Changeset 9025 for trunk/wp-content/themes/classic/comments.php

Timestamp:

09/28/2008 09:05:37 PM (18 years ago)

Author:

westi

Message:

Protect log out actions against CSRF. Props markjaquith and ionfish. Fixes #7790.

File:

• trunk/wp-content/themes/classic/comments.php (modified) (1 diff)

trunk/wp-content/themes/classic/comments.php

@@ -50 +50 @@
 <?php if ( $user_ID ) : ?>
 
-<p><?php printf(__('Logged in as %s.'), '<a href="'.get_option('siteurl').'/wp-admin/profile.php">'.$user_identity.'</a>'); ?> <a href="<?php echo get_option('siteurl'); ?>/wp-login.php?action=logout" title="<?php _e('Log out of this account') ?>"><?php _e('Log out &raquo;'); ?></a></p>
+<p><?php printf(__('Logged in as %s.'), '<a href="'.get_option('siteurl').'/wp-admin/profile.php">'.$user_identity.'</a>'); ?> <a href="<?php echo wp_logout_url(get_permalink()); ?>" title="<?php _e('Log out of this account') ?>"><?php _e('Log out &raquo;'); ?></a></p>
 
 <?php else : ?>