[wp-trac] Re: [WordPress Trac] #2678: Nonces instead of referers

[WordPress Trac]

#2678: Nonces instead of referers
----------------------------+-----------------------------------------------
       Id:  2678            |      Status:  new                     
Component:  Administration  |    Modified:  Thu Apr 27 06:17:59 2006
 Severity:  normal          |   Milestone:                          
 Priority:  normal          |     Version:  2.1                     
    Owner:  anonymous       |    Reporter:  ringmaster              
----------------------------+-----------------------------------------------
Comment (by markjaquith):

 If you can only control the 43200 number, you're stuck with accepting a
 range of X to 2X.  How about making the code so that if can decrement $i a
 specified number of times, as well as being able to set the 43200 number?
 That way, you could decrease the denominator, but increase the number of
 decrementats, so you could set up a nonce that expires in 30 to 31 minutes
 (denominator of 60, 30 decrements).  Obviously this would make it slower,
 but it'd be nice to give people the option.  I'm fine with the default
 12-24 as the standard.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/2678>
WordPress Trac <http://wordpress.org/>
WordPress blogging software