Changeset 21837

Timestamp:

09/13/2012 05:17:47 PM (12 years ago)

Author:

nacin

Message:

Add nonce_user_logged_out filters to wp_create_nonce() and wp_verify_nonce() for when there is no user ID. Provides plugins the ability to tie a nonce to some other characteristic of the session. props sc0ttkclark, fixes #21111.

File:

• trunk/wp-includes/pluggable.php (modified) (2 diffs)

trunk/wp-includes/pluggable.php

@@ -1252 +1252 @@
     $user = wp_get_current_user();
     $uid = (int) $user->ID;
+    if ( ! $uid )
+        $uid = apply_filters( 'nonce_user_logged_out', $uid, $action );
 
     $i = wp_nonce_tick();
@@ -1278 +1280 @@
     $user = wp_get_current_user();
     $uid = (int) $user->ID;
+    if ( ! $uid )
+        $uid = apply_filters( 'nonce_user_logged_out', $uid, $action );
 
     $i = wp_nonce_tick();