Changeset 3758

Timestamp:

05/02/06 22:08:34 (2 years ago)

Author:

ryan

Message:

nonce functions. #2678

Files:

• trunk/wp-includes/functions-compat.php (modified) (1 diff)
• trunk/wp-includes/functions.php (modified) (1 diff)
• trunk/wp-includes/pluggable-functions.php (modified) (2 diffs)

trunk/wp-includes/functions-compat.php

@@ -99 +99 @@
-}
-
+// From php.net
+if(!function_exists('http_build_query')) {
+   function http_build_query( $formdata, $numeric_prefix = null, $key = null ) {
+       $res = array();
+       foreach ((array)$formdata as $k=>$v) {
+           $tmp_key = urlencode(is_int($k) ? $numeric_prefix.$k : $k);
+           if ($key) $tmp_key = $key.'['.$tmp_key.']';
+           $res[] = ( ( is_array($v) || is_object($v) ) ? http_build_query($v, null, $tmp_key) : $tmp_key."=".urlencode($v) );
+       }
+       $separator = ini_get('arg_separator.output');
+       return implode($separator, $res);
+   }
+}
-?>

trunk/wp-includes/functions.php

@@ -1664 +1664 @@
-}
-
+function wp_nonce_url($actionurl, $action = -1) {
+    return add_query_arg('_wpnonce', wp_create_nonce($action), $actionurl);
+}
+
+function wp_nonce_field($action = -1) {
+    echo '<input type="hidden" name="_wpnonce" value="' . wp_create_nonce($action) . '" />';
+}
+
-?>

trunk/wp-includes/pluggable-functions.php

@@ -229 +229 @@
-
-if ( !function_exists('check_admin_referer') ) :
-
+
+
-    $adminurl = strtolower(get_settings('siteurl')).'/wp-admin';
-    $referer = strtolower($_SERVER['HTTP_REFERER']);
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-    do_action('check_admin_referer');
-
-
+
-
-if ( !function_exists('check_ajax_referer') ) :
@@ -461 +481 @@
-endif;
-
+if ( !function_exists('wp_verify_nonce') ) :
+function wp_verify_nonce($nonce, $action = -1) {
+    $user = wp_get_current_user();
+    $uid = $user->id;
+
+    $i = ceil(time() / 43200);
+
+    //Allow for expanding range, but only do one check if we can
+    if( substr(md5($i . DB_PASSWORD . $action . $uid), -12, 10) == $nonce || substr(md5(($i - 1) . DB_PASSWORD . $action . $uid), -12, 10) == $nonce )
+        return true;
+    return false;
+}
+endif;
+
+if ( !function_exists('wp_create_nonce') ) :
+function wp_create_nonce($action = -1) {
+    $user = wp_get_current_user();
+    $uid = $user->id;
+
+    $i = ceil(time() / 43200);
+    
+    return substr(md5($i . DB_PASSWORD . $action . $uid), -12, 10);
+}
+endif;
+
-?>