Changeset 44048 for trunk/src/wp-activate.php

Timestamp:

12/13/2018 01:25:03 AM (6 years ago)

Author:

peterwilsoncc

Message:

Multisite: Validate activation links.

File:

• trunk/src/wp-activate.php (modified) (1 diff)

trunk/src/wp-activate.php

@@ -27 +27 @@
 $result = null;
 
-if ( ! empty( $_GET['key'] ) ) {
+if ( isset( $_GET['key'] ) && isset( $_POST['key'] ) && $_GET['key'] !== $_POST['key'] ) {
+    wp_die( __( 'A key value mismatch has been detected. Please follow the link provided in your activation email.' ), __( 'An error occurred during the activation' ), 400 );
+} elseif ( ! empty( $_GET['key'] ) ) {
     $key = $_GET['key'];
 } elseif ( ! empty( $_POST['key'] ) ) {