Changeset 45544 for trunk/src/wp-includes/class-wp-recovery-mode.php

Timestamp:

06/17/2019 06:36:28 PM (5 years ago)

Author:

SergeyBiryukov

Message:

Bootstrap/Load: Return a 403 error code when the recovery mode cookie is invalid or expired, or the exit recovery mode nonce check failed.

Props david.binda, spacedmonkey.
Fixes #47479.

File:

• trunk/src/wp-includes/class-wp-recovery-mode.php (modified) (3 diffs)

trunk/src/wp-includes/class-wp-recovery-mode.php

@@ -240 +240 @@
 
         if ( ! isset( $_GET['_wpnonce'] ) || ! wp_verify_nonce( $_GET['_wpnonce'], self::EXIT_ACTION ) ) {
-            wp_die( __( 'Exit recovery mode link expired.' ) );
+            wp_die( __( 'Exit recovery mode link expired.' ), 403 );
         }
 
@@ -273 +273 @@
             $this->cookie_service->clear_cookie();
 
-            wp_die( $validated, '' );
+            $validated->add_data( array( 'status' => 403 ) );
+            wp_die( $validated );
         }
 
@@ -280 +281 @@
             $this->cookie_service->clear_cookie();
 
-            wp_die( $session_id, '' );
+            $session_id->add_data( array( 'status' => 403 ) );
+            wp_die( $session_id );
         }