WordPress.org
Get WordPress

Make WordPress Core

Opened 15 years ago

Closed 14 years ago

#11664 closed enhancement (wontfix)

Constant instead of a variable should be used

Reported by: hakre's profile hakre Owned by: ryan's profile ryan
Milestone: Priority: normal
Severity: normal Version: 2.9
Component: Security Keywords:
Focuses: Cc:

Description

the global variable $wp_default_secret_key is used to determine wether the has provided secret keys or not.

to not get it altered between it's definition and use, the variable should be replaced with a constant.

Change History (4)

#1 @hakre
15 years ago

the has = the user has.

#2 @nacin
15 years ago

In reviewing #12081 I noticed this ticket.

I'm not sure of the ramifications of preventing it from being changed (or allowing it to be changed), but converting it to a constant will break any plugins that override wp_salt() and utilize the variable.

#3 @dd32
14 years ago

  • Milestone changed from 3.0 to Future Release
  • Type changed from defect (bug) to enhancement

#4 @nacin
14 years ago

  • Milestone Future Release deleted
  • Resolution set to wontfix
  • Status changed from new to closed

There's a reason it's a variable. It gets changed by translators in their locale .php file. Also described in #12081 and previous commits (see svn blame).

Note: See TracTickets for help on using tickets.