Changeset 52088

Timestamp:

11/09/2021 11:05:32 PM (3 years ago)

Author:

peterwilsoncc

Message:

Login and Registration: Improve messaging for invalid log-out nonces.

Clarify messaging of when wp_nonce_ays('log-out') is called due to an invalid log out nonce. The HTML title now describes the action being taken rather than using the generic text "something went wrong".

Props davidkryzaniak, hellofromTonya, peterwilsoncc.
Fixes #52600.

File:

• trunk/src/wp-includes/functions.php (modified) (2 diffs)

trunk/src/wp-includes/functions.php

@@ -3470 +3470 @@
  */
 function wp_nonce_ays( $action ) {
+    // Default title and response code.
+    $title         = __( 'Something went wrong.' );
+    $response_code = 403;
+
     if ( 'log-out' === $action ) {
-        $html = sprintf(
+        $title = sprintf(
             /* translators: %s: Site title. */
             __( 'You are attempting to log out of %s' ),
             get_bloginfo( 'name' )
         );
+        $html        = $title;
         $html       .= '</p><p>';
         $redirect_to = isset( $_REQUEST['redirect_to'] ) ? $_REQUEST['redirect_to'] : '';
@@ -3495 +3500 @@
     }
 
-    wp_die( $html, __( 'Something went wrong.' ), 403 );
+    wp_die( $html, $title, $response_code );
 }