mirror of
https://github.com/WordPress/WordPress.git
synced 2024-10-01 00:27:38 +02:00
Fallback to admin referer check instead of nonce if no action is given to check_admin_referer(). For plugin compatibility.
git-svn-id: http://svn.automattic.com/wordpress/branches/2.0@3780 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
parent
a512f85b1f
commit
a5547588d7
@ -232,7 +232,9 @@ function check_admin_referer($action = -1) {
|
|||||||
global $pagenow;
|
global $pagenow;
|
||||||
$adminurl = strtolower(get_settings('siteurl')).'/wp-admin';
|
$adminurl = strtolower(get_settings('siteurl')).'/wp-admin';
|
||||||
$referer = strtolower($_SERVER['HTTP_REFERER']);
|
$referer = strtolower($_SERVER['HTTP_REFERER']);
|
||||||
if ( !wp_verify_nonce($_REQUEST['_wpnonce'], $action) ) {
|
if ( !wp_verify_nonce($_REQUEST['_wpnonce'], $action) &&
|
||||||
|
!(-1 == $action && strstr($referer, $adminurl)) ) {
|
||||||
|
|
||||||
$html = "<!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Strict//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd'>\n<html xmlns='http://www.w3.org/1999/xhtml' lang='en' xml:lang='en'>\n\n";
|
$html = "<!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Strict//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd'>\n<html xmlns='http://www.w3.org/1999/xhtml' lang='en' xml:lang='en'>\n\n";
|
||||||
$html .= "<head>\n\t<title>" . __('WordPress Confirmation') . "</title>\n";
|
$html .= "<head>\n\t<title>" . __('WordPress Confirmation') . "</title>\n";
|
||||||
$html .= "</head>\n<body>\n";
|
$html .= "</head>\n<body>\n";
|
||||||
|
Loading…
Reference in New Issue
Block a user