[wp-trac] [WordPress Trac] #38661: There is no one way of checking the nonce on plugin uninstallation
WordPress Trac
noreply at wordpress.org
Fri Nov 4 11:21:49 UTC 2016
#38661: There is no one way of checking the nonce on plugin uninstallation
--------------------------+-----------------------------
Reporter: szepe.viktor | Owner:
Type: enhancement | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Plugins | Version: 4.6.1
Severity: normal | Keywords:
Focuses: |
--------------------------+-----------------------------
Before the shiny AJAX plugin de/activation and un/installation in the
registered (register_uninstall_hook) plugin uninstall function we should
have used `check_admin_referer( 'bulk-plugins' );`
But now `check_ajax_referer( 'updates' );` works only unless the user has
disabled JavaScript.
I think there is no way to use only one function for validating the nonce.
Please advise.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/38661>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list