[wp-trac] [WordPress Trac] #29542: hash_equals throws a fatal error (hhvm) when a nonce is sent as an integer

WordPress Trac noreply at wordpress.org
Fri Sep 5 17:55:49 UTC 2014


#29542: hash_equals throws a fatal error (hhvm) when a nonce is sent as an integer
--------------------------+-----------------------------
 Reporter:  newleaves     |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Plugins       |    Version:  4.0
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 This is a follow-up to #29217.

 can we add:
 {{{
 $nonce = (string) $nonce;
 }}}

 to the top of the '''wp_verify_nonce()''' function in ''/wp-
 includes/pluggable.php''

--
Ticket URL: <https://core.trac.wordpress.org/ticket/29542>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list