[wp-trac] [WordPress Trac] #43667: signup_nonce_check does not use wp_verify_nonce.

WordPress Trac noreply at wordpress.org
Fri Apr 13 15:24:40 UTC 2018


#43667: signup_nonce_check does not use wp_verify_nonce.
--------------------------------------+------------------------
 Reporter:  herregroen                |       Owner:  flixos90
     Type:  defect (bug)              |      Status:  reviewing
 Priority:  normal                    |   Milestone:  5.0
Component:  Login and Registration    |     Version:  trunk
 Severity:  normal                    |  Resolution:
 Keywords:  has-patch has-unit-tests  |     Focuses:  multisite
--------------------------------------+------------------------
Changes (by flixos90):

 * keywords:  has-patch => has-patch has-unit-tests


Comment:

 [attachment:43667.diff] includes 4 unit tests calling
 `wpmu_validate_blog_signup()` and `wpmu_validate_user_signup()`, verifying
 that the hooked-in function works properly. I also made a minor change,
 making the error code more verbose with 'invalid_nonce' instead of
 'nonce'.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/43667#comment:8>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list