[wp-trac] [WordPress Trac] #16778: wordpress is leaking user/blog information during wp_version_check()

WordPress Trac noreply at wordpress.org
Tue Jan 10 20:59:17 UTC 2017


#16778: wordpress is leaking user/blog information during wp_version_check()
----------------------------+------------------------------
 Reporter:  investici       |       Owner:
     Type:  enhancement     |      Status:  reopened
 Priority:  normal          |   Milestone:  Awaiting Review
Component:  Administration  |     Version:
 Severity:  minor           |  Resolution:
 Keywords:  has-patch       |     Focuses:
----------------------------+------------------------------

Comment (by lukecavanagh):

 WooCommerce has an opt-out option on the onboarding, so tracking
 collection can be an opted out of on the setup wizard on the final step.

 https://plugins.svn.wordpress.org/woocommerce/tags/2.6.11/includes/admin
 /class-wc-admin-setup-wizard.php


 {{{
 /**
          * Actions on the final step.
          */
         private function wc_setup_ready_actions() {
                 WC_Admin_Notices::remove_notice( 'install' );
                 if ( isset( $_GET['wc_tracker_optin'] ) && isset(
 $_GET['wc_tracker_nonce'] ) && wp_verify_nonce( $_GET['wc_tracker_nonce'],
 'wc_tracker_optin' ) ) {
                         update_option( 'woocommerce_allow_tracking', 'yes'
 );
                         WC_Tracker::send_tracking_data( true );
                 } elseif ( isset( $_GET['wc_tracker_optout'] ) && isset(
 $_GET['wc_tracker_nonce'] ) && wp_verify_nonce( $_GET['wc_tracker_nonce'],
 'wc_tracker_optout' ) ) {
                         update_option( 'woocommerce_allow_tracking', 'no'
 );
                 }
         }
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/16778#comment:82>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list