Changeset 6345 for trunk/wp-login.php

Timestamp:

11/27/2007 08:03:33 AM (17 years ago)

Author:

ryan

Message:

Check if REQUEST_METHOD is POST rather than cheecking if _POST is empty to determine if we were called via POST. Props xknown. fixes #5365

File:

• trunk/wp-login.php (modified) (6 diffs)

trunk/wp-login.php

@@ -69 +69 @@
 } // End of login_header()
 
-
+$http_post = ('POST' == $_SERVER['REQUEST_METHOD']);
 switch ($action) {
 
@@ -91 +91 @@
     $user_pass = '';
 
-    if ( $_POST ) {
+    if ( $http_post ) {
         if ( empty( $_POST['user_login'] ) )
             $errors['user_login'] = __('<strong>ERROR</strong>: The username field is empty.');
@@ -213 +213 @@
     }
 
-    if ( $_POST ) {
+    if ( $http_post ) {
         require_once( ABSPATH . WPINC . '/registration.php');
 
@@ -296 +296 @@
         $redirect_to = $_REQUEST['redirect_to'];
 
-    if ( $_POST ) {
+    if ( $http_post ) {
         $user_login = $_POST['log'];
         $user_login = sanitize_user( $user_login );
@@ -313 +313 @@
 
     // If cookies are disabled we can't log in even with a valid user+pass
-    if ( $_POST && empty($_COOKIE[TEST_COOKIE]) )
+    if ( $http_post && empty($_COOKIE[TEST_COOKIE]) )
         $errors['test_cookie'] = __('<strong>ERROR</strong>: WordPress requires Cookies but your browser does not support them or they are blocked.');
 
@@ -335 +335 @@
     }
 
-    if ( $_POST && empty( $user_login ) )
+    if ( $http_post && empty( $user_login ) )
         $errors['user_login'] = __('<strong>ERROR</strong>: The username field is empty.');
-    if ( $_POST && empty( $user_pass ) )
+    if ( $http_post && empty( $user_pass ) )
         $errors['user_pass'] = __('<strong>ERROR</strong>: The password field is empty.');