[wp-trac] [WordPress Trac] #21111: Make nonce unique for users AND non-users

WordPress Trac wp-trac at lists.automattic.com
Thu Sep 13 17:17:49 UTC 2012


#21111: Make nonce unique for users AND non-users
-------------------------+---------------------
 Reporter:  sc0ttkclark  |       Owner:  nacin
     Type:  enhancement  |      Status:  closed
 Priority:  normal       |   Milestone:  3.5
Component:  Security     |     Version:  3.4
 Severity:  normal       |  Resolution:  fixed
 Keywords:  has-patch    |
-------------------------+---------------------
Changes (by nacin):

 * owner:   => nacin
 * status:  new => closed
 * resolution:   => fixed


Comment:

 In [21837]:
 {{{
 #!CommitTicketReference repository="" revision="21837"
 Add nonce_user_logged_out filters to wp_create_nonce() and
 wp_verify_nonce() for when there is no user ID. Provides plugins the
 ability to tie a nonce to some other characteristic of the session. props
 sc0ttkclark, fixes #21111.
 }}}

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/21111#comment:10>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list