Changeset 17387 for branches/3.0/wp-includes/pluggable.php

Timestamp:

02/03/2011 08:42:18 PM (14 years ago)

Author:

markjaquith

Message:

Improvement to check_admin_referer() when called without first argument (PLUGIN AUTHORS: STOP DOING THAT). props indie-ulf. fixes #16449 for 3.0

File:

• branches/3.0/wp-includes/pluggable.php (modified) (1 diff)

branches/3.0/wp-includes/pluggable.php

@@ -826 +826 @@
     $referer = strtolower(wp_get_referer());
     $result = isset($_REQUEST[$query_arg]) ? wp_verify_nonce($_REQUEST[$query_arg], $action) : false;
-    if ( !$result && !(-1 == $action && strpos($referer, $adminurl) !== false) ) {
+    if ( !$result && !(-1 == $action && strpos($referer, $adminurl) === 0) ) {
         wp_nonce_ays($action);
         die();