Changeset 29620 for trunk/src

Timestamp:

08/26/2014 07:38:51 AM (12 years ago)

Author:

nacin

Message:

Require a non-empty $nonce value in wp_verify_nonce().

props ocean90.
fixes #29217.

File:

• trunk/src/wp-includes/pluggable.php (modified) (1 diff)

trunk/src/wp-includes/pluggable.php

@@ -1708 +1708 @@
     }
 
+    if ( empty( $nonce ) ) {
+        return false;
+    }
+
     $token = wp_get_session_token();
     $i = wp_nonce_tick();