[wp-hackers] Rethinking check_admin_referer()

Denis de Bernardy denis at semiologic.com
Fri Apr 21 21:23:11 GMT 2006


woops... this belongs somewhere else in the thread, but those who followed
it probably knew instantly. for the others, I meant storing unique tokens
and the like, which was discussed earlier for so-called nonces, hashes, etc.

> pardon for asking, but what's the point in storing this into 
> the db or a cookie. doesn't it belong in a session variable?

D.



More information about the wp-hackers mailing list