Changeset 24273 for trunk/wp-admin/includes/misc.php

Timestamp:

05/16/2013 03:47:09 AM (12 years ago)

Author:

azaozz

Message:

Separate the nonces update from checking the post lock. Fix scheduling the logged out check. See #23697, see #23295.

File:

• trunk/wp-admin/includes/misc.php (modified) (2 diffs)

trunk/wp-admin/includes/misc.php

@@ -624 +624 @@
         }
 
+        $response['wp-refresh-post-lock'] = $send;
+    }
+
+    return $response;
+}
+add_filter( 'heartbeat_received', 'wp_refresh_post_lock', 10, 3 );
+
+/**
+ * Check nonce expiration on the New/Edit Post screen and refresh if needed
+ *
+ * @since 3.6
+ */
+function wp_refresh_post_nonces( $response, $data, $screen_id ) {
+    if ( 'post' == $screen_id && array_key_exists( 'wp-refresh-post-nonces', $data ) ) {
+        $received = $data['wp-refresh-post-nonces'];
+
+        if ( ! $post_id = absint( $received['post_id'] ) )
+            return $response;
+
+        if ( ! current_user_can('edit_post', $post_id) )
+            return $response;
+
         if ( ! empty( $received['post_nonce'] ) && 2 === wp_verify_nonce( $received['post_nonce'], 'update-post_' . $post_id ) ) {
-            $send['update_nonces'] = array(
+            $response['wp-refresh-post-nonces'] = array(
                 'replace-autosavenonce' => wp_create_nonce('autosave'),
                 'replace-getpermalinknonce' => wp_create_nonce('getpermalink'),
@@ -634 +656 @@
             );
         }
-
-        $response['wp-refresh-post-lock'] = $send;
     }
 
     return $response;
 }
-add_filter( 'heartbeat_received', 'wp_refresh_post_lock', 10, 3 );
+add_filter( 'heartbeat_received', 'wp_refresh_post_nonces', 10, 3 );
 
 /**