Changeset 42246 for trunk/src/wp-admin/includes/file.php

Timestamp:

11/27/2017 03:43:11 AM (8 years ago)

Author:

dd32

Message:

Theme Editior: Base the nonce on a simpler combination of fields, for easier debugging & reading.

See #42609.
Fixes #42705.

File:

• trunk/src/wp-admin/includes/file.php (modified) (2 diffs)

trunk/src/wp-admin/includes/file.php

@@ -415 +415 @@
         }
 
-        $real_file = $theme->get_stylesheet_directory() . '/' . $file;
-        if ( ! wp_verify_nonce( $args['nonce'], 'edit-theme_' . $real_file . $stylesheet ) ) {
+        if ( ! wp_verify_nonce( $args['nonce'], 'edit-theme_' . $stylesheet . '_' . $file ) ) {
             return new WP_Error( 'nonce_failure' );
         }
@@ -451 +450 @@
         }
 
+        $real_file = $theme->get_stylesheet_directory() . '/' . $file;
+
         $is_active = ( get_stylesheet() === $stylesheet || get_template() === $stylesheet );
+
     } else {
         return new WP_Error( 'missing_theme_or_plugin' );