Changeset 6138

Timestamp:

09/19/2007 07:32:34 PM (17 years ago)

Author:

ryan

Message:

Extra protection in check_ajax_referer from mdawaffe. fixes #4939

File:

• trunk/wp-includes/pluggable.php (modified) (2 diffs)

trunk/wp-includes/pluggable.php

@@ -350 +350 @@
 if ( !function_exists('check_ajax_referer') ) :
 function check_ajax_referer() {
+    $current_name = '';
+    if ( ( $current = wp_get_current_user() ) && $current->ID )
+        $current_name = $current->data->user_login;
+    if ( !$current_name )
+        die('-1');
+
     $cookie = explode('; ', urldecode(empty($_POST['cookie']) ? $_GET['cookie'] : $_POST['cookie'])); // AJAX scripts must pass cookie=document.cookie
     foreach ( $cookie as $tasty ) {
@@ -357 +363 @@
             $pass = substr(strstr($tasty, '='), 1);
     }
-    if ( !wp_login( $user, $pass, true ) )
+
+    if ( $current_name != $user || !wp_login( $user, $pass, true ) )
         die('-1');
     do_action('check_ajax_referer');