[wp-trac] [WordPress Trac] #28783: Notice on "get_instance_hash_key()"

WordPress Trac noreply at wordpress.org
Mon Jul 7 23:27:35 UTC 2014


#28783: Notice on "get_instance_hash_key()"
-------------------------+-----------------------------
 Reporter:  juliobox     |      Owner:
     Type:  enhancement  |     Status:  new
 Priority:  normal       |  Milestone:  Awaiting Review
Component:  Widgets      |    Version:  3.9
 Severity:  normal       |   Keywords:
  Focuses:               |
-------------------------+-----------------------------
 Hello

 In ''get_instance_hash_key()'' in
 https://core.trac.wordpress.org/browser/tags/3.9/src/wp-includes/class-wp-
 customize-widgets.php#L1140 tries to read a constant, hardcoded.
 {{{
 $hash = md5( AUTH_KEY . serialize( $instance ) );
 }}}

 I propose to do it in a good way, as usual in fact:
 {{{
 $hash = md5( wp_salt( 'auth' ) . serialize( $instance ) );
 }}}

 Thank you

--
Ticket URL: <https://core.trac.wordpress.org/ticket/28783>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list