[wp-trac] [WordPress Trac] #24447: Avoid loosing data after nonces expire

WordPress Trac noreply at wordpress.org
Wed May 29 08:16:59 UTC 2013


#24447: Avoid loosing data after nonces expire
----------------------------+------------------
 Reporter:  azaozz          |       Owner:
     Type:  defect (bug)    |      Status:  new
 Priority:  normal          |   Milestone:  3.6
Component:  Administration  |     Version:
 Severity:  normal          |  Resolution:
 Keywords:                  |
----------------------------+------------------

Comment (by azaozz):

 If a user hits the AYS (nonce expired) after trying to save from the Edit
 Post screen, the post data would be saved in session storage. Clicking the
 AYS link or the back button will load the screen and offer to restore the
 post. If another user is currently editing the same post, this won't be
 accessible until the current user takes over.

 If we refresh the basic nonces (regardless that they have expired),
 another user may have edited and/or published the post and the current
 screen will not reflect that. Saving the post will overwrite it to its
 current state. Also refreshing the nonces will not refresh any nonces
 added by plugins.

 For all other screens we can (at least) warn the user that the page has
 expired and needs to be reloaded before any changes can be saved.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/24447#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list