[wp-hackers] Changeset 11804

[Will Anderson]

On Tue, Aug 11, 2009 at 3:32 PM, Chris Jean <gaarai at gaarai.com> wrote:

> The code actually has that exact test in it. wp-login.php line 190-191:
>
>    if ( empty( $key ) )
>        return new WP_Error('invalid_key', __('Invalid key'));
>
> What it's not doing is a check for an array, which is why this works. So
> not only do you have to validate, you have to type check.
>
> Chris Jean
> http://gaarai.com/
> http://wp-roadmap.com/
> http://dnsyogi.com/
>

There's actually a type check in Trunk (now)
http://core.trac.wordpress.org/browser/trunk/wp-login.php?rev=11803#L190

-- 
Will Anderson
http://www.itsananderson.com/