Changeset 59459

Timestamp:

11/25/2024 07:01:57 PM (6 days ago)

Author:

SergeyBiryukov

Message:

Coding Standards: Cast $expired to an integer in wp_validate_auth_cookie().

This resolves an issue where the string $expired value is used both in a comparison and addition with integer values.

Follow-up to [6387], [28424], [45590].

Props justlevine.
See #52217.

File:

• trunk/src/wp-includes/pluggable.php (modified) (1 diff)

trunk/src/wp-includes/pluggable.php

@@ -711 +711 @@
         $hmac       = $cookie_elements['hmac'];
         $token      = $cookie_elements['token'];
-        $expired    = $cookie_elements['expiration'];
         $expiration = $cookie_elements['expiration'];
+
+        $expired = (int) $expiration;
 
         // Allow a grace period for POST and Ajax requests.