Changeset 28126 for trunk/src/wp-admin/update.php

Timestamp:

04/15/2014 01:15:43 AM (11 years ago)

Author:

nacin

Message:

Theme Installer: Revert to proxying through PHP for WordPress.org API requests.

This is to ensure we have valid installation nonces, though we've run into this as a problem previously (see #27639, #27581, #27055).

A tad slower, but we gained speed in 3.9 by simplifying the request made to the API.

props ocean90.
fixes #27798.

File:

• trunk/src/wp-admin/update.php (modified) (1 diff)

trunk/src/wp-admin/update.php

@@ -203 +203 @@
         include_once ABSPATH . 'wp-admin/includes/theme-install.php'; //for themes_api..
 
-        check_admin_referer( 'install-theme' );
+        check_admin_referer( 'install-theme_' . $theme );
         $api = themes_api('theme_information', array('slug' => $theme, 'fields' => array('sections' => false, 'tags' => false) ) ); //Save on a bit of bandwidth.