Changeset 33743

Timestamp:

08/25/2015 11:24:39 PM (9 years ago)

Author:

SergeyBiryukov

Message:

Fire the check_ajax_referer action on failure as well as success.

See [33017] for check_admin_referer.

props egill.
fixes #33342.

File:

• trunk/src/wp-includes/pluggable.php (modified) (2 diffs)

trunk/src/wp-includes/pluggable.php

@@ -1140 +1140 @@
     $result = wp_verify_nonce( $nonce, $action );
 
-    if ( $die && false === $result ) {
-        if ( defined( 'DOING_AJAX' ) && DOING_AJAX )
-            wp_die( -1 );
-        else
-            die( '-1' );
-    }
-
     /**
      * Fires once the AJAX request has been validated or not.
@@ -1157 +1150 @@
      */
     do_action( 'check_ajax_referer', $action, $result );
+
+    if ( $die && false === $result ) {
+        if ( defined( 'DOING_AJAX' ) && DOING_AJAX ) {
+            wp_die( -1 );
+        } else {
+            die( '-1' );
+        }
+    }
 
     return $result;