WordPress.org
Get WordPress

Make WordPress Core

Opened 20 years ago

Closed 20 years ago

Last modified 3 years ago

#2776 closed defect (bug) (fixed)

Editing other users is not properly nonced

Reported by: markjaquith Owned by: markjaquith
Priority: normal Milestone:
Component: Administration Version: 2.0.2
Severity: normal Keywords: nonce has-patch commit
Cc: Focuses:

Description

If you edit another user's profile/information, you get the "Are you sure?" prompt. Attached patch fixes it.

#2761 compounds matters, naturally.

Version: 2.0.3

Attachments (1)

correctly_nonce_user_editing.diff​ (555 bytes ) - added by markjaquith 20 years ago.
patch for /branches/2.0/

Download all attachments as: .zip

Change History (6)

@markjaquith
20 years ago

patch for /branches/2.0/

#1 @markjaquith
20 years ago

  • Owner changed from anonymous to markjaquith
  • Status new → assigned

I updated my "WordPress 2.0.3 Tuneup" plugin to fix this issue (version 0.2), so WordPress 2.0.3 users aren't stuck with this annoyance until our next release.

​http://txfx.net/code/wordpress/wordpress-203-tuneup/

#2 @ryan
20 years ago

  • Resolution → fixed
  • Status assigned → closed

(In [3838]) Edit profile nonce fix from markjaquith. fixes #2776

#3 @ryan
20 years ago

  • Resolution → fixed

(In [3839]) Edit profile nonce fix from markjaquith. fixes #2776

#4 @ryan
20 years ago

  • Milestone → 2.0.4

#5 @(none)
20 years ago

  • Milestone 2.0.4

Milestone 2.0.4 deleted

Note: See TracTickets for help on using tickets.