Changeset 54249 for trunk/src/wp-includes/class-wp-recovery-mode-cookie-service.php

Timestamp:

09/20/2022 11:55:21 AM (2 years ago)

Author:

audrasjb

Message:

Security: Salting functions: translate the phrase "put your unique phrase here".

In wp_salt() WordPress pre-populates the check for duplicate salt values with the default put your unique phrase here. As the wp-config.php file for non-en_US can be translated in downloaded packages, a translated version of this phrase ought to be in the pre-populated duplicate values array too.

Props peterwilsoncc, SergeyBiryukov, whaze, costdev, audrasjb.
Fixes #55937.

File:

• trunk/src/wp-includes/class-wp-recovery-mode-cookie-service.php (modified) (1 diff)

trunk/src/wp-includes/class-wp-recovery-mode-cookie-service.php

@@ -199 +199 @@
      */
     private function recovery_mode_hash( $data ) {
-        if ( ! defined( 'AUTH_KEY' ) || AUTH_KEY === 'put your unique phrase here' ) {
+        if ( ! defined( 'AUTH_KEY' ) || AUTH_KEY === __( 'put your unique phrase here' ) ) {
             $auth_key = get_site_option( 'recovery_mode_auth_key' );