[wp-hackers] Rethinking check_admin_referer()

Paul Mitchell wp-hackers at paul-mitchell.me.uk
Fri Apr 21 21:28:00 GMT 2006


Owen Winkler wrote:
> Paul Mitchell wrote:
>> Sorry, I'm getting confused. I was thinking of DB_PASSWORD. I can't find
>> a definition for DB_PASS anywhere in trunk.
>
> Touché.
>
> Still, it doesn't make your point about using the database password to
> generate a hash any more valid.
I beg your pardon? I said I would think twice about doing it. I wasn't
making a point other than to state my own opinion of something you asked
interested parties to review.

Paul



More information about the wp-hackers mailing list