AUTHORS: STOP DOING THAT). props indie-ulf. fixes #16449 for 3.0

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/3.0/wp-includes/pluggable.php

    r15149 r17387  
    826826    $referer = strtolower(wp_get_referer());
    827827    $result = isset($_REQUEST[$query_arg]) ? wp_verify_nonce($_REQUEST[$query_arg], $action) : false;
    828     if ( !$result && !(-1 == $action && strpos($referer, $adminurl) !== false) ) {
     828    if ( !$result && !(-1 == $action && strpos($referer, $adminurl) === 0) ) {
    829829        wp_nonce_ays($action);
    830830        die();
Note: See TracChangeset for help on using the changeset viewer.