From b1474a8a209eafdcca1f14a868ff963587f0156b Mon Sep 17 00:00:00 2001 From: Sergey Biryukov Date: Tue, 25 Apr 2023 14:57:23 +0000 Subject: [PATCH] General: Don't pass `$action` to `wp_get_session_token()` in `wp_create_nonce()`. The parameter appears to have been passed by accident, as the function does not accept any parameters. Follow-up to [54218]. Props malavvasita, hztyfoon, dd32. Fixes #58181. Built from https://develop.svn.wordpress.org/trunk@55685 git-svn-id: http://core.svn.wordpress.org/trunk@55197 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-includes/pluggable.php | 2 +- wp-includes/version.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/wp-includes/pluggable.php b/wp-includes/pluggable.php index 8081f9e62c..2a93f91325 100644 --- a/wp-includes/pluggable.php +++ b/wp-includes/pluggable.php @@ -2359,7 +2359,7 @@ if ( ! function_exists( 'wp_create_nonce' ) ) : $uid = apply_filters( 'nonce_user_logged_out', $uid, $action ); } - $token = wp_get_session_token( $action ); + $token = wp_get_session_token(); $i = wp_nonce_tick( $action ); return substr( wp_hash( $i . '|' . $action . '|' . $uid . '|' . $token, 'nonce' ), -12, 10 ); diff --git a/wp-includes/version.php b/wp-includes/version.php index e00f371568..e9171915a1 100644 --- a/wp-includes/version.php +++ b/wp-includes/version.php @@ -16,7 +16,7 @@ * * @global string $wp_version */ -$wp_version = '6.3-alpha-55684'; +$wp_version = '6.3-alpha-55685'; /** * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.