Make WordPress Core


Ignore:
Timestamp:
09/20/2022 11:55:21 AM (2 years ago)
Author:
audrasjb
Message:

Security: Salting functions: translate the phrase "put your unique phrase here".

In wp_salt() WordPress pre-populates the check for duplicate salt values with the default put your unique phrase here. As the wp-config.php file for non-en_US can be translated in downloaded packages, a translated version of this phrase ought to be in the pre-populated duplicate values array too.

Props peterwilsoncc, SergeyBiryukov, whaze, costdev, audrasjb.
Fixes #55937.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-includes/pluggable.php

    r54218 r54249  
    24092409        static $duplicated_keys;
    24102410        if ( null === $duplicated_keys ) {
    2411             $duplicated_keys = array( 'put your unique phrase here' => true );
     2411            $duplicated_keys = array(
     2412                'put your unique phrase here'       => true,
     2413                /*
     2414                 * translators: This string should only be translated if wp-config-sample.php is localized.
     2415                 * You can check the localized release package or
     2416                 * https://i18n.svn.wordpress.org/<locale code>/branches/<wp version>/dist/wp-config-sample.php
     2417                 */
     2418                __( 'put your unique phrase here' ) => true,
     2419            );
    24122420            foreach ( array( 'AUTH', 'SECURE_AUTH', 'LOGGED_IN', 'NONCE', 'SECRET' ) as $first ) {
    24132421                foreach ( array( 'KEY', 'SALT' ) as $second ) {
Note: See TracChangeset for help on using the changeset viewer.