Changeset 33743

Timestamp:

08/25/2015 11:24:39 PM (11 years ago)

Author:

SergeyBiryukov

Message:

Fire the check_ajax_referer action on failure as well as success.

See [33017] for check_admin_referer.

props egill.
fixes #33342.

File:

• trunk/src/wp-includes/pluggable.php (modified) (2 diffs)

trunk/src/wp-includes/pluggable.php

@@ -1140 +1140 @@
         $result = wp_verify_nonce( $nonce, $action );
 
-        if ( $die && false === $result ) {
-                if ( defined( 'DOING_AJAX' ) && DOING_AJAX )
-                        wp_die( -1 );
-                else
-                        die( '-1' );
-        }
-
         /**
          * Fires once the AJAX request has been validated or not.
@@ -1157 +1150 @@
          */
         do_action( 'check_ajax_referer', $action, $result );
+
+        if ( $die && false === $result ) {
+                if ( defined( 'DOING_AJAX' ) && DOING_AJAX ) {
+                        wp_die( -1 );
+                } else {
+                        die( '-1' );
+                }
+        }
 
         return $result;