Changeset 44069 for branches/4.0/src/wp-activate.php

Timestamp:

12/13/2018 01:55:22 AM (6 years ago)

Author:

peterwilsoncc

Message:

Multisite: Validate activation links.

Merges [44048] to the 4.0 branch.

Location:

branches/4.0

Files:

• . (modified) (1 prop)
• src/wp-activate.php (modified) (1 diff)

branches/4.0/src/wp-activate.php

@@ -27 +27 @@
 $result = null;
 
-if ( ! empty( $_GET['key'] ) ) {
+if ( isset( $_GET['key'] ) && isset( $_POST['key'] ) && $_GET['key'] !== $_POST['key'] ) {
+    wp_die( __( 'A key value mismatch has been detected. Please follow the link provided in your activation email.' ), __( 'An error occurred during the activation' ), 400 );
+} elseif ( ! empty( $_GET['key'] ) ) {
     $key = $_GET['key'];
 } elseif ( ! empty( $_POST['key'] ) ) {