Changeset 39697 for branches/4.7/src/wp-includes/script-loader.php

Timestamp:

01/05/2017 08:17:19 AM (8 years ago)

Author:

dd32

Message:

Upgrade/Install: Avoid creating nonce during installation.

When installing and using database-saved salts, wp_create_nonce() causes database errors as wp_salt() attempts to insert into the not-yet-created options table. Since authentication isn't available during installation, we can safely skip creating a nonce.

Props nullvariable, pento, dd32, rmccue.
Merges [39684] to the 4.7 branch.
Fixes #39047.

Location:

branches/4.7

Files:

• . (modified) (1 prop)
• src/wp-includes/script-loader.php (modified) (1 diff)

branches/4.7/src/wp-includes/script-loader.php

@@ -508 +508 @@
     did_action( 'init' ) && $scripts->localize( 'wp-api', 'wpApiSettings', array(
         'root'          => esc_url_raw( get_rest_url() ),
-        'nonce'         => wp_create_nonce( 'wp_rest' ),
+        'nonce'         => ( wp_installing() && ! is_multisite() ) ? '' : wp_create_nonce( 'wp_rest' ),
         'versionString' => 'wp/v2/',
     ) );