[wp-trac] Re: [WordPress Trac] #2678: Nonces instead of referers

WordPress Trac wp-trac at lists.automattic.com
Wed Apr 26 20:00:56 GMT 2006


#2678: Nonces instead of referers
----------------------------+-----------------------------------------------
       Id:  2678            |      Status:  new                     
Component:  Administration  |    Modified:  Wed Apr 26 20:00:56 2006
 Severity:  normal          |   Milestone:                          
 Priority:  normal          |     Version:  2.1                     
    Owner:  anonymous       |    Reporter:  ringmaster              
----------------------------+-----------------------------------------------
Comment (by ringmaster):

 By my calculations, $i would change every 12 hours, not every 30 days.
 That makes the window 24 hours when checking "this nonce" and "the one
 before this one".

 For example:
 {{{
 $t = strtotime('2006-04-24 12:00:00');
 $i = ceil($t / 43200);
 echo "$i\n";
 $t = strtotime('2006-04-25 00:00:00');
 $i = ceil($t / 43200);
 echo "$i\n";
 }}}
 Output:
 {{{
 26526
 26527
 }}}

 We can (should) make 43200 into a constant and then you would be able to
 change the window as preferred.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/2678>
WordPress Trac <http://wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list