[wp-trac] [WordPress Trac] #38661: There is no one way of checking the nonce on plugin uninstallation

WordPress Trac noreply at wordpress.org
Sat Feb 3 05:33:13 UTC 2018


#38661: There is no one way of checking the nonce on plugin uninstallation
--------------------------+------------------------------
 Reporter:  szepe.viktor  |       Owner:
     Type:  enhancement   |      Status:  closed
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Plugins       |     Version:  4.6.1
 Severity:  normal        |  Resolution:  worksforme
 Keywords:  close         |     Focuses:
--------------------------+------------------------------
Changes (by szepe.viktor):

 * keywords:   => close
 * status:  new => closed
 * resolution:   => worksforme


Comment:

 You must wrap `check_admin_referer()` in `wp_doing_ajax()` as all AJAX
 plugin actions check their nonces!

--
Ticket URL: <https://core.trac.wordpress.org/ticket/38661#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list