[wp-trac] [WordPress Trac] #4221: Allow pure wp_nonce_url urls

WordPress Trac wp-trac at lists.automattic.com
Wed Aug 15 03:44:12 UTC 2012


#4221: Allow pure wp_nonce_url urls
----------------------------+-----------------------------
 Reporter:  filosofo        |       Owner:  anonymous
     Type:  enhancement     |      Status:  reopened
 Priority:  normal          |   Milestone:  Future Release
Component:  Administration  |     Version:  2.3
 Severity:  normal          |  Resolution:
 Keywords:  close           |
----------------------------+-----------------------------

Comment (by charliespider):

 I realize this is old, but I am experiencing the same thing as crashutah,
 where combining wp_nonce_url with wp_redirect results in & being converted
 to &

 Then, after the redirect, the & gets split with amp; getting prepended
 to your GET variable.

 For example:
 {{{
 #!php
 $query_args = array( 'action' => 'action_value');
 $admin_url = admin_url( 'admin.php?page=myadminpage' );
 $redirect_url = wp_nonce_url( add_query_arg( $query_args, $admin_url ),
 'my_nonce' );
 wp_redirect( $redirect_url );
 exit();
 }}}

 results in :
 {{{
 #!php
 printr_r( $_REQUEST );
 Array
 (
     [page] => myadminpage
     [amp;action] => action_value
     [amp;_wpnonce] => c0306b37d5
 )
 }}}

 Don't know if this deserves to be in a separate ticket.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/4221#comment:8>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list