Make WordPress Core


Ignore:
Timestamp:
12/13/2018 01:29:42 AM (7 years ago)
Author:
peterwilsoncc
Message:

Multisite: Validate activation links.

Merges [44048] to the 5.0 branch.

Location:
branches/5.0
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/5.0

  • branches/5.0/src/wp-includes/class-wp.php

    r41686 r44050  
    290290            if ( isset( $this->extra_query_vars[$wpvar] ) )
    291291                $this->query_vars[$wpvar] = $this->extra_query_vars[$wpvar];
     292            elseif ( isset( $_GET[ $wpvar ] ) && isset( $_POST[ $wpvar ] ) && $_GET[ $wpvar ] !== $_POST[ $wpvar ] )
     293                wp_die( __( 'A variable mismatch has been detected.' ), __( 'Sorry, you are not allowed to view this item.' ), 400 );
    292294            elseif ( isset( $_POST[$wpvar] ) )
    293295                $this->query_vars[$wpvar] = $_POST[$wpvar];
Note: See TracChangeset for help on using the changeset viewer.